{"report_id":"6357a30e-66a3-4379-9a99-7196a8eb24ea","version":0,"status":"done","tags":[],"date":"2026-09-20T21:47:56Z","url":{"schema":"http","addr":"zeldrunek.com/","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"104.21.28.136","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zeldrunek.com/","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"title":"Zeldrunek ▷ Oficjalna platforma inwestycyjna","dom":{"size":95233,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (22317)","md5":"22bb6f8f1d64c3d8fec81b73a64b157e","sha1":"2448d065d3e580a44d84cee4a6cb358726b1b00a","sha256":"52f72e3b474443548ba3a40e336e6d849632eff3f119be72cac2b4ac43636289","sha512":"329893e815a1bb288d7e7973a7bd5db762680077a40d534659585e2dab2ba87f71255825a31ecb9c7ec4e52fbf954f1e69aebc456829a5452757afd98fc2e734","ssdeep":"1536:YcvV90WCEOfGDcrypOFnfiCdCblHSIed0/K8qGL:Yc3s+D69zCxH/KpGL","tlshash":"b0932b21b2a4102b529395eabbd75b297e6cd003e6489164bafc1258cfcfdc3957378c","dom_hash":"domhash21bc7757fa310032656f6bd85f189c5c","first_seen":"2026-09-20T21:48:12.310916Z","last_seen":"2026-09-20T21:48:12.310916Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zeldrunek.com/","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"104.21.28.136","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T21:47:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"zeldrunek.com","ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-22","domain_rank":0,"first_seen":"2026-09-20T21:48:07.938503Z","last_seen":"2026-09-20T21:48:07.938503Z","alert_count":125,"request_count":25,"received_data":1190510,"sent_data":12375,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zeldrunek.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-21T00:40:41.305941Z","times_seen":436925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/js/site-ui-pl-pre-edits.js?v=mu4conhr","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f59a83f9f041df7fb1db685186f85fe","sha1":"6a7d5d8e2fe171340cc10362662b89379e190606","sha256":"b2b0af2bfe522149cd1d604b527950b74307c0e8681e09676972f1e56066845c","sha512":"22f3c7ecaef8c2d02a142a6f8212f8093453ac9d1c9b8f81bb58160b592458a05bf42600a81b0f73474c0c0f0b0ca3fe44bfd93d070a35a335301a041e2c3d98","ssdeep":"","tlshash":"19410dada9b5353a00bb75b813db93693b350083310a89023eeccb881fd65754af39cd","size":2388,"data":"","first_seen":"2026-09-20T21:48:12.327221Z","last_seen":"2026-09-20T22:06:17.770931Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4f13a02fc132497b9312b23b32f707ec","sha1":"ceb452dbe02e7332bbf9c9d6cf85f8f6ccea923d","sha256":"9548ada7ca24913dbd4d0f323dd931834dafd4a0ccad52c8357a63fc3c537ed1","sha512":"65c1a5073445c7153729c1fb3ed39aacc54acce90e9df691cf83af752838eebe828dd29847050af7614deccc379b00d5a20143eca597eb5716bffe3646944e1a","ssdeep":"","tlshash":"7611ab343656a47486f18135a3bf3f003b3562352883a08452a8cc7ebc72a47e4754db","size":989,"data":"","first_seen":"2026-07-18T04:12:14.871136Z","last_seen":"2026-09-20T22:06:17.785396Z","times_seen":99,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0373db287b5387495d7364002bf8c24e","sha1":"42ab6299d9310c74c3366117493ced1cf82488ed","sha256":"d69859120702c6b9b366099414d4000d2d31b6e59cf25cb57570a95c6e18dbda","sha512":"2636359bd1fee9c68cd19b1bd87edf70a7c1cf85499bb6d56e7ad6b386c15993b60ebed293619232ab44ad295c85fbb7a73686ea5a0ac2c679f9a4cad4dcaa0b","ssdeep":"","tlshash":"aae02ba5e104203b984707e645eb97ce7c2271257a4210958a1d94891ebc7471e67de9","size":422,"data":"","first_seen":"2026-02-20T08:42:36.257839Z","last_seen":"2026-09-20T22:06:17.786035Z","times_seen":153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8681804477541cb97eaa1ddca10e17dd","sha1":"761ab705553e4a18c14085f01f0160da22192d36","sha256":"0410bed5e4bdf29916537fb296cc5e79935e0db399450501adf8a3ea326ecdf0","sha512":"3f65e78cc9ab72f91a60b7ee2d75d668b0bdee1112b6517e9e352a00ac7da0473f256149dd3e70c44f9423afbbe4ec7cbbd507c441459d57f8b77e0a24f83384","ssdeep":"","tlshash":"3ab01291303c213ad13b53b782e9768d5533b09e7884a039bc0c41480dc0c0bda74e87","size":113,"data":"","first_seen":"2026-09-20T21:48:12.34797Z","last_seen":"2026-09-20T22:06:17.786581Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"21af2fa43609125ca8c927903b0bfd21","sha1":"284d3dfd3de12c510ce5bd2af4f1aa03aebb91d6","sha256":"8e7d7c864c2ffeaa7570705d0b6b340322ac540ae32030022831066020b341b9","sha512":"300b5d3ff1c054102596c7a65fe7df43c1ad2623977b9c8dbba13805fa43f21da91dcd16caa9a94a4dbfe679ab15edaaf2435f6f7d3cad86bd2d1e1c14293428","ssdeep":"","tlshash":"f8f07879fb49f036826160362abf83992f3a24b22da260084185f594ac71d87c03bd8e","size":597,"data":"","first_seen":"2026-09-19T21:54:26.763399Z","last_seen":"2026-09-20T22:06:17.787318Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3fae388261bc86c3b5856da3acd7416","sha1":"d7e015351d94bb755734edad14df20623a170fdd","sha256":"d76f95362977b22975f8cbcf79c975282035431a8ad05c2ddf80977d97f9b61a","sha512":"5c76bd5bd9a4db80556a497bbc4ffc7dda9a40fe6d66ac8ad4f819f46c0ad7238ab9306cd2763f027fe298d0c6718c7c38d03487acd60f8c64dc0e195860d0d2","ssdeep":"384:ISgpVcda23p7htI+guDSeA3uQ/I5zs3fEUrF499phNL+R3i+s:ISgpVYa23p7rI+iT3uQ/KUrFq9phNiRq","tlshash":"a7923c9a77cc0406a2eb9257e083a68f776dc2418dae4812c9974132ead3fdbf17175c","size":20678,"data":"","first_seen":"2026-06-25T00:25:32.008278Z","last_seen":"2026-09-20T22:06:17.78787Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/_shared/js/intlTelInput.min.js?v=23","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1ed9de900d79b0b17339dc36efc715e","sha1":"b18ddb2733e358d450a870de992a93a20875ad53","sha256":"8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce","sha512":"6c8f29f8dd9a6ac4ee24bcbc02f3a2cfde5a95341733276da8ae5c34eaaa22b6835d9510c3043227a71a74b287c884f60a4490da522d0c2d711caae18ca46527","ssdeep":"768:m603Xlqn/kiIzEfCjJMvA4BX2q2nodn24c68g:mDiIzGA4Gnod3","tlshash":"17d2e8ae73656b37aafd82a270a50513af7f79444704083d78ac8ede1288ed171f5b34","size":29364,"data":"","first_seen":"2024-08-19T16:10:17.967477Z","last_seen":"2026-09-20T22:06:17.775841Z","times_seen":109,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/_shared/js/utils.js","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","size":258914,"data":"","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-20T22:06:17.769141Z","times_seen":2455,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/js/lead-form.js?v=mu4conhr","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac1afd3002127ad1909a4ae17dc6be1e","sha1":"76f1fa464e143db7dfb1ab63460780489e1eac5b","sha256":"8ccf9feef1d66fa540bb805c9c32cac8b37463d7d155d5870e8e02919710452d","sha512":"17bb95473a9a15ca1c78ce0e8848823d5351b3b98b47e1900d12756995fb31805194dd0755c6f220e88405307489cf9d17abfe000f28dc21a9f3e3f9cd1bba8e","ssdeep":"96:Q5LifmURB2YWJaFdSEzQkJsygBEKoqEzcNp1P61HLipsd6jk+C5ip0wkoI+:QUfmUz2YWJYQssygBE9qiUp1P61rRLfy","tlshash":"9cc142ae7e9322229fb7317e6fdf9500627598130c85c8107d8c82055fe0a2a97b9fdc","size":5834,"data":"","first_seen":"2026-09-20T21:48:12.321978Z","last_seen":"2026-09-20T22:06:17.764085Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zeldrunek.com/img/proof-icon-1.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.720Z","timestamp":1789940846720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/proof-icon-1.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vx3waCeR%2BAbO3%2FoZ%2F4nXs4S1YIhxeXWl3uKvnNbbTdp9AbT4h3YxaOjjhS4niYOsG7tw8I5s8iwBbhV9bZQtLgfcK%2Bt0q%2Flris9w5Ew0HUNSYf8Tyxs3ELlDt7y%2BHYDaRuOOHDLAWfaww5%2BSmvI9cBVfxqKgEw%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e407541813723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"2f9-19ff1570e76\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":761,"size_decoded":1124,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a4aee5674ebf96aa54bb176f01c7fd6b","sha1":"e64339ca685a8e23eb15e3ad8bcdb417d5fca210","sha256":"d757af82b8b0b739cd6d4781356ad25bed3e6bdae18a29b057e05793c62333fb","sha512":"5038edcfa1d46d23b56ff42d62a257de368c5f70d0377e7e5f4fad58a5a542de9aa93a4192c44253bf196a338c5a20681597ab13a28e99883562777f98663ba9","ssdeep":"","tlshash":"f40124e428aad75cf010963c8109a1b8206a38ee6f7cb0a9d7437a0b6174c85882c6d7","first_seen":"2026-09-20T21:48:12.313163Z","last_seen":"2026-09-20T22:06:17.777994Z","times_seen":2,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/proof-icon-3.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.724Z","timestamp":1789940846724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/proof-icon-3.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HLMnMNG0hW7cbcd7I1jdkfsNqP3WZsNqDa0e2pvToEu00lEXpjbYWKln5NcRhmMjr5sYi8ybKec%2FpM7uDuGVVs9werTsNb0shQjuNk7h3Gp1sYPEOgoL1Oby86DM23hMIpYs6o2eiElbtLjuMDRHSzERdM73cw%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e407541815723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"ce9-19ff1570e73\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3305,"size_decoded":2403,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2bbf8f7f42291c476faa724570672c43","sha1":"4c029049d11856aec4f13af22b16417d33982318","sha256":"5c2324c15240acb9f68016e7c95d4c13e515860616e0473338214c4ce3d4739d","sha512":"16dd2e76403ad280ca2293536288caf8d5ff8730221c0a831c0e0d2031d05d1eeebc7fc4c979574021d61414b7831edd26221f4c4bfddc86491f987ba88790b2","ssdeep":"","tlshash":"e461428033f693fcf401fabd0615e8b13e9725e97f82a464c77a5c26664141c1dac8eb","first_seen":"2026-09-20T21:48:12.314693Z","last_seen":"2026-09-20T22:06:17.775104Z","times_seen":2,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/proof-icon-5.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.726Z","timestamp":1789940846726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/proof-icon-5.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M5lTqqllKpYbcdEkdRx5e7VLdcULd0QbOIRwKGq8hjjX%2FdirtcSTgp1RpYX8mFMlx6DB54JRdQcZYnV9Ks%2B7WuBARdIkoc6pmAViXpbX5QXKCbUmtBOjSP14HvoTNHBmHkh0emD8Uvm%2BPz1UfpugLjMIpFqR2A%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e407541817723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"1660-19ff1570e74\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":5728,"size_decoded":2970,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2b3ac3424798a9ec4f4821ccc3689dac","sha1":"9eb836fae489b548ced507172672dcd1edada06b","sha256":"0973ef2fefa05d257888d1de297d4084c366b8a4bb38b47dec255f0f4eaf1204","sha512":"9f59b4afe0acd0a6613ff1c43b0a2209965b2621976749f76d78a8a86c611ad3b3aa63272176b2696c8d74fba37e6172de0936f031bb88f34eb468145482bf40","ssdeep":"96:aPSvaKRTK5RiyHuDgp64vMBovbnVYNadqSFn7Ph2mTfteqcaA9AbjMHNaPRRT6+S:NRTi9HuDgprTnnNPnta4jyARRT6+0p35","tlshash":"e0c16884779bd764f506b5ba4b10e5712a033bcb3e3250dccafa1d19d92546c4e388e7","first_seen":"2026-09-20T21:48:12.316341Z","last_seen":"2026-09-20T22:06:17.779812Z","times_seen":2,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/advantages-shape.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.729Z","timestamp":1789940846729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/advantages-shape.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CLVJbzHmCwXaZ8YCDSIvnZ%2BP9yJjckindXfXgoilxr2v4YvrjgubgS21btVyiOiFWGke%2BhRCMqiUzLPef5fnapTf%2FDSa%2BhY0qVwFu3MYivrfgAFM9%2Br1iyQD%2FWf8UPnthGy2Ua%2FPEEY0xLCVjqs9l64MQqQcZQ%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:27 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e40754281d723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"6779-19ff1570e73\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26489,"size_decoded":12548,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"98d9f4f96e8e140a765119b2bc932beb","sha1":"4eda421b79ee75719500e3519dec9ce53aa03d10","sha256":"b30e700d874e0f7c81ae208951382c5a4519ea3deb0b57cc367ee3f78f0842a1","sha512":"d15e26d1e41cc5b95a18f6024d6d17bda8988e2dacd60e2f2a5da8c7990a9584ff28a0edf076d0d8621f4a29ce86fdd3459e76c02abd51ec5edd1c482421e0bf","ssdeep":"384:z4ad+oFW+Kxs/UcQbYzbncOMWckWi8PUEPvXaONYqNkZdaIr3yLXcPYV:z4aFW+Kxswknn5jaJP/PqdaIr3yLMPC","tlshash":"74c2d6ec5bb0dee28dcc9bdbbf2045c9b51364b7ba449d38c06c5f58189196c9928c8f","first_seen":"2026-09-20T21:48:12.317945Z","last_seen":"2026-09-20T22:06:17.782086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/_shared/js/intlTelInput.min.js?v=23","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.731Z","timestamp":1789940846731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /_shared/js/intlTelInput.min.js?v=23 HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFJ1csigHoGFEalHLmFfVPXwuToTC5ac57fC72SWaaLabYnIOVbwTjrYlZp0mnfxMSLPXMeY4ct88Ams4DiUDHc1t2Dea%2Bjs%2BV6R74ncK0PANhD3BWQyPcHX8lwqnGdb8wgrPQS4l053dyBhgEvYEphsJPNNwQ%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e40754281e723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"72b4-19f89f8b656\"\r\nlast-modified: Wed, 22 Jul 2026 13:16:46 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29364,"size_decoded":12645,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (29008)","md5":"a1ed9de900d79b0b17339dc36efc715e","sha1":"b18ddb2733e358d450a870de992a93a20875ad53","sha256":"8aa5f8f647356dcd4fc5dbbe0efd5bc0e8da74026bc61e24636e2e1f5749b0ce","sha512":"6c8f29f8dd9a6ac4ee24bcbc02f3a2cfde5a95341733276da8ae5c34eaaa22b6835d9510c3043227a71a74b287c884f60a4490da522d0c2d711caae18ca46527","ssdeep":"768:m603Xlqn/kiIzEfCjJMvA4BX2q2nodn24c68g:mDiIzGA4Gnod3","tlshash":"17d2e8ae73656b37aafd82a270a50513af7f79444704083d78ac8ede1288ed171f5b34","first_seen":"2024-08-19T16:10:17.967477Z","last_seen":"2026-09-20T22:06:17.775841Z","times_seen":109,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/apple-touch-icon.png?v=new-landing-2","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:27.293Z","timestamp":1789940847293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /apple-touch-icon.png?v=new-landing-2 HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Sun, 20 Sep 2026 21:47:27 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a3e40757a8c9723c-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400, must-revalidate\r\netag: W/\"b60c-19ff1570e6c\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HbbycX48qACfc0Rx98c6qlFBi9ZqHGdMDE03M370QacAlMJvNc9wPvlDbnsLqPoaeSHBT2S06OMj%2FKWymTkGoRBIahzDy9Uvnq8JXb1L02ErvoVVGplr42j2Wd8qRmGXPU5r11U7BqIMX3Jr7oVxvSMQcGsOkg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46604,"size_decoded":47367,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e570d994843846d786e96bb888c7d8cb","sha1":"d085cf868f2389ca1f6e0230538008d7a04dc8ff","sha256":"6955a7c243668a89e5cfebf13d17fcc94881387ae76e92a864480e4e7d5916b8","sha512":"4ddde4928a2a550e94ffca932f8e4694a094c5f7f6973386aeabc503d266d087c568a7a54483cc16016539925254d751d85de9905cf778831de83e8ac12fd4cf","ssdeep":"768:kRLmSb16sfVOB/thOOIRf/EH+6xKIHDhYPJ5hZsuKwnx/PCAStsQV4sY7dq2c:kR55ShVIhM+oLH1UhKuKwnxPfStsQC3k","tlshash":"a323f12c8bc693d2c8312c5f0ab535586a0a8e3901bf8c1f55b1cada5f5df1ce0a3b25","first_seen":"2026-09-20T21:48:12.320385Z","last_seen":"2026-09-20T22:06:17.767832Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/js/lead-form.js?v=mu4conhr","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.494Z","timestamp":1789940846494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /js/lead-form.js?v=mu4conhr HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dtOH0Mfv8IfZKOJmknC6OZ5hiV%2B4PexBKeUTpGw1f4Tg6wYn%2F8YH1gVu9VxZ11SUuBWljH%2BBW5aeIIshivSKtxUiY0o3Ig7nji%2FgSmzzw5RaPkiFtIa1UWgtg5h%2B8x9%2B8OzilGYkEQPB9c9MIUvqnrMcH2ZF5w%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e40752af62723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\netag: W/\"16ca-dvH6Rk4UPbffsatjRgeASJ4erFs\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5834,"size_decoded":2643,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"ac1afd3002127ad1909a4ae17dc6be1e","sha1":"76f1fa464e143db7dfb1ab63460780489e1eac5b","sha256":"8ccf9feef1d66fa540bb805c9c32cac8b37463d7d155d5870e8e02919710452d","sha512":"17bb95473a9a15ca1c78ce0e8848823d5351b3b98b47e1900d12756995fb31805194dd0755c6f220e88405307489cf9d17abfe000f28dc21a9f3e3f9cd1bba8e","ssdeep":"96:Q5LifmURB2YWJaFdSEzQkJsygBEKoqEzcNp1P61HLipsd6jk+C5ip0wkoI+:QUfmUz2YWJYQssygBE9qiUp1P61rRLfy","tlshash":"9cc142ae7e9322229fb7317e6fdf9500627598130c85c8107d8c82055fe0a2a97b9fdc","first_seen":"2026-09-20T21:48:12.321978Z","last_seen":"2026-09-20T22:06:17.764085Z","times_seen":2,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/fonts/Poppins-SemiBold.woff2","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.704Z","timestamp":1789940846704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /fonts/Poppins-SemiBold.woff2 HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e40753f805723c-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"cc90-19ff1570e71\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XIYiAmR%2BXwJN5X%2BPGy6trS6x08h9vv9dHxikZ3pU0Gn%2FiCs7tLwY2inc8xsjDcSi7ZEddYq0nOur9bZ53ZkFdaKwhJcDRNHDBLoyeyP%2FQjnPpkpjAbri4af4q3YAO00q14OcrtOU0u0Ds0duPEluwhsfzseCuA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52368\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":52368,"size_decoded":53142,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52368, version 1.0","md5":"d5c635f42cd162199f5367ff9a8e573c","sha1":"473550c656106720438fd749e39f309766e8f79d","sha256":"228f0faa60882405ad0fddd4fae6929ae90a0c7eef0eee5405778dd7e1462a8f","sha512":"ca352b7272f9a45ad3c8a47383ffe6be4e3c8cc7971c6c8b9be6d4b887b61a20b5605dedb0bfc2121b4b0596d305e2c0f5e52c6f91b8e81781b2aaddeac888a3","ssdeep":"768:UfdRx6+AA4OlP/6e9l3K11pUBlc9FdPumY2Z0cMrvlHKTpozUhO65xNe6h2WbHUx:ciiP/63ae9vPxY2ZIZHKT+CO6Vh2Wc","tlshash":"4e3302bf93b6e88bcae7872384dafd49f2c87c150325c2ff5628542255a516482fb1f1","first_seen":"2025-06-19T01:42:13.387255Z","last_seen":"2026-09-20T22:06:17.783837Z","times_seen":15,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":157,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/_shared/img/flags.png?1","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.910Z","timestamp":1789940846910,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /_shared/img/flags.png?1 HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/_shared/css/intlTelInput.css?v=23\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Sun, 20 Sep 2026 21:47:27 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a3e40755486b723c-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"112b5-19f89f8b6c5\"\r\nlast-modified: Wed, 22 Jul 2026 13:16:46 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PTNf5HFvsxs97PoDIkPpX1Uz2RvZuFKiLWxa4pOBTP52J8Ir%2F6ysA5QXhVi6b7f%2BTEygFdxtEo%2BXiMCvXyofzHZa9Hf0Olp1sZWHxgyv6zxojYvOPQLv6ksFioRc8VKMaKzWlqyW6bHJ9bMnhIWLtcHIOfXPJQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70325\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":70325,"size_decoded":71094,"mime_type":"image/png","magic":"PNG image data, 5762 x 15, 8-bit/color RGBA, non-interlaced","md5":"0b1ca148890222235a0f9903636ca21a","sha1":"b451b4db431749cc40cc2a5f271f9807ca21f1d3","sha256":"54dc5bc49fbe41359681fa0af8add039fa1383a4f4eade34f7a0a5a257dd1caa","sha512":"37553ab4cecdb30b631d883dc0a1afe4b5e81b921fa2fb8054a63fa054c2f57954dddebfee1a5b676f97a392b954aaa553a803e6e9abeedd56f87da0b58a8475","ssdeep":"1536:3Cc3jdCcCx1zjonyR5/Gm5mwoKVehnITl1G/Ghdfal4pMy9c:SczdzCx9jonyT5mwo1hIp1hQ4pMOc","tlshash":"966302b241c2a627f87cb972b955522b673bfb30d280780a00cf15b6979517f04e3a3a","first_seen":"2023-09-16T21:00:24Z","last_seen":"2026-09-20T22:06:17.783286Z","times_seen":6864,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/_shared/css/intlTelInput.css?v=23","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.490Z","timestamp":1789940846490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /_shared/css/intlTelInput.css?v=23 HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jeHFCnAYeLK%2F4%2BLd4TNehtw%2FA0G17b8wEq8VfQuiv4JslXUO44HXqMyDMKqQsg85eGGG%2BmJlX7XyFNmdW1CyrCM2xbduF1zq5AURdTpK70beK8W2KQju%2BCpy%2FT7s2RkyStzkFoVVMW2vkfzdh9kPbqIazSptvg%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e407529f5d723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"5038-19f89f8b41d\"\r\nlast-modified: Wed, 22 Jul 2026 13:16:45 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20536,"size_decoded":4171,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (830)","md5":"5666efc01f49c40fa97f552a8fb5abce","sha1":"3797983375e52511c41050f6abcad7d0166ed5b6","sha256":"1b5c1ce40a41a570a1f08d1ec71f1d6e7de73b5a048935367f6c483ee727e06a","sha512":"ee22d0bc0200b879b54028e76327a030e39c477565c01e9ad4671656fd0415342496dfd0eb5dc89b5144b54821d527d551892489bede544e35f661ac52e6a3a4","ssdeep":"192:pI20NDsX5uVsAPRkk8ei/yE9y6czvZzorr8/zJHVyT1bK0VN12o7tHPVEVtVaVb2:wVsXk1Rd4qE9y6mporr8LJj0H12o7U5","tlshash":"1c929e2346b00d3e965dc1fa38a2c1b5773f1c8a35eecc96eed9504a1887b90e5ebc54","first_seen":"2026-07-18T04:12:14.860646Z","last_seen":"2026-09-20T22:06:17.763329Z","times_seen":99,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.492Z","timestamp":1789940846492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 22 Sep 2026 21:47:26 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t4ANczRLU%2BnzPIIzTkXOe7qlmGEuJ8Y0d6r1OkjrKwtEhvb2kmFGl7vzKpPGv5vS7EOL%2FfGrfwyejlUCKv1%2FRq2L4Mn8L8tlSmfy6VBUajgDGM3WEqhJcnWwsc2AoIaY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\nserver: cloudflare\r\ncf-ray: a3e40752af5f723c-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1284,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-21T00:40:41.305941Z","times_seen":436925,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/js/site-ui-pl-pre-edits.js?v=mu4conhr","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.493Z","timestamp":1789940846493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /js/site-ui-pl-pre-edits.js?v=mu4conhr HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i7nsHjil3FYv4niMBmXVDFWWnmjPRI514kRdtbwUDrU3RTncvtYKb%2FkvWBQS29YQD5M%2BpHxqbRwKxBm6dRNbjVZDmuOYv9CRXJ1QCQxRJPx2WvkRzrgbjTpzbCENf%2F3zHAA3Lv%2FAIGt4bMjR%2FYzLe3%2FfBB2jSQ%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e40752af60723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\netag: W/\"954-an1dji/hcTQMwQNiZiuJN54ZBgY\"\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2388,"size_decoded":1624,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5f59a83f9f041df7fb1db685186f85fe","sha1":"6a7d5d8e2fe171340cc10362662b89379e190606","sha256":"b2b0af2bfe522149cd1d604b527950b74307c0e8681e09676972f1e56066845c","sha512":"22f3c7ecaef8c2d02a142a6f8212f8093453ac9d1c9b8f81bb58160b592458a05bf42600a81b0f73474c0c0f0b0ca3fe44bfd93d070a35a335301a041e2c3d98","ssdeep":"","tlshash":"19410dada9b5353a00bb75b813db93693b350083310a89023eeccb881fd65754af39cd","first_seen":"2026-09-20T21:48:12.327221Z","last_seen":"2026-09-20T22:06:17.770931Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/logo-2x.webp","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.502Z","timestamp":1789940846502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/logo-2x.webp HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e40752bf67723c-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"101e-19ff1570e78\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8bG3PjQUYWxlAYietB8h2V%2FCrZ0qFNA%2Fprij7Q%2F6MGhjz4ch9scBO4GWib6s73u65lzaZt5JJNZCu9mqSfwkpaG4ZYXgFXx7rS%2FJSAV0O0gz2ezV6gUvdHp0wXptba0M431KQIH5XJ69U%2FaCEknIWZ91K1%2B9w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4126,"size_decoded":4900,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"75d8a7d8f0b794d1adf0c11aba8ca9d5","sha1":"4e018a8f9935e7e4315f76de85d8a326c47634cb","sha256":"fda8540dc0df4b6f66881caa7b0dc01b6bb3c16126c0a9f8d3b0fdde3d822411","sha512":"65afc82642dd39d79d9821c983c7cf4a3daf675a81968436635211cba770d55d2012ec40811628b662c12c5fceb0593b3de55f0833f834b987eb86bfaca50596","ssdeep":"96:TElbw+iXVw3gmj/fEbmcn+mG0nJdD9FaColPGNktimC:OwT+Vj/fECcn+mpnB8xPGytvC","tlshash":"50813cad17f257cfd49232309c904b27de2e6d05fe17331bc78218a26f1288955a85ed","first_seen":"2026-09-20T21:48:12.328587Z","last_seen":"2026-09-20T22:06:17.765514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/hero-shape-1.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.503Z","timestamp":1789940846503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/hero-shape-1.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aTIPQAZWorhoEIjp4WnOpzB3Y0fnlAGafl%2BGMCPS9giusbg6k1Uz%2FGZCmx8nFW5%2FZKrCbftRMt%2BpzP6Cl8kEKYrZdjK06RMPkmJDQVdA1sVzWNor%2BUFzrx4IoY7UCy05cGkLaoYnPq5vQiFdQ1j20oeY9CueUw%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e40752bf68723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"6924-19ff1570e74\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":26916,"size_decoded":12897,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a92eb059cd4ee6f43b89e92506271752","sha1":"1ea728b600bd7b8df3e4f9b9072ee69ba6b97bef","sha256":"0f1f6044a85086097b7d094a8d23fe6c6e02285bd39dd4d6d17e1f1caf18eeda","sha512":"0998fb6eb05369222b3040d2b31a6de087846452dd580f2853722b56900e239c6a841795fc11606349922aca0a5134bec3877d4db353c0996718dbc3e042b4fe","ssdeep":"768:zpj2WWCkikKHYzZd44WPz/SQ4gkWKH48Ne7:BL5YLVhpM","tlshash":"38c2e8ccdf708af0dec887ee7e201dd86922a93a7f919928c05d5b581c81e9c493994f","first_seen":"2026-09-20T21:48:12.329952Z","last_seen":"2026-09-20T22:06:17.766271Z","times_seen":2,"resource_available":false,"data":null}},"time_used":556,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":154,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/hero-shape-2.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.505Z","timestamp":1789940846505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/hero-shape-2.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6mbs0zK9bwkHi%2F2kG0Vq%2BGCWH7fMZsUC7tVOtdNFxxaaniXT1iFomFXku6oI4JWzaOBQn2XOxqco4nrKUfuLAhCz648AXit%2FVcWvzi14yLxUlDtmi6jRxnatuOOoNsWe9%2F9M3bkm2VLIABSmSYOKFtCJ4tZNww%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e40752bf6a723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"65fb-19ff1570e74\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26107,"size_decoded":12351,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"613c5249bf113bd28247a05947129358","sha1":"f096f363cfc8f364df7274eec5794d00673a1a36","sha256":"5569b0969031ab9f35c40e26f58c63f25d784d718ff7137d1de4598162847596","sha512":"32ac704c6389d617ef27bcd1e21efc2595ef01eb0bc3cba76a6077055173b938073ad08aa16104fef66dc8f05aec63555d6053682675156f0a537e397472b75b","ssdeep":"384:y6bDULPc9EpJ1aknyl6Ju54WbnR0Jj2ueJwb1lt9qg1uUixKt1Y05+KX+sc/D4wB:LOPc9EpJ1aD4C0JCls6YuKt1Y0gb//RB","tlshash":"7ec2d8cd6fb0c6f04acc4befbf2128dd6d2b68a6aa858d64c01c5f4d48d1d1caa1d947","first_seen":"2026-09-20T21:48:12.33138Z","last_seen":"2026-09-20T22:06:17.76704Z","times_seen":2,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":408,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/fonts/Poppins-Regular.woff2","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.701Z","timestamp":1789940846701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /fonts/Poppins-Regular.woff2 HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e40753fffe723c-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"cd18-19ff1570e71\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QdA%2B0aRv0eU8dafqBolVx5%2FOMMecWMQL%2BSCSERng%2BHzMDlP%2FPEc5MxAvJYSbMQZUuoNSNXKNdWfNF23WxMqmvgIOi6EyEhKhzoRQAgncNzdw00FHAtVUJYhzt7eFqX3hr27sGbP1xhVZ2frrle4HeOwOt%2BIeCw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 52504\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":52504,"size_decoded":53282,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 52504, version 1.0","md5":"0c299697ff6cff961c0c51f65b16c77a","sha1":"97847fec2721e1a9b614c07d1180cfd1ebecf571","sha256":"0c815a15e6e77881c8ea1e75fcce21b66a2da2888dc400d8e382134414884a78","sha512":"dae2799e20d6ec7be5a5c11ba298a4f266025244a4eb503499deab477fea8c96ac61e955ee56631098c854d5c7814ce14c65726281160df789bf275076292d1f","ssdeep":"1536:n8k/Bbl1j8nyj3Ndv3N7vfoFDooxEHzcj4Gn:nh/dIk3nhfoCza4Gn","tlshash":"0b33f2dc3c48e7aa32d2559a2144cd8359176a5c2e3130877cb525fbdac77b6c4342be","first_seen":"2025-06-19T01:42:13.384055Z","last_seen":"2026-09-20T22:06:17.771738Z","times_seen":30,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/proof-icon-2.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.722Z","timestamp":1789940846722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/proof-icon-2.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9clyFjkE9b%2Bh5w6JS1YlWY%2BdOBdN4WSvA5zTFxcwaCBi1DMqbMDEdnE7I6SizB%2FXggen3Fube6WBw7KF%2FtGgYa56DgBSAHa%2FDIJSeIT9zyEmnYE%2Fr8%2FCJL3qzMKhhHUWd2kVsOREtF4rAuGkYc%2BWpv%2Fg4bWfg%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:27 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e407541814723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"469-19ff1570e72\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1129,"size_decoded":1358,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3aa7892e8da91c05f5df24a1408e0477","sha1":"36e9a05c95e134f6fbb603b1b35e1f44ac2fdde0","sha256":"e25e643b01c06b9ace871d0387f15769a337135b0288fb4cfb416fae68af5f89","sha512":"9b14334b3f2e342128333b4d936b76e70a02696b0f614afc0358977ad2cda2f6adf58babd1ee78b2d5e0ad020c35ff804a2dc983d9c534b7301c92bc677dceeb","ssdeep":"","tlshash":"672149d0275dc2ecc4c0babc1719e4b908a179c99e45105afaf03d1d7974d45183c6cb","first_seen":"2026-09-20T21:48:12.334127Z","last_seen":"2026-09-20T22:06:17.774344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/fonts/Poppins-Medium.woff2","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.702Z","timestamp":1789940846702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /fonts/Poppins-Medium.woff2 HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e40753f804723c-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"ca2c-19ff1570e71\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C9l04QWRR56mZGvD1DzraKrVL%2B2R3j%2FyTcW2LGUELwq2ZPclrFlecQgKLtAvnJOTzUx0DvQTqT6oEYPnu%2B4euM27wc3tsnDtcbS8pD5E8Yysc0abodKr6ifD91UZSPl%2FzXDggroYmNIFjgIjp%2FUNFPY0IJeETg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51756\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51756,"size_decoded":52532,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51756, version 1.0","md5":"7589537d5de1941b415dadeea426e2d2","sha1":"054c7a1e7c71c68740f49f4d11b93732620a474f","sha256":"b1e3ca609303697025a05d0eaa24d4768802e5e9ca5b76922682c65ea3bf5473","sha512":"f5625acdc62bd27a3822914f3f44d6b617c36564b0e1a2c9663df0395808d88970d635f830fa89b4b2b46de4cb6dc72c6abfae04eb1b87ac758d6d171c694eef","ssdeep":"768:JBFnX6VB5DQq7R2wlVgHtfXslNdc2QzleGh3m7lEXdOTGu7T7T3vFjy8OG:JBFnwgqF2uPlNaBlh3m7lodon7T3vtyG","tlshash":"ca3302ceae9b39ac55c4ff5c28345c801fe1bc1497d481a334ba577095906fabf60706","first_seen":"2025-06-19T01:42:13.432716Z","last_seen":"2026-09-20T22:06:17.772359Z","times_seen":18,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/proof-icon-4.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.725Z","timestamp":1789940846725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/proof-icon-4.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oe6XOUNguReyOAte8K9CQZzivLgcGg09AutFtpglskxtcE6n8Qf1sN%2BMlGQzBrp6LKfHBkIPJ1pJhJ9GE51LGgSxAYhimnDvODDSD8eAbswO1SLnL2sht%2FjSdHIVHphJ0y1qtAKP8AHHsYP%2B7uLSKiZID9bMmw%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:27 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e407541816723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"1401-19ff1570e77\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5121,"size_decoded":3170,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ce268eeda39fbe500a84063ee1db85de","sha1":"5d5001d2fb71c248d9445bd0393a86b7adafb611","sha256":"e90affc2f614f47a95b707c8dc999510983e40e6a06116563e8f1b30111adf5f","sha512":"d4fe03f9fdd98799c25b48173c5a615604eb18cb4c0989b8d6c897161da56fea4b7b3360debfb63b1e186d5b1830e1c94bee563107785e6d406c8479c52fb9c6","ssdeep":"96:aPOQ18QTJg2bFjTq0JUGUKGEHa1atjuRBrhSMA1KIDMH1XDxpJK0:1QeQTJgmu0JbUKGEHaujun1SMAJ4xpJP","tlshash":"f3b19184337993ecf805b2ff5316f4707c5339d9b9429895c3a96c19fa5200c2ea88e7","first_seen":"2026-09-20T21:48:12.336924Z","last_seen":"2026-09-20T22:06:17.77874Z","times_seen":2,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/advantages-icon-1.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.728Z","timestamp":1789940846728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/advantages-icon-1.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FspfHqrvnH1WkhJWs5cQ%2BJEUHPXdIJjE14G4PWWuXGok1gbjGoLyJfnT%2FuvBCdMMvG7gaYfvF6ZJH1MYGGJxkNDPR6%2BGUsJuO13UZ4%2FMBjXt8W75mYyd3rfck9%2FCWCG%2Bsj04DQFwgas5I1j0uzMoUOezBclxNQ%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e40754281a723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"af4-19ff1570e75\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2804,"size_decoded":1610,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"245ae29130e31057e5cf823f4291b31d","sha1":"9a35c49208cab4f18fe8b612a0a6c584f04a261c","sha256":"f6879f2933bf7682c52cd1ffd82ee50da6519f49f9b3d001128347b35e40710b","sha512":"197a92ed4e0b930af2009c68480e1e8190ab633f7fdecd13286a375da7c252d09ead04e38c02ad0a137054f84711250ab1ce5490bbf8ef1c557a09ff1a5b2718","ssdeep":"","tlshash":"7251cd4a230c9c3cb4320724e745757860f67a538b9cb204ee72283a621d54e6d7fdde","first_seen":"2026-09-20T21:48:12.338587Z","last_seen":"2026-09-20T22:06:17.780445Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/advantages.svg","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.728Z","timestamp":1789940846728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/advantages.svg HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LgI4JQdkDqKmYQtohe5se7C%2FL6aDClK%2BGpMeU0n2ReTIRFao6gjtv6K%2FdUadAn2GCcIqCpiEU5Ry5ABdE7TNv8GWSJXl65yRrWuFrhiwpu4fzJrGyBh9jZ%2BjD1KULLE3%2FzlY6q9Ssy1zQ%2FOz%2B%2BSryzpv0tzBTA%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: image/svg+xml\r\ncontent-encoding: zstd\r\ncf-ray: a3e407542819723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=5,i\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"5cdcc-19ff1570e72\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":380364,"size_decoded":154711,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c3da98b5b2ee767d1e9ad3bfe79b46b","sha1":"5db0dec9ebeda4f404b549f79219e29466704f2e","sha256":"f9cdc0695e5a6125ba1af0fc9f8acd98e7f7ce1819f398c23693c0e6f972876e","sha512":"71599473a6542182d37b5c4ae0463c57467e781dec6c6f63a24b7c34bc622408860f273fba91c1428b42bb2df2fa21fc1040924b4c34d2f81e0448d161589326","ssdeep":"1536:Ra9ypJXtlw9xHzVhIFhUJEvhvCTCvi4pjO9YIFACuWdtfD5+R4OcUHT5JXsx1FfC:+10vX","tlshash":"268480cd3fb1a9c949c8cbcb7f1160ad2c17d573ae8a4a14c16d8b5d24c582c9f86e93","first_seen":"2026-09-20T21:48:12.340136Z","last_seen":"2026-09-20T22:06:17.781175Z","times_seen":2,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/api/sms-verification-status","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:26.733Z","timestamp":1789940846733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /api/sms-verification-status HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zeldrunek.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\ncf-ray: a3e40754281f723c-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate\r\netag: W/\"11-n3JXNj2BI6XcrazI4SSMoFNmOFQ\"\r\nserver: cloudflare\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKHDexb7bgonCjqA%2BSxkK7x0pivTvMqnXM1WlkJage%2FcJt2FMvvVMvVEmOZMV%2Buesw%2BW%2F2tHpjYtwgEdAvhSbu5WJwhI13dAYyaDEBW%2F4NS1NuQFbB5oIIHSU4pgrIe5s7ZI2voVvnMdAJ%2F%2F0Fq%2FEYNPMhOSYQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":787,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d987f50e402ceb8f1a41643a6c665ef0","sha1":"9f7257363d8123a5dcadacc8e1248ca053663854","sha256":"5acf3ff77b4420677b5923071f303facaba7a9273a346284a667a275df325146","sha512":"9a4f3113354192aa2a940f747a66f3784c0e6aa9b6ad9bb8d433c11996c8bceb9836a70fd36220b630bf8d71defc37b10abf88e4901c9f070769a12c41eb730b","ssdeep":"","tlshash":"72600000080028880000c0008228020300208c30200220288000002820ab8200300820","first_seen":"2023-04-07T05:54:25Z","last_seen":"2026-09-21T00:16:42.766524Z","times_seen":2474,"resource_available":true,"data":null}},"time_used":195,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":195,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/_shared/js/utils.js","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:27.085Z","timestamp":1789940847085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /_shared/js/utils.js HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/_shared/js/intlTelInput.min.js?v=23\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: Express\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ohs5%2BDQ7S6Rpl5m2f%2FbJ5NYzONBajqxA08S4M3NG6D%2BCwukOJuhyT0R%2B6Xet0L7caMXTsmiECD5306XUwrLNEAzg1Rj8xJ%2FEK5Mcn88CAHnhNMOQ42cNqpm9pu6Ji0RVJwsjSQNa4Cjg5IbKx4AXkzOlLIStcw%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 21:47:27 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e40756589a723c-OSL\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, immutable\r\netag: W/\"3f362-19f89f8b66f\"\r\nlast-modified: Wed, 22 Jul 2026 13:16:46 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258914,"size_decoded":65929,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1903)","md5":"6eae88fad6fe723d8c8d2386a63dd152","sha1":"42046e250c7f2eeff4619a89b0be7b83e01e5edf","sha256":"a4000409a897003b1c5a8e1f9f32e18a11b022452151cc47c17ecdcb76d5223b","sha512":"d356bd87f7170499fbf445353afeda69dbaccc391eb41826290a30752475735a27d56ce1d642af1dcb02f93a1405926a440add5cb38000b7d112cab0f918bd6e","ssdeep":"3072:9klM0hpJjFs3OwPss3MwPKm7i9T2xFM8Mp2xHsNBWUsD56kmLNTg/QKWVRphmVEw:9klMipBKxxFM8Mp2qbZQ","tlshash":"1144f1ebd63c9737a1e97b35968eb3cd5a8cbca3c848567826c3b54f52784e0706c205","first_seen":"2024-07-10T10:54:41Z","last_seen":"2026-09-20T22:06:17.769141Z","times_seen":2455,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":198,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/img/favicon-16x16.png?v=new-landing-2","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zeldrunek.com/","date":"2026-09-20T21:47:27.294Z","timestamp":1789940847294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET /img/favicon-16x16.png?v=new-landing-2 HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zeldrunek.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nx-powered-by: Express\r\ndate: Sun, 20 Sep 2026 21:47:27 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a3e40757a8cb723c-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400, must-revalidate\r\netag: W/\"327-19ff1570e78\"\r\nlast-modified: Tue, 11 Aug 2026 15:00:42 GMT\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2Fv5JP60Tl8Lg7P8v5SGMGwDqR69euPXBDweBEJB7VuacgpMM5jjaLoNp1lL2ShhXlN8MMmlRA%2FLbMnjieCD4vbxigsEKqL8B7fB8KIudrHLHm2ku5xd8k%2BERJqKczlkyoGr0Nj1OfLiWw068inQmDfG9UadrQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 807\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":807,"size_decoded":1571,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"03be7be005111d1b9810f72b65f9485b","sha1":"9d2da1ed64bb6f7dfe9d81914108331c75bb9aa8","sha256":"9f8bd372f2a4bbceebc6e72a3049b688720352a8f5e4b964d6c7e117ad1213c0","sha512":"20d017eaf4984a56cf937db196ac7ce177a7a14c0a0b4104bad5dbb805f860b03980abc8d3f40f1a42e38f4b60c972b152882293909b537b5153dd84f5873cd7","ssdeep":"","tlshash":"2f0186832bdb220feacbcc3fd059b55975d2041a072330251509f77d546ad1a5280107","first_seen":"2026-09-20T21:48:12.343083Z","last_seen":"2026-09-20T22:06:17.784581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zeldrunek.com/","fqdn":"zeldrunek.com","domain":"zeldrunek.com","tld":"com"},"ip":{"addr":"172.67.170.214","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T21:47:25.737Z","timestamp":1789940845737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zeldrunek.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 19 Sep 2026 16:29:13 GMT","end":"Fri, 18 Dec 2026 17:27:44 GMT"},"fingerprint":{"sha1":"2F:FC:EC:BD:0E:20:D0:67:2B:81:3C:9E:90:68:06:BD:95:AD:ED:E3","sha256":"B5:F8:6D:68:97:E0:07:D2:31:3D:24:74:03:6E:14:0B:C5:1D:0C:C0:AA:F1:2C:E5:5D:B1:62:C1:2C:63:D9:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zeldrunek.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\nx-content-type-options: nosniff\r\ndate: Sun, 20 Sep 2026 21:47:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e4074e1d60723c-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate\r\nexpires: 0\r\nserver: cloudflare\r\nvary: accept-encoding\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HcL2VMCSU%2FTKI65xiMy67%2FLzsO%2BNAnWL0Ry2Wq5P1BwAbwHIILpluw7TU1hWa%2B4MoCwjv10JTUij%2FrxJSDMH8F2NF1PvfcY37Hu4xh%2B2GpbyAJyHp4jrs4tR%2FbmVcYWPj%2By4uj1lTweLN0o2brxe1ug0N8JefA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96094,"size_decoded":23656,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (22317)","md5":"0ca32ce46d312c77d8013e5090ce887f","sha1":"bee33c09d8336aeecc95df80ae87cb687bcc97e5","sha256":"9fcb0c4a5d908f862e8eb3ba8d44d4c0a5aafec1a15b13fddb72f3f9127588e7","sha512":"e9d6c8bba7d004db6ef309651a928b021a00a3de898d99df56340d0402760aca22beaa6f8191ac39e8eb199398e9bd29d9be9b30a538032caaf9405b593bd785","ssdeep":"1536:OcvV90WCEOfGDcrypOFhfb3PabFHSIed0/K8qGP:Oc3s+D69HaRH/KpGP","tlshash":"ca932b21a1a4102b519395eabbd75b297f6cd003e6489168bafc1218cfcfdc356b379c","first_seen":"2026-09-20T21:48:12.344469Z","last_seen":"2026-09-20T21:48:12.344469Z","times_seen":1,"resource_available":true,"data":null}},"time_used":697,"timings":{"blocked":-1,"dns":10,"connect":21,"send":0,"wait":524,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zeldrunek.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zeldrunek.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}