504 B IP
ASN #20940 Akamai International B.V.
Hash 116d4d1edb43ea3783c92812f245f108
02c09fc6450c50f5d2f7f6162fed01cf2c4bf6b8
f661a4c5b81edb82ec095d2d50b655e19536630577352b6abbfc3962adf3454c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F661A4C5B81EDB82EC095D2D50B655E19536630577352B6ABBFC3962ADF3454C"
Last-Modified: Sun, 23 Jun 2024 01:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5216
Expires: Mon, 24 Jun 2024 14:32:35 GMT
Date: Mon, 24 Jun 2024 13:05:39 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 31c219b3ac9b4615f1a78cd882995e6c
1bb1aedb59500ceabd4f44ae9b7317c544084afd
6e8de7454df9b981f3c2bd8746558f3eb5c48599c66fc0f5301169c0ed42c8fe
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6E8DE7454DF9B981F3C2BD8746558F3EB5C48599C66FC0F5301169C0ED42C8FE"
Last-Modified: Sat, 22 Jun 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10692
Expires: Mon, 24 Jun 2024 16:03:52 GMT
Date: Mon, 24 Jun 2024 13:05:40 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash 5921b10ddbe0b24f0a8edead6ec181b2
6691a5ac00a00feed5de61cd277ca741b2c29862
3c107c0a5dd06bc96ff917c92843ab276923fd751ecd5e48eefafc661b914ae2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3C107C0A5DD06BC96FF917C92843AB276923FD751ECD5E48EEFAFC661B914AE2"
Last-Modified: Sat, 22 Jun 2024 04:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7581
Expires: Mon, 24 Jun 2024 15:12:01 GMT
Date: Mon, 24 Jun 2024 13:05:40 GMT
Connection: keep-alive
GET zeriun.cc/assets/img/logo.png
200 OK 955 B URL GET HTTP/3 zeriun.cc/assets/img/logo.png
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type PNG image data, 96 x 26, 8-bit colormap, non-interlaced
Hash 53c0bc61d0caa6e5b53f98f91a00a07f
6a5423543df64d38e017f824c614c3e1ddd2a1fb
814f1dcc6f468b5463dfd583953392ec02a254911f2ae17ee2b2b8018a9b1874
GET /assets/img/logo.png HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/png
content-length: 955
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:25:56 GMT
etag: W/"3bb-18707c7f181"
cf-cache-status: HIT
age: 951943
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MqquWsrOqxqTbdneRJWggG%2FeDS7C6XD9bJPd2XYn1P%2Bj7UQ1G3ji%2Fpm4OGDHWgZX001VRnxKWZx10A9XPzU4yj5%2F4b5WNcr6ZsLPLU0hWEe7WAszVD7G2N8yg4o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee475b0856c4-OSL
alt-svc: h3=":443"; ma=86400
GET challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha
302 Found 0 B URL GET HTTP/2 challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?compat=recaptcha HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 24 Jun 2024 13:05:41 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/c7e29c8c8b6e/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee478993569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET zeriun.cc/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/3 zeriun.cc/assets/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/assets/css/style.css?v=2.25.7
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: font/woff2
content-length: 77160
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:14:23 GMT
etag: W/"12d68-18707bd5c4a"
cf-cache-status: HIT
age: 928484
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tlYnBAfsvc6BGskyBP88AAPHo737ju76PUx9gMZU9i0k4PZW8ltgENZmTo5nJtYot%2BF9BpBAgViT0yOGfPwuTnbCjWOFWHz2y1n%2FI%2FZKo%2FJ9qzMFALerp9Mjq1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee47dba756c4-OSL
alt-svc: h3=":443"; ma=86400
471 B IP
Hash 1b7d3e43075eb91e9cdde219781a8f4b
6f90a080d6b52f741280893044147852df3615d6
9d8bd948e018815597fa8ee84422d57b0236b043e85b7e5f20af0c9c395cf341
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Jun 2024 13:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET zeriun.cc/uploads/thumbs/0FaLvnHv7Hsb.jpg
200 OK 7.1 kB URL GET HTTP/3 zeriun.cc/uploads/thumbs/0FaLvnHv7Hsb.jpg
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3
Hash 87ddcdaf0fa7771592bcb102adeb96d1
33cf79d1d2b4efbb589420a35e1bf33f6b967941
47e1af746978cf7b9291a62a8c1ac0dd6d4c5d05b0dc811496ed08f9f825c446
GET /uploads/thumbs/0FaLvnHv7Hsb.jpg HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/jpeg
content-length: 7127
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Thu, 02 Feb 2023 18:07:16 GMT
etag: W/"1bd7-186134fb420"
cf-cache-status: HIT
age: 931838
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BjhaBmdsDQPlEXEpkmnpb2e9fzuzg1kNzacDSlfHkmcwHPC9ehkEz3S05wi66jeNa0Mpnqtat2p36CV1NBMgqy7Jb5h9ZyBaj%2FR3AD9lJwq0YGyIGiIlXnhNheI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee47fbed56c4-OSL
alt-svc: h3=":443"; ma=86400
GET zeriun.cc/uploads/photos/1LL3sS5KTixw.jpg
200 OK 2.0 kB URL GET HTTP/3 zeriun.cc/uploads/photos/1LL3sS5KTixw.jpg
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type JPEG image data, baseline, precision 8, 89x50, components 3
Hash 48f8d5d4975d7842959db6005e23a6c3
3f23a5dd9ae240c9319e450119dda9ee0e3fcb9c
01cc31bdd486bfcfc8938103117306d05755cca431cef85da7f2e7830f6109fd
GET /uploads/photos/1LL3sS5KTixw.jpg HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/jpeg
content-length: 2022
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Thu, 06 Jun 2024 06:01:09 GMT
etag: W/"7e6-18fec230614"
cf-cache-status: HIT
age: 511627
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QmnaO6G5rAEUKpjr9fC%2FUE2J6bUkDxp1ekAE%2Fwo%2FFCsHx7SArHq9MxhkZcfRd5vjjMbnU%2BCnWSv1MAYFF7C6nlt6jf32vlDCkT2lVPwbgqOzEXpJohjE2S097q4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee47fbee56c4-OSL
alt-svc: h3=":443"; ma=86400
471 B IP
Hash 1b7d3e43075eb91e9cdde219781a8f4b
6f90a080d6b52f741280893044147852df3615d6
9d8bd948e018815597fa8ee84422d57b0236b043e85b7e5f20af0c9c395cf341
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Jun 2024 13:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET challenges.cloudflare.com/turnstile/v0/b/c7e29c8c8b6e/api.js
200 OK 25 kB URL GET HTTP/3 challenges.cloudflare.com/turnstile/v0/b/c7e29c8c8b6e/api.js
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerCloudflare, Inc.
Subjectchallenges.cloudflare.com
Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (42645)
Hash c9b9b8d1382f8ebb60c396dd27d06c30
c3600b6d612df83ba61677c657058a0c70eea92b
fdf9b58fcf84b6c75c42ba56855fb02e0a990771aa1932c18a0fa73ef640000a
GET /turnstile/v0/b/c7e29c8c8b6e/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zeriun.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 19 Jun 2024 17:35:52 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee47e853b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
GET zeriun.cc/uploads/photos/mGZEdbhoQnn5.jpg
200 OK 1.9 kB URL GET HTTP/3 zeriun.cc/uploads/photos/mGZEdbhoQnn5.jpg
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type JPEG image data, baseline, precision 8, 89x50, components 3
Hash 0b47448f7c5f6888daf9c55b5c2ca51c
1a6de0fb882b927c30183891de22c5b25c07c192
285c3ab289470995ecac0df56622f8c38798063a5bb77528c12cbc47004d0d8c
GET /uploads/photos/mGZEdbhoQnn5.jpg HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/jpeg
content-length: 1859
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Mon, 27 Mar 2023 13:43:00 GMT
etag: W/"743-187234ecebd"
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RpM3BIaetWlCM%2FwBUQ6w5jDC3HfQQAaVz8VI1N%2FQeb0by1WlJ%2FU9QIxHQgezqpr0JJ5UTtta1H6xlMPVoZ0kqG%2F%2B7mh%2BM81KgyQRTHMzYJQK4WLtSDIzhnaHitc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee48ac8e56c4-OSL
alt-svc: h3=":443"; ma=86400
471 B IP
Hash 1b7d3e43075eb91e9cdde219781a8f4b
6f90a080d6b52f741280893044147852df3615d6
9d8bd948e018815597fa8ee84422d57b0236b043e85b7e5f20af0c9c395cf341
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Jun 2024 13:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
HEAD inklinkor.com/tag.min.js
200 OK 0 B IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectinklinkor.com
Fingerprint7F:21:50:36:30:E5:54:C3:4F:43:58:95:A3:71:77:41:A8:A7:F0:93
ValiditySat, 15 Jun 2024 18:50:43 GMT - Fri, 13 Sep 2024 18:50:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
HEAD /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zeriun.cc/
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: ba3733555c4006288ac455e37fc21bc1
cache-control: max-age=86400
last-modified: Sun, 23 Jun 2024 23:37:26 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://zeriun.cc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 25 Jun 2024 12:29:01 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 2200
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ch5BxgrN3t8wXV0jGtEqIbWeg2HVwEiFAqFKGJkrIPwlbx5hrpJ6C5PQuPc5vF7v4b65BP%2BCsfqvGw2erYhMjLY88c8vulIDayXw%2F3GAkgo1jg04OTA6nOkfgtiFV1bX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee496eabb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
200 OK 6.1 kB URL User Request GET HTTP/2 zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
IP
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (7778)
Hash a3b44fb26321e936606ae7422e8ada47
00bffa7d077864974058c976d74e2495406978db
622be6d2f4aa6df067c7ad9c5cba59c487a5ca764c9e953a6f452658dcf0aa5e
GET /serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:40 GMT
content-type: text/html; charset=utf-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
set-cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV; Path=/; HttpOnly; Secure; SameSite=Lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3PGg71A1e2Dd6YbffR5DxozDlZU4VsGTZoLxU4yQZACNdl1ptzbzJQ4wnP07YUNeFbt1iz0iSEosE6fFbwj3yxVDx18gWFqrAn%2FGaDm3ogRhQX6z7YyKbX%2Fi0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee445d2d56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint78:DC:A6:9E:E8:DF:26:D4:6F:A0:54:48:4B:48:74:34:3F:3D:F6:23
ValidityMon, 03 Jun 2024 07:32:58 GMT - Mon, 26 Aug 2024 07:32:57 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Jun 2024 08:13:47 GMT
expires: Sat, 21 Jun 2025 08:13:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 276714
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
471 B IP
Hash fe0e1cf3601917b1d3938ebdcbe313b7
825eea278fd2f33e1ec30c2115382ea122efd063
6e565034e0ac9361cf387a24d25a95b52b38af993d674699dffd9cc83b0f08e3
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Jun 2024 13:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
GET zeriun.cc/assets/css/style.css?v=2.25.7
200 OK 39 kB URL GET HTTP/3 zeriun.cc/assets/css/style.css?v=2.25.7
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type gzip compressed data, from Unix
Hash caa397a5f8a9409a8559bbd81fe1180f
136a09b9110e8cf930e4b9510b05e90fd14da711
08d63d35af92aa8189fc678a08251046c987ab8b53e34dc6e0ca22e1ac20f5f8
GET /assets/css/style.css?v=2.25.7 HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: text/css; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 14 Feb 2024 16:29:45 GMT
etag: W/"31f5c-18da873eae1"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 946027
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ij3Q5ar%2BE5X36OF%2FFffuu3pUagMHGSEJv%2BZZ%2BTE%2B0krNWnb3kue6xHROyKkQ0WD%2FiLGQ85VE%2BH2nvat0gZdUUkSZd5LVPu7fxTjMz72r2CqTMrHrujtwQ%2Bl2Vc8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee475afc56c4-OSL
alt-svc: h3=":443"; ma=86400
GET zeriun.cc/assets/js/pk.js?c=20245113
200 OK 1.1 kB URL GET HTTP/3 zeriun.cc/assets/js/pk.js?c=20245113
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type JavaScript source, ASCII text, with very long lines (985), with no line terminators
Hash 999815ffd3dea45df6b533a5e2129cde
6ef5d72560caf3facb83b8187d2c939551789c8a
ba3feeff7c8d146d5e43e15df1993fc12ba9b5b3fd70a7ee463d1e3983edc374
GET /assets/js/pk.js?c=20245113 HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Mon, 24 Jun 2024 11:05:00 GMT
etag: W/"3d9-19049ebac70"
vary: Accept-Encoding
cf-cache-status: HIT
age: 4631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XtNjjmHJHVI8iIerNRYTVCyzTvMCidO644yuQVnBhtuyVWJ%2F8fZqAtdDdvrvGTQz2b20txjPgo6GuGvb4VfQpGDdYM%2Bfu%2BnUlHfOfkSX1U6Y1BDTNz3A0SurfGY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee47fbec56c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
POST zeriun.cc/api/ping
200 OK 13 B IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
Hash f9198d723cba416707e9163bf9c95f40
8e370dc7e9d6ac3f0d5487206aa2c373f5aaa5b8
3dac47acb1d3459ecf35c9e8452b03e68e68bd14c85982a69324655e41352d1c
POST /api/ping HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
x-csrf-token: Ll00ja3t-xtV7ONMLfkP5S2quTnBkshk6FUE
Content-type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 107
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/json; charset=utf-8
content-length: 13
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
set-cookie: uid=aSlweXlZnbTpC6WEB7Dm5MRsh72CW5; Max-Age=31536000; Path=/; Expires=Tue, 24 Jun 2025 13:05:41 GMT; HttpOnly; Secure
sid=0Dy-M7xta8xV0qApeDYXwn0ltj98kn; Path=/; HttpOnly; Secure
etag: W/"d-jjcNx+nWrD8NVIcgaqLDc/Wqpbg"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jkPZQ80%2BjpcC6aalTQDe9Y1KWMSb8Gef2w4t%2F%2FbdhLYhclpH8UgG6b7HiJe9IeGPg4vNVj1472qM%2BbpfI7EXnzn4yoOCpAbjfjiVrxHwYP5wULbLbH0fsKsaalY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee4a1e0c56c4-OSL
alt-svc: h3=":443"; ma=86400
GET www.blockadsnot.com/tyle/oImager.min.js
200 OK 12 kB URL GET HTTP/2 www.blockadsnot.com/tyle/oImager.min.js
IP
ASN #60068 Datacamp Limited
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerLet's Encrypt
Subject1158060716.rsc.cdn77.org
Fingerprint10:08:2B:8D:3F:3E:D5:9D:80:D3:F4:CF:0A:39:67:D3:CD:2B:9C:C1
ValidityTue, 30 Apr 2024 06:35:33 GMT - Mon, 29 Jul 2024 06:35:32 GMT
File type gzip compressed data, from Unix
Hash 96882ddb5be9cb5d0bb57080a48d553c
c5ca58138a5ad19d25e07ac2ed38f337c485df0c
b4a865dc1ca9003e7884951f7745fecc615e5497724f1c02bf28392af8085574
GET /tyle/oImager.min.js HTTP/1.1
Host: www.blockadsnot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/x-javascript
popads-node: wb6
expires: Mon, 01 Jul 2024 11:06:40 GMT
access-control-allow-origin: https://zeriun.cc
link: <https://blockadsnot.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwgBuUwJDQFBDAG5TAoMAfcjFwAADAElE8I0AffCBAAA
x-77-nzt-ray: c0a4cc28697f78c9256f79661a3ce61a
x-accel-expires: @1719832000
x-accel-date: 1719228418
x-77-cache: HIT
x-77-age: 7141
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
x-cache: MISS
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
GET zeriun.cc/assets/img/icons/android-icon-192x192.png
200 OK 1.8 kB URL GET HTTP/3 zeriun.cc/assets/img/icons/android-icon-192x192.png
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type PNG image data, 192 x 192, 4-bit colormap, non-interlaced
Hash 7f56e927c9b6c2d02c77649dbfdbe0ad
1f35098e18716f527f3866d3223201e42c566451
3e5a72f3eb6ee0f7e3382fcee5cfebf8a8ececaf2d925a6a9991beef1d236d55
GET /assets/img/icons/android-icon-192x192.png HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV; uid=aSlweXlZnbTpC6WEB7Dm5MRsh72CW5; sid=0Dy-M7xta8xV0qApeDYXwn0ltj98kn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/png
content-length: 1798
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:25:57 GMT
etag: W/"706-18707c7f62d"
cf-cache-status: HIT
age: 935803
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7epNg93QvebIEdAf4M%2BV0oYCD6js4qdpW17kQ2sH6Y0fV4R8wt%2BT2XEUSKx%2B9R1Cg%2F0i3E%2BiRkF0%2Buv6mrXT%2Fwig6dF186oHJ1FxxB2iyXReSyRJ1Vhe6SzvYEA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee4bc84d56c4-OSL
alt-svc: h3=":443"; ma=86400
GET zeriun.cc/assets/js/main.js?v=2.25.7
200 OK 9.7 kB URL GET HTTP/3 zeriun.cc/assets/js/main.js?v=2.25.7
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type gzip compressed data, from Unix
Hash 34c28c957324b97bb5f70ccbe292e02f
df688e013ed1aed67f23a107a919c870d7c3d18d
ede3e741d19dc808153bdd7e76386f1812afa37ba80e25a80015d23c2a4c20e8
GET /assets/js/main.js?v=2.25.7 HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sat, 13 Apr 2024 08:11:04 GMT
etag: W/"8593-18ed68290cf"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 951943
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYkH3dNHHRxyOgN93Axxm1QfPrsz4NrLnsPSKqKYbP8ZTaDWAQBF0mNEFtdNPAipFEjcTn6bJ9L8PJhgybyJ3eKNz5pCL7Viq6JDzf467RD9dSTUM7ero9CpNPI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee476b0e56c4-OSL
alt-svc: h3=":443"; ma=86400
GET beakexcursion.com/ef/27/b4/ef27b4397ebe128596f54115f897329f.js
200 OK 31 kB URL GET HTTP/1.1 beakexcursion.com/ef/27/b4/ef27b4397ebe128596f54115f897329f.js
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerLet's Encrypt
Subjectbeakexcursion.com
Fingerprint01:D9:8D:18:37:33:60:05:63:BB:57:85:7F:E3:4F:24:3F:13:9F:C9
ValiditySat, 27 Apr 2024 06:14:45 GMT - Fri, 26 Jul 2024 06:14:44 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 6ebcab42aa686fce7f7fd83d199ebfc4
2d0ac26154ca927355c51e3c1a164cb7e8bcfde7
6cab02d39cb51415de918c1c61d69cd7ce301ca446f6436dbb4feaf0a862928d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ef/27/b4/ef27b4397ebe128596f54115f897329f.js HTTP/1.1
Host: beakexcursion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 24 Jun 2024 13:05:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2002e7987fb1aaa3d2e272be82d7f923
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash ba70131cf3f4f7224816c7a182c90b77
b287e0b4994339891f42d2725132c8bf0ffd32da
ac2d09e2ce8dffd37b13b1b2fd04cfb4583106797d65c428cad1105511b9cf3f
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 24 Jun 2024 13:05:42 GMT
Last-Modified: Mon, 24 Jun 2024 11:34:47 GMT
Server: ECAcc (ska/F7AF)
X-Cache: Miss from cloudfront
Via: 1.1 d8b0b3928e53502c6ce822abc3cc3d70.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HEL51-P1
X-Amz-Cf-Id: rWt-lu01jytYZyhRQaqLIN0cQagSe1dRwRF-M3ABCpXu3KdsyRWawA==
Age: 5455
GET proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 2555fe6ae41a211fee701a0a599cef0b
c159415692517445e66efc1856a0939e867df035
391fcb711c805507411cf77badd6e489bdbd53921160bdc3d5d73d0130e4b210
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://zeriun.cc
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=bfb2420d-39fa-48dd-99ad-8088aa9e7580:1:1; expires=Thu, 22 Jun 2034 13:05:42 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET 6.adsco.re/
200 OK 0 B IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://zeriun.cc
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee51182d5697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash fe36e270c1ecfa3891cc7b505e7894b6
ce43401e7146eb139a1e3caf7db957e6b9531dc3
bd791e8f44b990a0091febc3cc3b24799eb26b87fe5aa381ad98ae4662f7f802
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BD791E8F44B990A0091FEBC3CC3B24799EB26B87FE5AA381AD98AE4662F7F802"
Last-Modified: Sun, 23 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10756
Expires: Mon, 24 Jun 2024 16:04:58 GMT
Date: Mon, 24 Jun 2024 13:05:42 GMT
Connection: keep-alive
GET 6.adsco.re:2087/
200 OK 0 B IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://zeriun.cc
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee512f3cb518-OSL
alt-svc: h3=":2087"; ma=86400
X-Firefox-Spdy: h2
504 B IP
ASN #20940 Akamai International B.V.
Hash fe36e270c1ecfa3891cc7b505e7894b6
ce43401e7146eb139a1e3caf7db957e6b9531dc3
bd791e8f44b990a0091febc3cc3b24799eb26b87fe5aa381ad98ae4662f7f802
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BD791E8F44B990A0091FEBC3CC3B24799EB26B87FE5AA381AD98AE4662F7F802"
Last-Modified: Sun, 23 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10756
Expires: Mon, 24 Jun 2024 16:04:58 GMT
Date: Mon, 24 Jun 2024 13:05:42 GMT
Connection: keep-alive
504 B IP
ASN #20940 Akamai International B.V.
Hash fe36e270c1ecfa3891cc7b505e7894b6
ce43401e7146eb139a1e3caf7db957e6b9531dc3
bd791e8f44b990a0091febc3cc3b24799eb26b87fe5aa381ad98ae4662f7f802
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BD791E8F44B990A0091FEBC3CC3B24799EB26B87FE5AA381AD98AE4662F7F802"
Last-Modified: Sun, 23 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10756
Expires: Mon, 24 Jun 2024 16:04:58 GMT
Date: Mon, 24 Jun 2024 13:05:42 GMT
Connection: keep-alive
GET recordedthereby.com/sfp.js
200 OK 28 kB URL GET HTTP/2 recordedthereby.com/sfp.js
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services LLC
Subjectrecordedthereby.com
FingerprintA3:3F:9B:AE:CF:C6:1B:C3:8B:FC:65:01:2F:06:6A:22:60:3C:8E:AF
ValidityWed, 08 May 2024 14:16:18 GMT - Tue, 06 Aug 2024 14:16:17 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 7e3e44049654b6e244c1777e68ffb8e7
8f2a8298666d607afd92a0baa362ef4dc9ccd039
4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: a0f27683f71ed9b0de0c992b2c5a3c47
pragma: no-cache
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZtunWZHmN2AfUP3Pes%2Bq0OUPUb%2FWdYOGZwG%2B3SfPm%2F6Sy8N4rt%2B1Ah34w4yvJVFwcUi%2FdvcO2NdX%2Ba9Nd4a%2Bnz7o0Xz%2Fm%2FH3YtjTlSmkr4EFupQ8fDtPwGyitDgQ8%2BAHG16etXRo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee4e2b3bb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 4.adsco.re/
200 OK 62 B IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Jun 2024 13:05:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://zeriun.cc
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
GET c.adsco.re/
30 kB IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (881)
Hash c626ca77548642fbab246d944b6533a5
bbda9857a83048bd607d2bb916cd0f1e4bac5b88
f5d310d03e3a80feaf50f553297436d007ece35ffb191a1c3e46fb985835aad5
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 25 Jul 2024 13:05:41 GMT
etag: W/"xibKd1SGQvurJG2US2UzpQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 970138
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee4accfd56ba-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET 6.adsco.re/
200 OK 0 B IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee520dd856b7-OSL
alt-svc: h3=":443"; ma=86400
GET c.adsco.re/
30 kB IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type gzip compressed data, max speed, from Unix
Hash 3bd9c63d3308ef2fd1ef294bfb1c1117
24ce99fec792c08e68297688bbe89d9081335bfc
82106f7cd9265da33ea593a9cdb657ca816a4b164486f733459d61170f2cd8e1
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 25 Jul 2024 13:05:42 GMT
etag: W/"xibKd1SGQvurJG2US2UzpQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 970139
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee51edc056b7-OSL
alt-svc: h3=":443"; ma=86400
345 B IP
ASN #20940 Akamai International B.V.
Hash 27472cacb49ef09b0a00d0657e646a5e
775f173037ab088b278894e547b669416fb53c96
48f1bd2904141ef4ac9545d509e39b60808698f05cd8aaf941fbfced36253f86
POST / HTTP/1.1
Host: e6.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "48F1BD2904141EF4AC9545D509E39B60808698F05CD8AAF941FBFCED36253F86"
Last-Modified: Fri, 21 Jun 2024 22:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7503
Expires: Mon, 24 Jun 2024 15:10:45 GMT
Date: Mon, 24 Jun 2024 13:05:42 GMT
Connection: keep-alive
POST adsco.re/p
200 OK 874 B IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with very long lines (1106), with no line terminators
Hash 2a551f6fbc3b258b7c6bbec15cefa3f5
caeb4500e2f638ed565134ee3e1deb8e0cfa135f
5b26922218e96292c3965c44ba053c864dde2c754546ef076d09f2ffd1fce97c
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2176
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Jun 2024 13:05:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://zeriun.cc
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
POST txfvxhgacvf0.n4.adsco.re/
200 OK 0 B URL POST HTTP/2 txfvxhgacvf0.n4.adsco.re/
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerLet's Encrypt
Subject*.n4.adsco.re
FingerprintBE:41:74:B3:75:84:DD:5D:5A:13:CD:54:89:18:04:8E:D3:FA:1F:A7
ValidityWed, 19 Jun 2024 09:12:38 GMT - Tue, 17 Sep 2024 09:12:37 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: txfvxhgacvf0.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET blockadsnot.com/iixflzofjdrntz?wMpnkEtc=BQMyAAAAAAAACZUAAk7-xiviGl9qyQG_DY8kIYY2KsEZql9bKK_ZPtygfKbW6JqCB3zHdLt61ByeJjXEDI8PZouHmpKyrEvukeKBDmc9DxB3ZUGlTS-UmoeuRyJIl5hlMOxK631_cG4bLByUz-cw0jOpdtqZuUmzUOXVEChot8mAIM36JFyoac0ELC5Si5LaaCm6HE2NC7fkuWWQbPGhSSkA1AuNGfTFcBp-0KGID2IZIO2FscuTsYnIUd-4QZFoVV0RKKtc51Wh3nh0YazdCSmYKop3bFjNuUSTRMwMLnEVCWcjIUmNYCq2RyV174lu1yTb1ctaMpAgXsyySVPysLQfSc9gnlWtQ2KZvn6glwr9uEL7Wc1jRLxtDS3hGBIBdVTW2n9cZOK9ZSy7EPcNBnYSl-dAqcadqKzKnwkDpTcPq-JGIFtW9SJY_zadWbatibUuFPAcR4LawCGA-zVDfrRIa2jFWRL0zdM9WOEx0ZCwX-3iZRizxba1eO-zLZSBZlw0MHDo_EThDs9kGboK5n6LuJBcmW6hrey7qcXlWgzTkxlXuWySYNc1DzAyy7PRdMg1AFSojyU8b2QlsZ2pcxoPo3RvCwTDTG0CLRNQ3b8kpZ1EzHk4H5-dFz6XQQdGi_Sbg_P5ulq5DeCsJrAGzz1y0U5e10W9PB3el9JmE-bLhlImi-tnlD4zUPqV6tAKmkGyqKP2DWM6nlNxKVblnx3P88pcHeatMxDnc1_zFd3yhy0cugFsA01Een3vQOcTOKya9nfXCMBkr8ornLMtNphIrkCLv5_YQEtcqQrj3MNNjqItCczLKvJ3fVTni6r1IdfUFji8FH-YF8kUziLxKnhHuXn_vGnum4n2WG-6IUNLqrNoFO0_UbKcDyUldOjhHU-bfYm2y-OuMYx5015ZCogCsT7tRzAV2uKButcVeAplVR2z4bD6l4LUbvw4W7kyRueYGSYLH2KDlfB3mkXYDPqiByuUNReomDpuPP6TkTY3i6VwUJxlLSK597Q9WCjOtTDx2_-GfgszaDeUa5lfPKSSn-fHqrC_KthkgnQ2kwmCGKkRND3Hdyvi7uvQCecAaq6fa_ox8GEYvxvE7Q&iMXamGgj=4&avNlYcjX=5091536&rAdxozsU=&QVsovKxO=5,0&qeIkKnCt=&DtGUAOcI=&s=1280,1024,1,1280,1024,0
200 OK 44 B URL GET HTTP/2 blockadsnot.com/iixflzofjdrntz?wMpnkEtc=BQMyAAAAAAAACZUAAk7-xiviGl9qyQG_DY8kIYY2KsEZql9bKK_ZPtygfKbW6JqCB3zHdLt61ByeJjXEDI8PZouHmpKyrEvukeKBDmc9DxB3ZUGlTS-UmoeuRyJIl5hlMOxK631_cG4bLByUz-cw0jOpdtqZuUmzUOXVEChot8mAIM36JFyoac0ELC5Si5LaaCm6HE2NC7fkuWWQbPGhSSkA1AuNGfTFcBp-0KGID2IZIO2FscuTsYnIUd-4QZFoVV0RKKtc51Wh3nh0YazdCSmYKop3bFjNuUSTRMwMLnEVCWcjIUmNYCq2RyV174lu1yTb1ctaMpAgXsyySVPysLQfSc9gnlWtQ2KZvn6glwr9uEL7Wc1jRLxtDS3hGBIBdVTW2n9cZOK9ZSy7EPcNBnYSl-dAqcadqKzKnwkDpTcPq-JGIFtW9SJY_zadWbatibUuFPAcR4LawCGA-zVDfrRIa2jFWRL0zdM9WOEx0ZCwX-3iZRizxba1eO-zLZSBZlw0MHDo_EThDs9kGboK5n6LuJBcmW6hrey7qcXlWgzTkxlXuWySYNc1DzAyy7PRdMg1AFSojyU8b2QlsZ2pcxoPo3RvCwTDTG0CLRNQ3b8kpZ1EzHk4H5-dFz6XQQdGi_Sbg_P5ulq5DeCsJrAGzz1y0U5e10W9PB3el9JmE-bLhlImi-tnlD4zUPqV6tAKmkGyqKP2DWM6nlNxKVblnx3P88pcHeatMxDnc1_zFd3yhy0cugFsA01Een3vQOcTOKya9nfXCMBkr8ornLMtNphIrkCLv5_YQEtcqQrj3MNNjqItCczLKvJ3fVTni6r1IdfUFji8FH-YF8kUziLxKnhHuXn_vGnum4n2WG-6IUNLqrNoFO0_UbKcDyUldOjhHU-bfYm2y-OuMYx5015ZCogCsT7tRzAV2uKButcVeAplVR2z4bD6l4LUbvw4W7kyRueYGSYLH2KDlfB3mkXYDPqiByuUNReomDpuPP6TkTY3i6VwUJxlLSK597Q9WCjOtTDx2_-GfgszaDeUa5lfPKSSn-fHqrC_KthkgnQ2kwmCGKkRND3Hdyvi7uvQCecAaq6fa_ox8GEYvxvE7Q&iMXamGgj=4&avNlYcjX=5091536&rAdxozsU=&QVsovKxO=5,0&qeIkKnCt=&DtGUAOcI=&s=1280,1024,1,1280,1024,0
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subjectblockadsnot.com
Fingerprint96:00:00:44:50:47:F4:4D:23:DB:EE:86:80:A0:C4:5F:3A:EA:F5:03
ValidityMon, 14 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash d5f0a25e4d3522d56d48ce7bc3e518fb
86794caff58f7fee6e684c2ba7195f970a8d6f4c
9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /iixflzofjdrntz?wMpnkEtc=BQMyAAAAAAAACZUAAk7-xiviGl9qyQG_DY8kIYY2KsEZql9bKK_ZPtygfKbW6JqCB3zHdLt61ByeJjXEDI8PZouHmpKyrEvukeKBDmc9DxB3ZUGlTS-UmoeuRyJIl5hlMOxK631_cG4bLByUz-cw0jOpdtqZuUmzUOXVEChot8mAIM36JFyoac0ELC5Si5LaaCm6HE2NC7fkuWWQbPGhSSkA1AuNGfTFcBp-0KGID2IZIO2FscuTsYnIUd-4QZFoVV0RKKtc51Wh3nh0YazdCSmYKop3bFjNuUSTRMwMLnEVCWcjIUmNYCq2RyV174lu1yTb1ctaMpAgXsyySVPysLQfSc9gnlWtQ2KZvn6glwr9uEL7Wc1jRLxtDS3hGBIBdVTW2n9cZOK9ZSy7EPcNBnYSl-dAqcadqKzKnwkDpTcPq-JGIFtW9SJY_zadWbatibUuFPAcR4LawCGA-zVDfrRIa2jFWRL0zdM9WOEx0ZCwX-3iZRizxba1eO-zLZSBZlw0MHDo_EThDs9kGboK5n6LuJBcmW6hrey7qcXlWgzTkxlXuWySYNc1DzAyy7PRdMg1AFSojyU8b2QlsZ2pcxoPo3RvCwTDTG0CLRNQ3b8kpZ1EzHk4H5-dFz6XQQdGi_Sbg_P5ulq5DeCsJrAGzz1y0U5e10W9PB3el9JmE-bLhlImi-tnlD4zUPqV6tAKmkGyqKP2DWM6nlNxKVblnx3P88pcHeatMxDnc1_zFd3yhy0cugFsA01Een3vQOcTOKya9nfXCMBkr8ornLMtNphIrkCLv5_YQEtcqQrj3MNNjqItCczLKvJ3fVTni6r1IdfUFji8FH-YF8kUziLxKnhHuXn_vGnum4n2WG-6IUNLqrNoFO0_UbKcDyUldOjhHU-bfYm2y-OuMYx5015ZCogCsT7tRzAV2uKButcVeAplVR2z4bD6l4LUbvw4W7kyRueYGSYLH2KDlfB3mkXYDPqiByuUNReomDpuPP6TkTY3i6VwUJxlLSK597Q9WCjOtTDx2_-GfgszaDeUa5lfPKSSn-fHqrC_KthkgnQ2kwmCGKkRND3Hdyvi7uvQCecAaq6fa_ox8GEYvxvE7Q&iMXamGgj=4&avNlYcjX=5091536&rAdxozsU=&QVsovKxO=5,0&qeIkKnCt=&DtGUAOcI=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: blockadsnot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
popads-node: wb3
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Mon, 24 Jun 2024 13:05:43 GMT
X-Firefox-Spdy: h2
GET unseenreport.com/pxf.gif?uuid=bfb2420d-39fa-48dd-99ad-8088aa9e7580&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=ef27b4397ebe128596f54115f897329f&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=13
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=bfb2420d-39fa-48dd-99ad-8088aa9e7580&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=ef27b4397ebe128596f54115f897329f&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=13
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
FingerprintF5:95:0F:2B:01:D6:36:49:AB:2E:61:76:F7:EC:A5:45:3D:F1:0E:59
ValidityTue, 21 May 2024 07:36:27 GMT - Mon, 19 Aug 2024 07:36:26 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=bfb2420d-39fa-48dd-99ad-8088aa9e7580&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=ef27b4397ebe128596f54115f897329f&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=13 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 24 Jun 2024 13:05:43 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: e0ed6188386ed7f5aad473a476b17d14
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
345 B IP
ASN #20940 Akamai International B.V.
Hash 98acb55cb0f4834484a73a0a777a66c8
800b4bbe4d03056cbdffd6ae95bc285111a49637
63d4923210333e36e29bb25d56532107ee7a6172cb52737199847345774ec192
POST / HTTP/1.1
Host: e5.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "63D4923210333E36E29BB25D56532107EE7A6172CB52737199847345774EC192"
Last-Modified: Fri, 21 Jun 2024 22:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9624
Expires: Mon, 24 Jun 2024 15:46:07 GMT
Date: Mon, 24 Jun 2024 13:05:43 GMT
Connection: keep-alive
POST txfvxhgacvf0.l4.adsco.re/
200 OK 0 B URL POST HTTP/2 txfvxhgacvf0.l4.adsco.re/
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerLet's Encrypt
Subject*.l4.adsco.re
Fingerprint6A:0E:41:E3:DE:94:4F:DE:EA:FD:23:FA:26:1D:19:3A:24:53:08:53
ValiditySun, 19 May 2024 09:12:48 GMT - Sat, 17 Aug 2024 09:12:47 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: txfvxhgacvf0.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:43 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
POST txfvxhgacvf0.s4.adsco.re/
200 OK 0 B URL POST HTTP/2 txfvxhgacvf0.s4.adsco.re/
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerLet's Encrypt
Subject*.s4.adsco.re
Fingerprint15:09:26:99:3D:07:A6:77:37:5A:1D:E3:7A:65:2D:B9:99:4F:BB:86
ValidityWed, 19 Jun 2024 09:12:43 GMT - Tue, 17 Sep 2024 09:12:42 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: txfvxhgacvf0.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:44 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
GET c.adsco.re/
200 OK 78 kB IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (881)
Hash c626ca77548642fbab246d944b6533a5
bbda9857a83048bd607d2bb916cd0f1e4bac5b88
f5d310d03e3a80feaf50f553297436d007ece35ffb191a1c3e46fb985835aad5
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 25 Jul 2024 13:05:42 GMT
etag: W/"xibKd1SGQvurJG2US2UzpQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 970139
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee508bec56b7-OSL
alt-svc: h3=":443"; ma=86400
GET zeriun.cc/uploads/thumbs/XKOx6vQ20mWl.jpg
200 OK 11 kB URL GET HTTP/3 zeriun.cc/uploads/thumbs/XKOx6vQ20mWl.jpg
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3
Hash 93ac9111c86674b9f09e6e18a30273f8
eeb901f1a13b946ff1ad77196c261b4f69ab94f3
e2bdc9564d483085f74c57601bbd871a78cb1fa51468b9c39be25dbcd9200d9e
GET /uploads/thumbs/XKOx6vQ20mWl.jpg HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/jpeg
content-length: 10861
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Thu, 02 Feb 2023 18:07:07 GMT
etag: W/"2a6d-186134f90f8"
cf-cache-status: HIT
age: 929691
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LmoIwgwPQLRgzbiHe7Lh85mEqVvUfejVe8Y80Q8NcGaVzePPD3VuxR%2F9RS3Gdg9lsoyaUgjxpdSerDeVkq0fqooOaGdweG2IauHm39HzkPb4tWjelQIOU5YwlRI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee48ac8f56c4-OSL
alt-svc: h3=":443"; ma=86400
GET zeriun.cc/assets/img/icons/favicon-16x16.png
200 OK 1.2 kB URL GET HTTP/3 zeriun.cc/assets/img/icons/favicon-16x16.png
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectzeriun.cc
Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98
ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced
Hash 50ad93eef9a24193f3a102d62d72fbc8
e27c457a9629e872f3ee7d4ed0049eac177b5d7c
8c76f571c26b4ebf0aa635b45522d99d9e9f58cc5f0dd85061be8374329d7977
GET /assets/img/icons/favicon-16x16.png HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV; uid=aSlweXlZnbTpC6WEB7Dm5MRsh72CW5; sid=0Dy-M7xta8xV0qApeDYXwn0ltj98kn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/png
content-length: 1218
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:25:57 GMT
etag: W/"4c2-18707c7f51d"
cf-cache-status: HIT
age: 929694
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DpJta2CYuhareg92Vx0BZ5Y3tenCX3GbQNd8I79TQUzCFZGkou%2B51uUWWQNroz%2FfJRGopBiq3RbaiGn2rwzyBoy3O1ZweIUz7Y1R1lKlckg64MLN8mdzBFmjsN0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee4bc84e56c4-OSL
alt-svc: h3=":443"; ma=86400
GET fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap
200 OK 8.5 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint11:DC:71:A3:7E:E8:D6:5C:B1:E4:54:57:47:54:9F:3A:2F:2E:0E:A5
ValidityMon, 03 Jun 2024 07:33:23 GMT - Mon, 26 Aug 2024 07:33:22 GMT
File type ASCII text, with very long lines (8630), with no line terminators
Hash 8ffea396f91964270b0ca54b34561572
4b770feb78534027442e5618b66cf75f67a60521
51ff1c0cb45235ca4c12ce7b87d640d223983357f475e8d8d20c36cc6032ecfd
GET /css2?family=Noto+Color+Emoji&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 24 Jun 2024 13:05:41 GMT
date: Mon, 24 Jun 2024 13:05:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.googleapis.com/css2?family=Roboto:wght@400;500&display=swap
200 OK 4.7 kB URL GET HTTP/2 fonts.googleapis.com/css2?family=Roboto:wght@400;500&display=swap
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subjectupload.video.google.com
Fingerprint11:DC:71:A3:7E:E8:D6:5C:B1:E4:54:57:47:54:9F:3A:2F:2E:0E:A5
ValidityMon, 03 Jun 2024 07:33:23 GMT - Mon, 26 Aug 2024 07:33:22 GMT
File type ASCII text, with very long lines (4786), with no line terminators
Hash 2b48c5974579d95fbac9441356a0f0a1
fc74b8d08c416ff32e8e3b7a74fa269fee4dfd9e
039357c344f207706b3f7e4509f6557f875da570d44eb8ad3eb6564a9c454aa0
GET /css2?family=Roboto:wght@400;500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 24 Jun 2024 13:05:41 GMT
date: Mon, 24 Jun 2024 13:05:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 4.adsco.re:2087/
200 OK 45 B IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerSectigo Limited
Subject*.adsco.re
Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73
ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 5b41cb22f84f645a103acc7bfbf084ff
bac3967b26d5ec4a0d09a580714e8219796816bd
709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Jun 2024 13:05:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://zeriun.cc
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
GET fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
200 OK 12 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerGoogle Trust Services
Subject*.gstatic.com
Fingerprint78:DC:A6:9E:E8:DF:26:D4:6F:A0:54:48:4B:48:74:34:3F:3D:F6:23
ValidityMon, 03 Jun 2024 07:32:58 GMT - Mon, 26 Aug 2024 07:32:57 GMT
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Jun 2024 08:02:14 GMT
expires: Sat, 21 Jun 2025 08:02:14 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
age: 277407
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET visitpipe.com/pixel/purst?dl=0&th=0&sc=0&rs=1450&rd=1450&fd=889&bv=24.5.8230&tmpl=70
200 OK 0 B URL GET HTTP/1.1 visitpipe.com/pixel/purst?dl=0&th=0&sc=0&rs=1450&rd=1450&fd=889&bv=24.5.8230&tmpl=70
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Certificate IssuerLet's Encrypt
Subjectvisitpipe.com
Fingerprint73:0C:E2:26:C8:DF:E1:6B:23:3B:C3:ED:05:B1:01:C9:C7:20:60:ED
ValiditySun, 02 Jun 2024 08:57:06 GMT - Sat, 31 Aug 2024 08:57:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=1450&rd=1450&fd=889&bv=24.5.8230&tmpl=70 HTTP/1.1
Host: visitpipe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 24 Jun 2024 13:05:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
104.21.66.166
3.123.175.216
162.252.214.5
185.200.116.51
23.36.76.226
185.76.9.14
185.200.118.51