{"report_id":"99bea5af-96a9-4ed4-9fae-790871193ebb","version":0,"status":"done","tags":[],"date":"2026-09-20T10:31:33Z","url":{"schema":"http","addr":"zrokna.live/","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zrokna.live/","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"title":"Plastová okna Frýdek - Místek, Ostrava, Český Těšín, Havířov, Opava | zrokna.live","dom":{"size":64064,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1706)","md5":"7d95a76574a5fcc9140da36b6162c14d","sha1":"8cf3090d924c191cc25b01ef3c836bc932994047","sha256":"9668f2249c94fc5c81fdeac6d7e5929d83418fdc5588a712433c6ebe1e74fd54","sha512":"2e05a52bbec7f27dd88e352dbc209fa0137f63b24d49f846f5bca244494e85ad7d5725f9ce865d5c80e43217a5bb7948439721526ea54e4a1a4690a202b5bbac","ssdeep":"768:sGT+UfyoW6AuShWvw1fR33AbjYeN1Dw9NlHX7J/X:jKoW6Aovw1fR33Y1Dw9/HX7J/X","tlshash":"83539463c4f468260243a2d8bfb9a798ff527417dd974a05b1dc0fc45f52ec28a136ba","dom_hash":"domhashe04b07db01937de4fa2d1688685dc240","first_seen":"2026-09-20T10:31:48.276963Z","last_seen":"2026-09-20T10:31:48.276963Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zrokna.live/","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T10:31:33Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":10}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"c.seznam.cz","ip":{"addr":"77.75.77.172","port":443,"asn":43037,"as":"Seznam.cz, a.s.","country":"Czechia","country_code":"CZ"},"domain_registered":"1996-10-07","domain_rank":424355,"first_seen":"2020-05-22T07:44:43Z","last_seen":"2026-09-14T15:35:27.800167Z","alert_count":0,"request_count":2,"received_data":204873,"sent_data":1093,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":3,"received_data":20276,"sent_data":1841,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-13T23:34:00.595824Z","alert_count":0,"request_count":4,"received_data":1785253,"sent_data":2164,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-13T22:43:30.746969Z","alert_count":0,"request_count":2,"received_data":68182,"sent_data":1126,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.zrokna.live","ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":140,"request_count":28,"received_data":323785,"sent_data":15683,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-14T00:01:55.00998Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":842,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":2,"received_data":1023056,"sent_data":964,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zrokna.live","ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-20T10:21:45.803301Z","last_seen":"2026-09-20T10:21:45.803301Z","alert_count":45,"request_count":9,"received_data":1060520,"sent_data":4875,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"c.imedia.cz","ip":{"addr":"77.75.77.163","port":443,"asn":43037,"as":"Seznam.cz, a.s.","country":"Czechia","country_code":"CZ"},"domain_registered":"1998-03-06","domain_rank":1831939,"first_seen":"2017-01-29T07:55:21Z","last_seen":"2026-09-17T13:55:56.768324Z","alert_count":0,"request_count":1,"received_data":136,"sent_data":455,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zrokna.live/","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"207d42ceda53d45b8d4b5843ce6aa5ba","sha1":"3ad8429e5224620935410e2195c5df2f938b3472","sha256":"3f3abfa4095e33b89745282a1628b591aaf44a07414f1c132543d37e558f1150","sha512":"a7c3c911f0e9b21a4e7b363ae8896486c31b43541e384ab8feb8c957ba8e2515f6edf1677f30d5813462c652b519a9dd48f6872452495a092616e98fb2ccbf4f","ssdeep":"","tlshash":"fae060cb30020871619f85f623b0a1387093310c78082822fcfc88202f1858b481228c","size":373,"data":"","first_seen":"2026-09-20T10:21:52.090218Z","last_seen":"2026-09-20T10:31:48.331331Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"850d95d96a2a800fc2466d7623e1f2c5","sha1":"aa22ba338aa3e7b4f2f7eacfa9b90344c8b4a04e","sha256":"f42330ac096eb68d2109d091baf33af5b67512d5ffc5d411bf0896ae7b8cef6d","sha512":"51a51ac470381b80ff9e0bcedaba73b25d1402c8fcb8dd82e9394c7f74446c16611d12f24f72a96dde60642ad42b826d7d0926f806b62faf59ca8e84c894d1ed","ssdeep":"","tlshash":"a5e07d35f1bb5061ce772b26025bd3c0ba275112f5478f853d0c0bc84f314e99c1ad44","size":395,"data":"","first_seen":"2026-09-20T10:21:52.093084Z","last_seen":"2026-09-20T10:31:48.33238Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/dist/assets/js/app.js?v=20200701","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebb18322007f750ffa4ed5233db29bbb","sha1":"51f07e113e53095e673ee2ef419f9c869237ce7c","sha256":"3b27ecf8591a4c3c91d63af50cbc286557a8d6d611c49002e584ad9804d096d6","sha512":"f306f42f95bf72abde61f6d24a723028a9b9abf2f5521341446ddbe97769d112900ab599d78cfd507bbb2f4f1fb02955f09b7612afd474ff455556766ebcbfda","ssdeep":"6144:npHzhMFgrlzkF0637KjPWmsm4bcdHmxVSYZBSMC5KbHGXOUdSfNdYpW:npTK6rim6ujPWmsJcNmOf5UgKwE","tlshash":"8eb417cdb281b06343e76175416f510eb2375a64780ac858b13ac8e67cbdd8d22abf7d","size":512968,"data":"","first_seen":"2026-09-20T10:21:52.065484Z","last_seen":"2026-09-20T10:31:48.304973Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026hl=cs\u0026onload=recaptchaCallback_contact_form_captcha","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82661eb311666756ec77d60161e7e69a","sha1":"08001e51f0ad0b82dcf49b09f159734c24e9c150","sha256":"21e14a63dc97d05d14663646b48d6965bac1090c60711499d11c0f525b246154","sha512":"6885c2ebd74d0064362b674e89436e57dccf6cd95ae7f524da3dbc4939d830ecd852bbfef4362dc2da8f88c7a522da734855835ffc1b5fcb14cdfc80c365127f","ssdeep":"","tlshash":"c011f3731a04e0390f720ad1a1fecbb4f542741df55889ec9416ced82b79cdbce05986","size":1091,"data":"","first_seen":"2026-09-20T10:21:52.022501Z","last_seen":"2026-09-20T10:31:48.293464Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NVL98HC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a54c7f06a33fa2a1f5145da82d47d3f","sha1":"0768d7b498abce372652c7a41fb7413f4ed8fe8c","sha256":"22a40845c7ccff03f4dcdefa5a3a92239d630e67fdb2c1fb8a58cd1ec973374c","sha512":"210c879d75a1996201d573c641cfa902ff2c3cc02f02fc2869af443ad8ed644401b3fb0d8bb18fc2c9b7d704c579d0b5bc9e2c6fddc8c2d3541fd22317951ebc","ssdeep":"6144:TB1tVFaZqKtvOdacOAIb4EUt3li8se9xD4wyef:BWZpZAse7Su","tlshash":"ed9419cdb3d674229393b574903f018bb23a69a2b84cc899f289dcd42d3469a5137f7d","size":423746,"data":"","first_seen":"2026-09-20T10:21:52.024206Z","last_seen":"2026-09-20T10:31:48.30625Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-09-20T13:44:12.646286Z","times_seen":101297,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-01SEV7T0LV\u0026cx=c\u0026gtm=4e69h0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a27c0e3c05cdb3bd6f817cdc46ee64a7","sha1":"6f4d0bbc65890c603c2d298569a5f040182ec68e","sha256":"b38d88b9c03e96f9af7b1d0f1c603e43a5c31809a010fdb5089806fa31af2cb3","sha512":"d6558c654cc76990181af7491f83c1e8c92088cabe830d4461b6e5fb8fbfcab671ae24ec11d0a156972a7b0563fc4dc181182846dcf7ea790a9e052045ebd0ac","ssdeep":"6144:T/B1tV6FonaWqrYJNmf96d8cOAIb4EUt3lixWuFbN7UOg3hlMf:RsFoaWEdlhlWsNg1o","tlshash":"aed4f9de73c67422a39af568943f01cb697b28a2b45cc89ab1cddce02d3454a5163f7c","size":598076,"data":"","first_seen":"2026-09-20T10:21:52.069992Z","last_seen":"2026-09-20T10:31:48.321488Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__cs.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3b71d49a9de8aa538a8acf820eb2dbe","sha1":"fda3678b2da9fc3d8ad51fd9c3245040d4bf9a98","sha256":"86112994f880678126b181b9f2adcc5f4cc2348660a193bc37f24144bd5affb4","sha512":"e936ae9ac174c91dd7abd14b34d692b097981ec870e28a1f95a04b50f65d53d2367058c4f800fe5e89e51bb1bc682da0a868d4063705fd399fef61e54c5bcf64","ssdeep":"12288:CgsXbOSz8FNaieyWB7k8fOLsQtcOIX8tVdUz:UbOSyAXfOL/tc9erUz","tlshash":"80054ad9b04274b55322b9f1506b141ea33ea467dc4c085eb1a9c5f16eb4c0eb07bebb","size":848315,"data":"","first_seen":"2026-09-14T22:40:25.177092Z","last_seen":"2026-09-20T10:31:48.308416Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e6e796bc5e091664befa2bf5646ea67","sha1":"47b612753dc5603978794fd91000397b6a9a3f34","sha256":"e6d5ca16a581880651aa59e4560b6edd69cf1b6ff12580f90971341540d943fc","sha512":"7a21ac4cb5e70af252121634202a507df3b2beca36e5898dc330e3ad420b2f1b0563e3bf9dd658444ff52686f01bb490a025d8cbc79b4cfae050e134040404ef","ssdeep":"","tlshash":"82817d71e660388d1f93a779fefb91c8bb3e12707e82574331885894997790b3811ab7","size":3953,"data":"","first_seen":"2026-09-20T10:21:52.094511Z","last_seen":"2026-09-20T10:31:48.334123Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"849ab7da455fbc9d19967794d127dc01","sha1":"148b91651ecfb65334fbee3434bb330089303ab2","sha256":"a3d24f1ac08023d463778d9b8571c0a8fa00bf71796c056a2bc43d6c3eaf1061","sha512":"4e72e01894e3648b205baddec2dfca0ffd0b72c5c61053c714af7def3143989ab964349b287e90805929b178f41a1ee1a1d7f77b6a5cd349f49b77155cbec962","ssdeep":"","tlshash":"2b8000020af0008a8a2328a0002eb20c00e8c8e80e0e02000f220ae288008802a02802","size":32,"data":"","first_seen":"2026-09-20T10:21:52.101007Z","last_seen":"2026-09-20T10:31:48.335265Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a6ef6a00531f83ff27285693a736201","sha1":"faf75f48d6abc6f28ab0f48cb46a5bfa4f001c4e","sha256":"3507dcdbb44e0c93025266aa8ccc1d7e7e16d2000e95786dd59666dd895d83c1","sha512":"bb9574ecd2dab5696a1f859313f5c90c9ab135ca7339688ae1e419548ce1825dd37d3119a409489faddeb9324757aaa893e307b4896fe1836567fc702472c6a9","ssdeep":"","tlshash":"89e0d86576087f34a65b252335e7ca40ecb11048254123308c3c5ca41db6d81411798e","size":358,"data":"","first_seen":"2023-03-07T12:27:34Z","last_seen":"2026-09-20T10:40:55.172274Z","times_seen":1879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.imedia.cz/js/retargeting.js","fqdn":"c.imedia.cz","domain":"imedia.cz","tld":"cz"},"ip":{"addr":"77.75.77.163","port":443,"asn":43037,"as":"Seznam.cz, a.s.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b0ea8ceaac017d712ce80360c7d3ee","sha1":"302d6a9c844ac82be81e1ccaa21cfaf843e926f8","sha256":"ddc5c4f3b76d1679000caf03e042ccb6fc370c952c6348547ee4bb3d59c3901f","sha512":"bf59cf4488ac68e54a0b6bf332789a7315101890df0d7bfaf622b03c48c345ce576cb8ac4bc84e45b2990fcc54d54c307b64cdf704902e5764543244119eccd5","ssdeep":"1536:zt9cYrNe1s6HhxLsvtYcYWzaw6V63b8oNR3eihmawfn6aiMQ0aeUNampaq92g/aS:3NexLsJzaY8orOic3ZguCd","tlshash":"7514d8c9b2d2f4a607b360a6813f520bf23ea915705ee590d265d8e07c7868fc173f69","size":203315,"data":"","first_seen":"2026-09-02T08:25:55.38312Z","last_seen":"2026-09-20T10:31:48.286378Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026co=aHR0cHM6Ly96cm9rbmEubGl2ZTo0NDM.\u0026hl=cs\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bt4xeccgrwmq","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b609be6db01759a225195f6377cc415","sha1":"511b41f3702f188e79fcbbd703cd5cc2a236b1e5","sha256":"37c60322dce3e0b7331fe460b2e5991ebbae5b0d414d83f9bc0ea17f9bfbb240","sha512":"b559908131f78ceded7b2f3daad4650302c0733752ba49edc1e80d2d0587a03c50344c52f4fd8d187ac7bd70395caafe86a76ac9019dffc7b7a576c55d46efd5","ssdeep":"","tlshash":"59d05eab54418df78da09ceb974391a674ae90b780a981f005e04c412ce2d9110285cc","size":252,"data":"","first_seen":"2026-09-20T10:21:52.099416Z","last_seen":"2026-09-20T10:31:48.336924Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"ScrollReveal: reveal on \".revealLeft\" failed, no elements found.","filename":"https://zrokna.live/dist/assets/js/app.js?v=20200701","line_number":4,"column_number":18002},{"level":"log","text":"ScrollReveal: reveal on \".revealRight\" failed, no elements found.","filename":"https://zrokna.live/dist/assets/js/app.js?v=20200701","line_number":4,"column_number":18002},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/59df4ce9b4a01.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.498Z","timestamp":1789900256498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/59df4ce9b4a01.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3eddb4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"619e-5a974b00d772d\"\r\nlast-modified: Thu, 02 Jul 2020 12:38:38 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wRhEsLQ%2Fj3jlaZBOYJxByeh3aKN8Bny6gibEBUqVA2wutyO3n7Sw6EZlVSyyxmILEL01KS0CzSzV13qTT3ukmQqwAF4eL8Kdv7BJ%2FFyXO4ZtjJMCLiabpnXmBAqAynNi3h0%3D\"}]}\r\ncontent-length: 45041\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/dist/assets/img/favicons/favicon-16x16.png","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.710Z","timestamp":1789900256710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /dist/assets/img/favicons/favicon-16x16.png HTTP/1.1\r\nHost: zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nCookie: PHPSESSID=m91nv57691k4gkp5smfji02vm4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e0285c7f1bb4f3-OSL\r\ncf-cache-status: EXPIRED\r\ncache-control: max-age=14400\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xAEMf5Vpx8bQ%2FcmPTLBQYbhRMZCCG%2BXEdqO06pFvhXF3nvpnwolTbhRQ%2FfERO7uQ5f%2BUGwNYykaCM2pGOubXbXynv3y7XDJqKHYt%2FxeGpvoNqGhknlmWPA5zNCYZJg%3D%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92510,"size_decoded":12817,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4926)","md5":"2bfa77c85e8b259d6804e09ff434f02d","sha1":"b27d4c12a2cdaa7f80099420892a0b02844308fe","sha256":"05064f483403a3cef93e510c3fa58e841d11e74bb0e783e21808a9f62aec5e0e","sha512":"93532d0ec4b71e99ebd7b25261b404de4270964742225d41ea84d677df4c3e745d12bbeab286748238da123fc3a101dd0267a6c703b938c7b67116ecc406d1d7","ssdeep":"768:+NTveKyBmfEyGnqoDqYuqpqpqpqpqpqpqpqpqpq9OOiOBlXPei/vyGHqoDqYWqpu:6TQdmH9+l1","tlshash":"b493cb31c3a55982527381dcfaafaaab5e8122d7e5409b40f67c86b57fce8243c5d0cd","first_seen":"2026-09-20T10:21:52.056456Z","last_seen":"2026-09-20T10:31:48.285279Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1573,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1530,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"c.imedia.cz/js/retargeting.js","fqdn":"c.imedia.cz","domain":"imedia.cz","tld":"cz"},"ip":{"addr":"77.75.77.163","port":443,"asn":43037,"as":"Seznam.cz, a.s.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.811Z","timestamp":1789900256811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.imedia.cz","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Thu, 17 Sep 2026 10:03:42 GMT","end":"Wed, 16 Dec 2026 10:03:41 GMT"},"fingerprint":{"sha1":"D8:E1:D7:E5:A5:2B:E1:F9:59:A3:4E:BF:30:33:16:F5:45:96:E2:E8","sha256":"9E:AC:9E:3C:5B:8C:B4:DD:84:F4:EB:B3:FA:37:34:DC:5A:4F:E0:A1:F2:F3:32:7B:DD:62:BC:B6:B1:30:FF:D4"}}},"request":{"raw":"GET /js/retargeting.js HTTP/1.1\r\nHost: c.imedia.cz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nlocation: https://c.seznam.cz/js/retargeting.js\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\nserver: envoy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":4,"connect":26,"send":0,"wait":26,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.seznam.cz/js/retargeting.js","fqdn":"c.seznam.cz","domain":"seznam.cz","tld":"cz"},"ip":{"addr":"77.75.77.172","port":443,"asn":43037,"as":"Seznam.cz, a.s.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.909Z","timestamp":1789900256909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.seznam.cz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 05:04:40 GMT","end":"Mon, 26 Oct 2026 05:04:39 GMT"},"fingerprint":{"sha1":"B4:D2:20:E2:FC:36:51:C1:10:85:A0:02:41:35:FC:DD:0A:CE:CC:A6","sha256":"03:D8:BD:12:65:72:1B:68:66:E3:8E:B3:EC:21:B1:D8:1E:03:36:56:21:00:04:EA:E4:BA:A6:39:03:C8:E8:7E"}}},"request":{"raw":"GET /js/retargeting.js HTTP/1.1\r\nHost: c.seznam.cz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zrokna.live/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: envoy\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 51472\r\nlast-modified: Mon, 31 Aug 2026 11:29:55 GMT\r\nvary: Accept-Encoding,Origin\r\netag: \"6a9565b3-c910\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Sep 2026 11:30:56 GMT\r\ncache-control: max-age=3600,public\r\nslo-domain: sklik-ap-static\r\nslo-app: sklik-ap-static\r\nslo-class: critical\r\naccess-control-allow-origin: *\r\nx-envoy-upstream-service-time: 4\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\np3p: CP=\"NON DSP COR TAI NOR UNI\", policyref=\"/w3c/p3p.xml\"\r\nstrict-transport-security: max-age=63072000\r\nset-cookie: sznlbr=1YCODrvtUGEJiu_LeUu-PsNQ.Y_tmz2piJza_G-o2H062u8Hk12v3x_JqCHWlb4Y2CwY; HttpOnly; Secure; Max-Age=86400; Path=/\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"sznlbr","value":"1YCODrvtUGEJiu_LeUu-PsNQ.Y_tmz2piJza_G-o2H062u8Hk12v3x_JqCHWlb4Y2CwY","quoted":false,"path":"/","max_age":86400,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"sznlbr=1YCODrvtUGEJiu_LeUu-PsNQ.Y_tmz2piJza_G-o2H062u8Hk12v3x_JqCHWlb4Y2CwY; HttpOnly; Secure; Max-Age=86400; Path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":203315,"size_decoded":52346,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65525), with no line terminators","md5":"68b0ea8ceaac017d712ce80360c7d3ee","sha1":"302d6a9c844ac82be81e1ccaa21cfaf843e926f8","sha256":"ddc5c4f3b76d1679000caf03e042ccb6fc370c952c6348547ee4bb3d59c3901f","sha512":"bf59cf4488ac68e54a0b6bf332789a7315101890df0d7bfaf622b03c48c345ce576cb8ac4bc84e45b2990fcc54d54c307b64cdf704902e5764543244119eccd5","ssdeep":"1536:zt9cYrNe1s6HhxLsvtYcYWzaw6V63b8oNR3eihmawfn6aiMQ0aeUNampaq92g/aS:3NexLsJzaY8orOic3ZguCd","tlshash":"7514d8c9b2d2f4a607b360a6813f520bf23ea915705ee590d265d8e07c7868fc173f69","first_seen":"2026-09-02T08:25:55.38312Z","last_seen":"2026-09-20T10:31:48.286378Z","times_seen":8,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":3,"connect":26,"send":0,"wait":59,"receive":30,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-01SEV7T0LV\u0026cid=1674400994.1789900257\u0026gtm=45je69h0h2v9115589702z8810613037za20gzb810613037zd810613037xf1\u0026rcb=2\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=1529220923","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:57.029Z","timestamp":1789900257029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:07:53 GMT","end":"Fri, 27 Nov 2026 08:07:52 GMT"},"fingerprint":{"sha1":"97:2F:A9:50:A0:A8:2C:4F:6E:C0:9D:21:4D:02:79:64:C0:F0:62:D4","sha256":"C8:54:87:97:69:D0:A5:F0:5F:98:26:CA:B6:C9:20:2A:B1:47:90:D7:D6:A1:A0:78:D4:F4:33:1C:E5:12:10:3C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026ngs=1\u0026ibt=1\u0026tid=G-01SEV7T0LV\u0026cid=1674400994.1789900257\u0026gtm=45je69h0h2v9115589702z8810613037za20gzb810613037zd810613037xf1\u0026rcb=2\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115938466~115938468~118897920~118897930~120213116~120385422~120469145~120469153\u0026z=1529220923 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 20 Sep 2026 10:30:57 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-09-20T14:42:44.95253Z","times_seen":1071815,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":0,"dns":3,"connect":16,"send":0,"wait":36,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:57.408Z","timestamp":1789900257408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zrokna.live/\r\nContent-Length: 130\r\nOrigin: https://zrokna.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":140,"data":"\n(6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0012\u0000\u001a\u0018zqB-6Xpbd3lCIvi7Tr2D0pob\":\u0018\u0001*,\n\b\b\u0003\u0010Á\u0014\u0018Û\u0002\n\b\b\u0014\u0010«\u000e\u0018•\u0002\n\u0007\b\u0012\u0010ã\u0011\u0018~\n\u0007\b\u0013\u0010¾\u0014\u0018.\u0012\u0004\b\u0001\u0010\u00018\u0002@ œ\u0001H°ê\u0001"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/binary\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ndate: Sun, 20 Sep 2026 10:30:57 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":1249,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026hl=cs\u0026onload=recaptchaCallback_contact_form_captcha","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.471Z","timestamp":1789900256471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api.js?render=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026hl=cs\u0026onload=recaptchaCallback_contact_form_captcha HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Sun, 20 Sep 2026 10:30:56 GMT\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1091,"size_decoded":1345,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1091), with no line terminators","md5":"82661eb311666756ec77d60161e7e69a","sha1":"08001e51f0ad0b82dcf49b09f159734c24e9c150","sha256":"21e14a63dc97d05d14663646b48d6965bac1090c60711499d11c0f525b246154","sha512":"6885c2ebd74d0064362b674e89436e57dccf6cd95ae7f524da3dbc4939d830ecd852bbfef4362dc2da8f88c7a522da734855835ffc1b5fcb14cdfc80c365127f","ssdeep":"","tlshash":"c011f3731a04e0390f720ad1a1fecbb4f542741df55889ec9416ced82b79cdbce05986","first_seen":"2026-09-20T10:21:52.022501Z","last_seen":"2026-09-20T10:31:48.293464Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":4,"connect":36,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/article_image_homepage_large/uploads/image/article/58592c04717cc.jpg","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.483Z","timestamp":1789900256483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/article_image_homepage_large/uploads/image/article/58592c04717cc.jpg HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b1ec5b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"112ed-5a96423928da9\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:02 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hxZySbyMYo4VBArhJ%2FHJUw58in0CxuLqZxTMWr2DaTtJWiovzUDLrC9TvHpQ1jvqhJ9Fre5Jg9QJo%2BKVai5ne%2BfJJEfIIEVxs7bKrQQZT63KMzXKD6wXVE5PUDyBT2xfo2M%3D\"}]}\r\ncontent-length: 70381\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70381,"size_decoded":71113,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 900x900, components 3","md5":"b6a9c8747ff7f7f802e7540c78c0a6eb","sha1":"26e7b45c1595e031497ae1723416e7b462129698","sha256":"1ca25b5d74a388964f394c29a4054d80ff1b1128546dc961f98f9911ce80da08","sha512":"c56e2f08cb9125e825f3af92ef31cbd2a055375fc04e3893dba921419d911b35dac25f8b1c048fbd0f5912c04ce040547b342e0b63f2566958705d58475cb6d6","ssdeep":"1536:WoLkhF0LYgMFPmp2C6jBVSokIEBn+GDT9P/7:27Dmp1onNEBn+G/9Pj","tlshash":"4a63016b0177923134622a43b72982c8c9b12ff5e58106bd3b561f90339e25cf749bbe","first_seen":"2026-09-20T10:21:52.059597Z","last_seen":"2026-09-20T10:31:48.296379Z","times_seen":2,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":7,"connect":2,"send":0,"wait":87,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/page_image_medium/uploads/image/page/584116d166069.jpg","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.488Z","timestamp":1789900256488,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/page_image_medium/uploads/image/page/584116d166069.jpg HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b1ec8b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"1a54-5a9642440ee49\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g4%2BQRwVf7h2Mqik0j9%2BhfK1IDQ3p2xQFq5364LjFsjd%2BLbqvFlS21iKrnz1cwq7T%2BRGM7CxPjE%2FTDKpupY6b9bzLo8Ac3j9bMwk3%2Bm57U%2BEcgvDPsVj4ZvXXUWhyJ3hdayQ%3D\"}]}\r\ncontent-length: 6740\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6740,"size_decoded":7478,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 250x250, components 3","md5":"f0c9d9658feebd7a954f0889551b7a87","sha1":"5d9d6f047153560e5751d726481f06e32cf053cf","sha256":"046cacd1fcbe8a7d3fec3ae4ba0d037689c5607ca011337662da0c232903912f","sha512":"c0b2d09ddd11e88230dbbe3893df72f2b7ff253bf173804bc5837e5b348f84432f287fbcd2dfa2f66797a1cd987c70c8f25c4dda0c84bc6a8335a3ec754a72ae","ssdeep":"96:0bgMEEmSvNvxqC4zmH87+Ug/ze/RWgxeIsK5z+dlr5VaM5Ni89eecaKw1oCV4mSP:WYMNHHA+UECsgxe7kCF+89ee2wDtfL18","tlshash":"f8d19d3fbbd5db524fa382325051e7a7cb681ed0a60012073db22262ca89e837384e49","first_seen":"2026-09-20T10:21:52.081923Z","last_seen":"2026-09-20T10:31:48.298489Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5a8541662b41d.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.499Z","timestamp":1789900256499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5a8541662b41d.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3edeb4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"7250-5a9749ef1952d\"\r\nlast-modified: Thu, 02 Jul 2020 12:33:51 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEF%2BF%2BgxU7E4j84lNjLFadPEsGG7ecWWrj97267IBgA9K9QdNNpYfBAuX7Agogr4TrhpVTEL%2BfNNyLEdexXQJ%2BWOPAl3C0aUV5gz5SdK%2B8qEQm3XZWsOwRYhIvNbmE4sZro%3D\"}]}\r\ncontent-length: 52489\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026co=aHR0cHM6Ly96cm9rbmEubGl2ZTo0NDM.\u0026hl=cs\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bt4xeccgrwmq","date":"2026-09-20T10:30:57.150Z","timestamp":1789900257150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 42355\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 11:02:41 GMT\r\nexpires: Sat, 18 Sep 2027 11:02:41 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 170896\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":82980,"size_decoded":43202,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c7a6d902a0adcd7c9223bc3457d32a41","sha1":"a8edb18d3034cd30504e947ca68ebef437c7b706","sha256":"8266c6122d4a35954f3142697506efb503322c0470d3863c9e759e2e2295e5cc","sha512":"a49bba8e98fd71591b08e158dfa5e500f0bc0b5de853ed672f9769c3be6a813dfbee5c88c5bfe8484943f4b624aa09ed07f2a41e4b4d03b9541455ce662ed4fd","ssdeep":"1536:n7Rpgh9C9ToL9gTNfWNfK4RxXnHZzhXwWx7W1bx7:n7ArC9ULiTYNC4Rv9Xi","tlshash":"85838e7338513a1afc2b9b616196bdfdf11cc923e5515bfaa5497a20c3cb0a78223707","first_seen":"2026-09-14T19:29:34.239267Z","last_seen":"2026-09-20T14:31:28.84605Z","times_seen":2239,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026co=aHR0cHM6Ly96cm9rbmEubGl2ZTo0NDM.\u0026hl=cs\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bt4xeccgrwmq","date":"2026-09-20T10:30:57.390Z","timestamp":1789900257390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26428\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 12:44:34 GMT\r\nexpires: Sat, 18 Sep 2027 12:44:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 164783\r\nlast-modified: Thu, 29 May 2025 23:13:29 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26428,"size_decoded":27241,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26428, version 1.0","md5":"0f1d3218bace7a3a84c05b5d8a6f71ad","sha1":"977905ba4432d4e0c24e0da3f72aceb9c0525987","sha256":"884933fb5789b478d2da68a4cb0bd5cc138d995f1fea9a957ba29cb3c00f1bf7","sha512":"0a6d79809ce57e15b722a807ac8586a9a52bb4db3abfc8dbb40be7dfd55ad4195df917042425f8af97cc0c2fe09379799298bba84a1ffad36a4e45e2dea58dc8","ssdeep":"768:j7jEMtcubweLke66yjm5QxI2aSCuH8cEow0U0gME:gMtcawhe6HaSCZcvFU02","tlshash":"ccc2f1588e6abba67f92f0211479a595f0e3b8400750f5e4e1e02dee44ca663fab4454","first_seen":"2025-01-09T17:22:38.875446Z","last_seen":"2026-09-20T13:55:52.407991Z","times_seen":25944,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":20,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/article_image_homepage_medium/uploads/image/article/585928a334f7b.jpg","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.486Z","timestamp":1789900256486,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/article_image_homepage_medium/uploads/image/article/585928a334f7b.jpg HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b1ecbb4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"7088-5a96424e953a9\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:24 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ynJu9iW8wp4TqdtnDNTYv6iGKnQ5pwICeqLa1TXlyZWNjeyui%2Fp4Vhhh9ZibVcwBEG5NTgW808Q%2Bbxo9A0ZXlUwAWctdp5On%2F%2F14aLzytczZTHQ2ZWrfZXO6Cvab2omiZo%3D\"}]}\r\ncontent-length: 28808\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28808,"size_decoded":29541,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 600x600, components 3","md5":"b98e32cd513eda2a4e253da20cac056a","sha1":"fb68461588ff53cbc4c35f66fbb3cc833685896b","sha256":"8ba11cf67783ad94fc285b695fb46d1ab197a0413221a02cbf12ba240ac877b9","sha512":"ea16181f586d2ead3a6bd36b7b9b628c18326ce0a4ea4b248198573a102446737cc360419a86b9f3eb2dc52de39c266e6c7fa111cdda5b5814d41b96f9fe3cc0","ssdeep":"768:mSMWVxKdIBdF3wwlIOhCFknGyO30P/i1+1kvf7DlkeiQaNH:mSMMxKdUD5lIOhCiGtWiE1Wf7DlliFNH","tlshash":"cdd2cf5b0a294282d07687e5b9135fae5f513f7da8a33aff10528ed236203a15f5c31e","first_seen":"2026-09-20T10:21:52.0541Z","last_seen":"2026-09-20T10:31:48.302165Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":3,"connect":2,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5c5d38e1356f2.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.494Z","timestamp":1789900256494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5c5d38e1356f2.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b2ed2b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"6417-5a96427f76e69\"\r\nlast-modified: Wed, 01 Jul 2020 16:55:15 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IkecDxjfcKFff%2FiyGdKCrAuh687LBvK%2BCEtG6Rd3dNHlld5GGPMRWYBnThk58Yjfd6NLgyKfw%2FDdlOxpDXdkBtAwe%2BaNqyv6HJwuc7PrWGG5TkZ8H8U288O9SZwqqyv6uQw%3D\"}]}\r\ncontent-length: 45520\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5c0532096e5f9.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.496Z","timestamp":1789900256496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5c0532096e5f9.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b2ed6b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"7610-5a96429064e29\"\r\nlast-modified: Wed, 01 Jul 2020 16:55:33 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbMr1d1HLkwjod7TirCQI%2BdB8%2FFx8G5Wmf90YMZVHM205ffuOl9ti6AQ%2FlMZs1xnsl89N5%2Btkc0I80v674xYeu1WD7eYWo%2B5l%2FDMzu8ZF4%2BbDJw%2FHtFHvnDVTAZ9cgEPspI%3D\"}]}\r\ncontent-length: 54433\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5ba39a46af2b4.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.501Z","timestamp":1789900256501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5ba39a46af2b4.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3edbb4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"8bee-5a9749b7d8cad\"\r\nlast-modified: Thu, 02 Jul 2020 12:32:53 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BYkY2yGTsdMK8BKESVKGor7vRlumDqN7m%2FehuOdxhD%2FoWTDw%2BOA0CXKqHIBZUvcEP7GTIbkz1Deg8Lwjwz3vqmPCUJ6VNyYElWaGhzQEt6Shk9WF2GErcRqfZDsFNsKMYmw%3D\"}]}\r\ncontent-length: 64645\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5a5613baa74a4.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.506Z","timestamp":1789900256506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5a5613baa74a4.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3edfb4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"5bf0-5a974acfb458d\"\r\nlast-modified: Thu, 02 Jul 2020 12:37:47 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFgGcV38qPkh5EckFwVI61zQ22LQiPf8LuSBQPfJE%2BzJ7L6S0NGK0eF0as4bDxUzcGocgpoFahRCV3O8Jxte7yHD36vl9T6vglzWnv0SdaH3Nq07dt6h6znV0QMNLU9qeN0%3D\"}]}\r\ncontent-length: 42116\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5cd9216be7d5e.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.507Z","timestamp":1789900256507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5cd9216be7d5e.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ed8b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"598e-5a964244591c9\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:13 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=INpyj49GwtsbpAOto5F02CwvSmtgSk8zP0b63VYLj63mFMw%2FsyBPsPB4QKFLwOGABi2Q%2F%2BK7sQL5SHHfc%2FXt%2BZKxJ0kaLtLh27kQgW7nUoA8x1mY15nLoqDgqdJLbHYEmNg%3D\"}]}\r\ncontent-length: 40693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5cd91fe46dc83.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.512Z","timestamp":1789900256512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5cd91fe46dc83.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ee7b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"4c9b-5a96424bd5209\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:21 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jLKvXaJuHGWjr4E0XET%2F5svvuGKVbkg43TjxXODCptyQexmi%2F7vUZT5Ixl03MRZ1IfqXJ0Njj5WPktNxmZeQehyCUDBYkRLmCpz16dZcy2r3eRaQX%2F5a70uiSbRy9pqmtnM%3D\"}]}\r\ncontent-length: 35658\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/dist/assets/fonts/geomanist-bold-webfont.woff2","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.595Z","timestamp":1789900256595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /dist/assets/fonts/geomanist-bold-webfont.woff2 HTTP/1.1\r\nHost: zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/dist/assets/css/app.css?v=20200701\r\nCookie: PHPSESSID=m91nv57691k4gkp5smfji02vm4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e0285bbef8b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: max-age=14400\r\netag: \"6be8-5ed0ce2eb1180\"\r\nlast-modified: Wed, 09 Nov 2022 17:21:26 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyQzVbKuZh%2FhkeWz%2BG%2Bw8Mut7KK3yAdPRVTKDEtvNEHvc1pJXOSYm%2BiQJ4oUt5AddQXxMtjU4Xl9GfkP4TyclKakEMdb5i2OoI0UU9i5q89YOex88IVXot9nRKsCjg%3D%3D\"}]}\r\ncontent-length: 27624\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27624,"size_decoded":28331,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27624, version 1.0","md5":"eaf3cfee27cb7013ab84779df7141bff","sha1":"0dac31be90e3ea3ce1fbcb27c6e63f4617a57ae0","sha256":"058dbbdec9fcce2483cbfd59969cc74733716f2ed967e04680531f16d6acf779","sha512":"ff08e0c5f9f69c6adbf586b8d64618b3be46cc972225481bb2189cf50f2971a4d524fac7f10e1b13c0fcecdcd7e7a5cea4c9454b92749577bc6a6f8e81c5eb88","ssdeep":"768:wckBr76SHfEROUevUqghzl4VkffMfvUTL+K:wckt76S/SevU1hz2Vkffrt","tlshash":"41c2d12f1524e9fc8f2dfc3e605a36aa2cdfae0a44874543323825915d27612f3b96b5","first_seen":"2023-07-22T16:48:40Z","last_seen":"2026-09-20T10:31:48.303726Z","times_seen":14,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/dist/assets/js/app.js?v=20200701","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.475Z","timestamp":1789900256475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /dist/assets/js/app.js?v=20200701 HTTP/1.1\r\nHost: zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nCookie: PHPSESSID=m91nv57691k4gkp5smfji02vm4\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=96gHv5CiCyhzOr%2FTF1SZjgKvdH4ea2cZLVNGS5qxxHmjaDF9NmnG35I5HPUCbUAxq8ZaNJMcEpvqC2uQphH3vl3ZWSawgE9nk8ViAYRv86Fp9gJq1GnNbjxa5KweIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3e0285afec2b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"scrollreveal","description":"","website":"https://scrollrevealjs.org","common_platform_enumeration":"","icon":"scrollreveal.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":512968,"size_decoded":158083,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32000), with LF, NEL line terminators","md5":"ebb18322007f750ffa4ed5233db29bbb","sha1":"51f07e113e53095e673ee2ef419f9c869237ce7c","sha256":"3b27ecf8591a4c3c91d63af50cbc286557a8d6d611c49002e584ad9804d096d6","sha512":"f306f42f95bf72abde61f6d24a723028a9b9abf2f5521341446ddbe97769d112900ab599d78cfd507bbb2f4f1fb02955f09b7612afd474ff455556766ebcbfda","ssdeep":"6144:npHzhMFgrlzkF0637KjPWmsm4bcdHmxVSYZBSMC5KbHGXOUdSfNdYpW:npTK6rim6ujPWmsJcNmOf5UgKwE","tlshash":"8eb417cdb281b06343e76175416f510eb2375a64780ac858b13ac8e67cbdd8d22abf7d","first_seen":"2026-09-20T10:21:52.065484Z","last_seen":"2026-09-20T10:31:48.304973Z","times_seen":2,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NVL98HC","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.530Z","timestamp":1789900256530,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtm.js?id=GTM-NVL98HC HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\nexpires: Sun, 20 Sep 2026 10:30:56 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 20 Sep 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143631\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":423746,"size_decoded":144281,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10324)","md5":"4a54c7f06a33fa2a1f5145da82d47d3f","sha1":"0768d7b498abce372652c7a41fb7413f4ed8fe8c","sha256":"22a40845c7ccff03f4dcdefa5a3a92239d630e67fdb2c1fb8a58cd1ec973374c","sha512":"210c879d75a1996201d573c641cfa902ff2c3cc02f02fc2869af443ad8ed644401b3fb0d8bb18fc2c9b7d704c579d0b5bc9e2c6fddc8c2d3541fd22317951ebc","ssdeep":"6144:TB1tVFaZqKtvOdacOAIb4EUt3li8se9xD4wyef:BWZpZAse7Su","tlshash":"ed9419cdb3d674229393b574903f018bb23a69a2b84cc899f289dcd42d3469a5137f7d","first_seen":"2026-09-20T10:21:52.024206Z","last_seen":"2026-09-20T10:31:48.30625Z","times_seen":2,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":35,"receive":43,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__cs.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.705Z","timestamp":1789900256705,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__cs.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zrokna.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354911\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 14 Sep 2026 19:32:57 GMT\r\nexpires: Tue, 14 Sep 2027 19:32:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 485879\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848315,"size_decoded":355818,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (618)","md5":"c3b71d49a9de8aa538a8acf820eb2dbe","sha1":"fda3678b2da9fc3d8ad51fd9c3245040d4bf9a98","sha256":"86112994f880678126b181b9f2adcc5f4cc2348660a193bc37f24144bd5affb4","sha512":"e936ae9ac174c91dd7abd14b34d692b097981ec870e28a1f95a04b50f65d53d2367058c4f800fe5e89e51bb1bc682da0a868d4063705fd399fef61e54c5bcf64","ssdeep":"12288:CgsXbOSz8FNaieyWB7k8fOLsQtcOIX8tVdUz:UbOSyAXfOL/tc9erUz","tlshash":"80054ad9b04274b55322b9f1506b141ea33ea467dc4c085eb1a9c5f16eb4c0eb07bebb","first_seen":"2026-09-14T22:40:25.177092Z","last_seen":"2026-09-20T10:31:48.308416Z","times_seen":5,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":2,"connect":14,"send":0,"wait":16,"receive":58,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"c.seznam.cz/retargeting?id=46520\u0026url=https%3A%2F%2Fzrokna.live%2F\u0026consent=-1","fqdn":"c.seznam.cz","domain":"seznam.cz","tld":"cz"},"ip":{"addr":"77.75.77.172","port":443,"asn":43037,"as":"Seznam.cz, a.s.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:31:02.128Z","timestamp":1789900262128,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"c.seznam.cz","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 28 Jul 2026 05:04:40 GMT","end":"Mon, 26 Oct 2026 05:04:39 GMT"},"fingerprint":{"sha1":"B4:D2:20:E2:FC:36:51:C1:10:85:A0:02:41:35:FC:DD:0A:CE:CC:A6","sha256":"03:D8:BD:12:65:72:1B:68:66:E3:8E:B3:EC:21:B1:D8:1E:03:36:56:21:00:04:EA:E4:BA:A6:39:03:C8:E8:7E"}}},"request":{"raw":"GET /retargeting?id=46520\u0026url=https%3A%2F%2Fzrokna.live%2F\u0026consent=-1 HTTP/1.1\r\nHost: c.seznam.cz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nCookie: sznlbr=1YCODrvtUGEJiu_LeUu-PsNQ.Y_tmz2piJza_G-o2H062u8Hk12v3x_JqCHWlb4Y2CwY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: envoy\r\ndate: Sun, 20 Sep 2026 10:31:02 GMT\r\ncontent-type: image/gif\r\ncontent-length: 38\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: deflate\r\nx-request-id: f73834d5-8b0e-401b-8f4a-f4c491ce39be\r\nx-szn-hostname: rtghitserver-957d5984b-zh2g6\r\nx-envoy-upstream-service-time: 2\r\ncache-control: private, max-age=0, no-cache, no-store\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\np3p: CP=\"NON DSP COR TAI NOR UNI\", policyref=\"/w3c/p3p.xml\"\r\nstrict-transport-security: max-age=63072000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":679,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"968c3ad2c1183fee0bf0dd479f7904b7","sha1":"1d770800ecb05eb9133f9b51620c9e4349656859","sha256":"3331a0486cb3e8a75c8c2fdf02bf80fd8fe2b811dfe5c7b4aa892d38bfcf604a","sha512":"6135beb6606c4214eeffe51559e127f77f0bbb271370eb9b4dc57d55ec7e86d848400aa8449f1412b28fe11175573b2148ab7b06f201dca8e17ee8e8d7d767a9","ssdeep":"","tlshash":"fb900403d140d045c351c0300d04c340574071304504070f70dc175dfc151d30c13000","first_seen":"2023-04-05T16:42:42Z","last_seen":"2026-09-20T10:31:48.309677Z","times_seen":1043,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/58e62cf3d8651.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.503Z","timestamp":1789900256503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/58e62cf3d8651.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ed9b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"6dc1-5a974b585cb8d\"\r\nlast-modified: Thu, 02 Jul 2020 12:40:10 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BjEKHVGjhWCqNFv62HhWDF96uJ1WTfeWXCNH6cz%2FYxxnPCT3nQNrUJrvmn3C7COwIuIIwgq%2BHBA9UT%2F6tju6jeophkBC0VISX0wwYWsdMNetUgtJ7EcHBiaW4n%2FGuTqtXZU%3D\"}]}\r\ncontent-length: 50523\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5cd920d2bbe76.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.510Z","timestamp":1789900256510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5cd920d2bbe76.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ee5b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"a777-5a96424b7a4e9\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:21 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jNMZ3pDryHEYqKst1NY4jf6oByp9OglnsSptOe%2BnSgFn9viuaS0wc6d4WyAuDGPNGQNHu7SUProjzRpHD17OyQSSzUbgx1RnMv5jbSAv8A8P98c%2BjpgOSVsfWaV6WOmYb7g%3D\"}]}\r\ncontent-length: 77775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/dist/assets/fonts/geomanist-regular-webfont.woff2","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.593Z","timestamp":1789900256593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /dist/assets/fonts/geomanist-regular-webfont.woff2 HTTP/1.1\r\nHost: zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/dist/assets/css/app.css?v=20200701\r\nCookie: PHPSESSID=m91nv57691k4gkp5smfji02vm4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e0285bbef7b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: max-age=14400\r\netag: \"6e18-5ed0ce2eb1180\"\r\nlast-modified: Wed, 09 Nov 2022 17:21:26 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AknLm5Upy83AA686i3g8Toh%2FOyljk9hO5v2e%2F4uylRmUQ%2F6XbNvvTX7jwBCceHIQ6Rv%2Bfs%2FIMqDMTbKQ0hZJJ0uO77cHHT75atiWLJgMoHA5Bxg0qgbKRrSFxo%2FJ9g%3D%3D\"}]}\r\ncontent-length: 28184\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28184,"size_decoded":28895,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28184, version 1.0","md5":"6b48aef2413cb768e31406b8a5511970","sha1":"ce02cec239c0a8c801979c752a571b0a1992d1c4","sha256":"99b4c2917912d1bef9ed7d395b3bac9a36ab271d831f421763744a76cfb8c7a9","sha512":"d6397fc23e3ff90d852a6c41a5ed80429cd99495d5e721f519fb6cfa78fe474cad4277869755a73033e2c8a20472cbdfe8fd71acbe4f546b94586311ddb43ba0","ssdeep":"768:eedcUQSGFWsFhV0RKBg+ODOrFIY44sD+Aqyh:eLfWsPV0RKBNrFBVsp","tlshash":"e8c2e074f458634f8f4f0ca07874a24a68cf535be8bf14e8974ef081635952a10aec99","first_seen":"2023-04-26T04:03:54Z","last_seen":"2026-09-20T10:31:48.310704Z","times_seen":76,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026co=aHR0cHM6Ly96cm9rbmEubGl2ZTo0NDM.\u0026hl=cs\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bt4xeccgrwmq","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.151.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:57.064Z","timestamp":1789900257064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026co=aHR0cHM6Ly96cm9rbmEubGl2ZTo0NDM.\u0026hl=cs\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bt4xeccgrwmq HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 20 Sep 2026 10:30:57 GMT\r\ncontent-security-policy: script-src 'nonce-LThbeWwt1PIsCD3l-Nphqg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16860,"size_decoded":3170,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"a828f59b3e9a74233bfbf87364610103","sha1":"405ebd5c881705248bcc88bae5b299be87a44fe7","sha256":"574c1344f2e76517bd24737fe00bf37e6be028cc6f7a49704c785d553f2cdcd4","sha512":"7f200c74a0366ae0e212c6248bd38087b0ad8a2e42081459a9a5150a02a2942a8a463c522daa260df688b34d70afdc6a372fae3868c118e6513495686b26d031","ssdeep":"384:OjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/d:OFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+u","tlshash":"c4720d50041744009b835ce223ce7f30fe4e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-09-20T10:31:48.311543Z","last_seen":"2026-09-20T10:31:48.311543Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026co=aHR0cHM6Ly96cm9rbmEubGl2ZTo0NDM.\u0026hl=cs\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bt4xeccgrwmq","date":"2026-09-20T10:30:57.378Z","timestamp":1789900257378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 24 Sep 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 242435\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-20T13:35:12.530933Z","times_seen":728206,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/article_image_homepage_medium/uploads/image/article/58411529d646f.jpg","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.485Z","timestamp":1789900256485,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/article_image_homepage_medium/uploads/image/article/58411529d646f.jpg HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b1ec6b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"5c5a-5a96424a39049\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:20 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yq9OdMwkywXgtCScfhqau8TkkYyfgRzwYAz7bMEDTqa5Z5hZ7UVIi9EY3tQN7IMhLRwGDl%2Bu8Ft8R%2FWCgenxjc%2FyRhXYhOxKpuwX77nvNU1gu34Ue25MZ8mV4i10iMgI01c%3D\"}]}\r\ncontent-length: 23642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23642,"size_decoded":24373,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 600x600, components 3","md5":"ba27df2b21b997833b5e76be240bf691","sha1":"b452a2588eade6c7d35804406707f687268319e6","sha256":"479f629c5c2a85abb131df047048ab4907299d700b8a9a15fbb0dd71aede76ba","sha512":"3c88892c03c1c3adcc7b2bd60d920e55a939d6d8ea6edc3b412d05e978895f92234a35caba92a4e85738041ac5fcc26b7a1cfe28bc13143096f90c9e5be040f2","ssdeep":"384:mh72uaV4uWSPIlwiCbWI7Y1v0Lt7l5sIe3Gicn4BDUIgYVvSIh7jvL1XRbJrjQCr:mlsV4NSPIlw/O6thBml0o1qIhBDXtiTC","tlshash":"52b2e1292f1d0340cd867a7309be039f9fb8fb1fb1c3501f2091d59b8e5a5394ba5299","first_seen":"2026-09-20T10:21:52.080068Z","last_seen":"2026-09-20T10:31:48.3169Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":5,"connect":2,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/page_image_medium/uploads/image/page/5bc3324fa8f19.jpg","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.489Z","timestamp":1789900256489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/page_image_medium/uploads/image/page/5bc3324fa8f19.jpg HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b1ec9b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"2cbf-5a9642404df49\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:09 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=akoBbfoQcKp14X85%2FrqJNg27yIGYiMj0MJn4d4xBhXLSIplmQboX75zZKnzsWvS3NupnTdG%2BjEWXg7fqHz6oHdPpw4peIlm%2FXDhZ%2F2Tfj9sHUDHAAJYA4NTdHMQIOCuHeSs%3D\"}]}\r\ncontent-length: 11455\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11455,"size_decoded":12188,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 250x250, components 3","md5":"2d2816550d05c515d682a99fe37a932d","sha1":"5a36d588dc6b5ddaa1b94607278ce1df1007458f","sha256":"5450502ffe9bf9f2c6bc222e177502877e4a7d83fcd3259bc81a2a06b87dca66","sha512":"b90839e348372bb31b14a4f908f08cb1aa45f47429e4f16d138c1869b4f9d633ce15f6a902844175fb2561d029f2299cf3d3e941efeda960e3ac92b7b5349df1","ssdeep":"192:Wz6Z5plHGPUIFcVNrCvKyeloYY2SruRPZX+CH0RxmvCpgjlb1SyRkL3hW1:Wz4plHcrcVNevUbSruzuXxM4gj51FOW1","tlshash":"1032bf0362428ba1493ae5d76c6b6b53eac74b15a0e536e4388dd27ffe00c4153c4dae","first_seen":"2026-09-20T10:21:52.087939Z","last_seen":"2026-09-20T10:31:48.318328Z","times_seen":2,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5a0adcbea2204.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.503Z","timestamp":1789900256503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5a0adcbea2204.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3edcb4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"bce2-5a974aed554ed\"\r\nlast-modified: Thu, 02 Jul 2020 12:38:18 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2A9ltFFWfEx3TGO4VB8kFnjiSXRL2Qvdz6g8wp8NCglVjwk5uzkUVFdMmWuydxGkZcsYe%2FRliMLiRXgwfbh455gVj6eeB2knkt3ebt%2B7edV8xUkMFam55NzAlR%2FCXaFGB6w%3D\"}]}\r\ncontent-length: 86878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5cd92138c4aac.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.508Z","timestamp":1789900256508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5cd92138c4aac.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ee3b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"83c2-5a96424a9f8e9\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:20 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dnpLI7JkX3AaH1C%2FP6TJ7352THviylaMFylx2Ddzols3mSEEysbD6zUYHosQOZtA5poaa9ml86pD%2FWkbm94kwQ4qUZQWfQOtw5LMor3zms%2FDMqlxkg2QAtUE3j47sMd9fhU%3D\"}]}\r\ncontent-length: 60768\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/dist/assets/fonts/geomanist-book-webfont.woff2","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.596Z","timestamp":1789900256596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /dist/assets/fonts/geomanist-book-webfont.woff2 HTTP/1.1\r\nHost: zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/dist/assets/css/app.css?v=20200701\r\nCookie: PHPSESSID=m91nv57691k4gkp5smfji02vm4\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e0285bcefab4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: max-age=14400\r\netag: \"6c64-5ed0ce2eb1180\"\r\nlast-modified: Wed, 09 Nov 2022 17:21:26 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g7F3vaVq9rXJyexD2pYa7U1HOrlWj3ygDPP95NGyv2W8Rncq2PzbTFrcie%2F%2BZWuNg5gBEnbA3gvp32JOk6CHE3y8UPzlP1ON0yc%2BN3Sb0xlbZI8lISrKc7J%2BEe5Wkw%3D%3D\"}]}\r\ncontent-length: 27748\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27748,"size_decoded":28455,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27748, version 1.0","md5":"52cccba5687b0cfeafe20ce28ff04db8","sha1":"b63a53898b8073baea6f1f17508db64b5d31e196","sha256":"b0cf43d234be20ab1be5e71984e75cac764322d0a33d3fa57e3991d8cb5af0eb","sha512":"e274eb4aa24684251edc604fc5cbdb73c6c6dd264bde6ae2b72d2131ca216336b044f62be25eb77d649f3fcb54ff2a99247f70543400e08babbf228c541934d2","ssdeep":"768:t0iQjJgqloGz6pvw9rnxd9FInF49glsFoFVgUNpWP:tJQdgqxz6elYnIIsFa4P","tlshash":"3ac2f1ea0c2dda3dda0c395184129b80e3d94dc581e3999d9f93834cd9ea59eff0b434","first_seen":"2023-07-22T16:48:40Z","last_seen":"2026-09-20T10:31:48.319249Z","times_seen":33,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/dist/assets/img/favicons/android-chrome-512x512.png","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.709Z","timestamp":1789900256709,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /dist/assets/img/favicons/android-chrome-512x512.png HTTP/1.1\r\nHost: zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nCookie: PHPSESSID=m91nv57691k4gkp5smfji02vm4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:58 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e0285c7f1ab4f3-OSL\r\ncf-cache-status: EXPIRED\r\ncache-control: max-age=14400\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZO9y3vpZm5j0D9J7C7WjopOBYNzU8nxm16xVzxkO6egW3VQXXyCXIL0rvxOK6wYjYhlPKUIoUd6GWLdHvoVkM9aaEEu%2FlF4g6CPsVePe7vqKIpncNFZcPgsgJ5V6vg%3D%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92564,"size_decoded":12798,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (4926)","md5":"9bcb34c19c03660617c1897ec43f25f0","sha1":"122ce62825f7acb34d1191315a4e0d916dc2c6f6","sha256":"ce328369f1ef41c07761fe8fef6a94697fab7de74a49bbddb7fb226edb77a46b","sha512":"de316d80eac7dfe71d457370726b16bf46f5c273cd8c6e255709f418673cd2923373aefd471a336109413fa6cd0953b4cfc49763a092a72c351543bd2185b4be","ssdeep":"768:0NTveKyBGREyGnqoDqYuqpqpqpqpqpqpqpqpqpq9OOiOBlXhei/vyGHqoDqYWqpa:0T8duH9yl1","tlshash":"5f93ca31c3a55982527381dcfabfaaab5e8122d7e5409b40f67c86b57fce8243c5d0c9","first_seen":"2026-09-20T10:21:52.045385Z","last_seen":"2026-09-20T10:31:48.320055Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1498,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-01SEV7T0LV\u0026cx=c\u0026gtm=4e69h0h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.798Z","timestamp":1789900256798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-01SEV7T0LV\u0026cx=c\u0026gtm=4e69h0h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\nexpires: Sun, 20 Sep 2026 10:30:56 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 194771\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":598076,"size_decoded":195355,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"a27c0e3c05cdb3bd6f817cdc46ee64a7","sha1":"6f4d0bbc65890c603c2d298569a5f040182ec68e","sha256":"b38d88b9c03e96f9af7b1d0f1c603e43a5c31809a010fdb5089806fa31af2cb3","sha512":"d6558c654cc76990181af7491f83c1e8c92088cabe830d4461b6e5fb8fbfcab671ae24ec11d0a156972a7b0563fc4dc181182846dcf7ea790a9e052045ebd0ac","ssdeep":"6144:T/B1tV6FonaWqrYJNmf96d8cOAIb4EUt3lixWuFbN7UOg3hlMf:RsFoaWEdlhlWsNg1o","tlshash":"aed4f9de73c67422a39af568943f01cb697b28a2b45cc89ab1cddce02d3454a5163f7c","first_seen":"2026-09-20T10:21:52.069992Z","last_seen":"2026-09-20T10:31:48.321488Z","times_seen":2,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/article_image_homepage_medium/uploads/image/article/584114b3593f3.jpg","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.484Z","timestamp":1789900256484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/article_image_homepage_medium/uploads/image/article/584114b3593f3.jpg HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b1ec7b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"a84e-5a96423e2ff69\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:07 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FP5u6HvRfKOxDVP9h52AHMj%2FdyQC1rMxnWvfrR19hNlx66HGJ8mTfjZ25%2BKo2QLqZmJ5LJbC3RC%2FBTuTRZLPS1Zc%2Br5ybtaV3nuDUq7ABFc6eN3KcyPqAumO0tmDkjlAB8o%3D\"}]}\r\ncontent-length: 43086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43086,"size_decoded":43821,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 600x600, components 3","md5":"c19e91e7455ce942fbb437d284652c62","sha1":"2176d6d54b63f9575b8a056ad5e43673cbff72f0","sha256":"d9c67731553715523b4c99e0e4d20cb523399017008545fd258d33636ed3162d","sha512":"9b37428b670b1af6e7172a7e1381f86d20fa1cce4276dad5fa403fa1a0fe1ed734618052646bc7100ec1405dbaf8a4635cc8d2e4f93eba45ca8d87497691ac18","ssdeep":"768:mQMBD9FxnjHbUj7u7yvTW/ojRoqtvABXRSiyLNcb1jb4c1WjwRZI2jbAlVB7:m1Dt7CiIUUqqtvsfyZcb1jccpZI2jsfx","tlshash":"fe13f1343e420e19230596b049ec6f8bfa34c69be1fbb9533d905c43c67276da769446","first_seen":"2026-09-20T10:21:52.052668Z","last_seen":"2026-09-20T10:31:48.323315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":6,"connect":2,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/page_image_medium/uploads/image/page/5c76972357b36.jpg","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.490Z","timestamp":1789900256490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/page_image_medium/uploads/image/page/5c76972357b36.jpg HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b1ecab4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"1a9f-5a964246dda49\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:16 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zA14Df9iO8N9ckth8Jxk8vjCO4e33Xjanc8pn3P5f04%2BLknfR5khZUnx1hEeSYPevylLy9p9EFRF2bd4Aej2WFza0zZZS6QzE6NhooWMcQtW15Vb%2Fr%2Bjw8VQZQ1%2BPmwT6ng%3D\"}]}\r\ncontent-length: 6815\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6815,"size_decoded":7547,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 70\", baseline, precision 8, 250x250, components 3","md5":"6b5300688a0291557706fa8c73784a36","sha1":"d4a6ce4c7383a1829845ab3e6494e1e5c2c8c954","sha256":"c868b379a9ef6bb51e7e61777ef253a5c7c56769f3cb2bf58e77ead81ca35906","sha512":"8a7c3a45093ecbdb134b7a8a91148e22a812bdf35a2b0cb67ee3b5c621cf3e927585ad746ca4f29f61469547a70afa4634d806dab57b401cd18a2224fdf58202","ssdeep":"192:WRYmpRS1VJqWfSEJRdemcdGprpsVqKxtO:WnS1P7fdlemJbKxtO","tlshash":"24e19f8a7000e3147135d97d8b6fd3a7631cdb0e6ce4a46b5976c5714b007e4972c9eb","first_seen":"2026-09-20T10:21:52.014982Z","last_seen":"2026-09-20T10:31:48.324136Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/page_image_medium/uploads/image/page/59c394b632131.png","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.491Z","timestamp":1789900256491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/page_image_medium/uploads/image/page/59c394b632131.png HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3e0285b2ecfb4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"1b6d9-5a9642477cd29\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Z63SbVIz8jUANjoVp0F5IIySUJHzzST7zeq1jjTuBVVD3rmCqvR3ReWIqaJOyZbmoSumGyCCG4UkpTJ6o9G5IM4FCbWpyeQli6uKu8WvEn4QMit7LY7wLJuZ%2BxTdNcr8Z0%3D\"}]}\r\ncontent-length: 112345\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112345,"size_decoded":113073,"mime_type":"image/png","magic":"PNG image data, 250 x 250, 8-bit/color RGBA, non-interlaced","md5":"76b0ac1640b3fd2160a7d03f02a3667c","sha1":"fb75275376e717d8067db12dca08c8098550902a","sha256":"5f4f542c075280b142a4f8fd4febd25959b9784ac24d860f7a9d8efcc5743a8e","sha512":"0aa3e3e14253924032f262943101e86220c5b67ca9de340beef8adfadc398e2cf80387c196b23962526cd1f9a991e256e281985c47df0633af840836798d441b","ssdeep":"3072:5rx6I8cipOeRv9NGb1OHQEEwpI0TfZY2IqDY2:GXnpOeXNG5OHBNfZtIqDY2","tlshash":"a4b31358d47aea78c78d2b53df1779b2302e96d3c608ab1b449c676d3fc851e8e61c40","first_seen":"2026-09-20T10:21:52.061211Z","last_seen":"2026-09-20T10:31:48.325425Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5c5d395570ad5.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.492Z","timestamp":1789900256492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5c5d395570ad5.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b2ed1b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"7aec-5a96427e5ab89\"\r\nlast-modified: Wed, 01 Jul 2020 16:55:14 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8PojMeNMu3QFCEBQhTBV42uggamAAUWRZANcoqEoTtsW3O%2FL0Z8J9wX%2FUjzFjo%2FK3ILkAKILPHhA%2BcIZs8xqBz6VUTWw955RKbac2eFERXtZm11i7IeOFiYNUtr9poXzjHI%3D\"}]}\r\ncontent-length: 56642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/59258ced31777.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.502Z","timestamp":1789900256502,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/59258ced31777.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ed7b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"3d3e-5a974b2f193ed\"\r\nlast-modified: Thu, 02 Jul 2020 12:39:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b5IC8La3P6qfgjZV%2FcMFUpWJTelZtAutDg2%2Fw145CR8q0yz9eCtT%2FK6OgyMlq33ZGF%2F3BDqXIRmVIxKC1RJrNXbQcDOUHsdHwRIDu6epFTahmYrsBRTrL7Net5lM7Z7xQ1o%3D\"}]}\r\ncontent-length: 28086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5cd921a6aa043.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.505Z","timestamp":1789900256505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5cd921a6aa043.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3edab4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"8c81-5a964247c9f89\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:17 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9fQNF7na7jGTxVv3Q47S6PbHy3hVV9GgxGiWGQoMDYyoAUINjK8D5%2BbHyJjYDA0y3jBcbERzM%2FMUA%2Fm%2BpWOaRbW16TFFz7BrZU8lJRivgNsPEe2H%2BcUX8fLv7PVUm6dzY6s%3D\"}]}\r\ncontent-length: 64747\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5cd9211114e52.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.509Z","timestamp":1789900256509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5cd9211114e52.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ee4b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"6867-5a96424f048e9\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:25 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j4rmNoSipi8XbJkPsVtGSEmyV7dpudj0OvzItku%2FNtLQwl2NuKOWd7BreBspEqK5rJB4XS0lP21YnGMh8HSM4uMcf4PoTHwiwVj7ntuY9akvD8Tj5qcIt%2BylZ1w8C%2Bbt%2FS0%3D\"}]}\r\ncontent-length: 47841\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5cd9206d016dc.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.511Z","timestamp":1789900256511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5cd9206d016dc.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ee6b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"6a54-5a96424b032a9\"\r\nlast-modified: Wed, 01 Jul 2020 16:54:20 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ekPS80tNXDBVBCrR1l377hT3MdLSjkxsaA7HFj0ULQqjCbIKg%2BPtgZGZZmuyog9o1WyyXhrSK3gCnCJQHEPUe5EAklcMKXZxLKo4%2FNyGOWQTDfy1WmDfnMYsQ%2BfhV7%2FE4rI%3D\"}]}\r\ncontent-length: 49360\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/dist/assets/css/app.css?v=20200701","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.288Z","timestamp":1789900256288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /dist/assets/css/app.css?v=20200701 HTTP/1.1\r\nHost: zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nCookie: PHPSESSID=m91nv57691k4gkp5smfji02vm4\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G3i5UqZ6ek9RQcfAgPyQJHJW832WsRqO5BfMxuA%2Bs5XYCNLEOWzlUqs7A9vTEspNhn0DTw7bTQRSf5C0MyQitp4pJ8d%2B%2BFEus8wvXlxGw5089UXcFPQXCFHMd%2FgKRA%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3e02859deb2b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-language: cs-CZ\r\nlast-modified: Wed, 09 Nov 2022 17:21:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":171075,"size_decoded":23695,"mime_type":"text/css","magic":"ASCII text, with very long lines (62849)","md5":"0d16f4973f3755af9685f1e5ca1d55e9","sha1":"005d3c0a01a3b1ca5b37ac68b408fa1e93d9724c","sha256":"439fcbd15cde91a1fd251f828b2c08dcf2f8ff72358319500ece9de16f8189fd","sha512":"d560a22b5c1e1d051831076a6b156bd74663144072f27fd311cf540aded0988125ce2ada609c9faa0bb28b904d0f834e33dff810a60b6d607b66977ae912d811","ssdeep":"3072:vSK98yqx8kaL7WL89FEgarjvXB8ogW/Xhv01wf6q/c:MrjvXB8Nu01wf6q/c","tlshash":"caf374b78e87227d00124e0794d1949c633d659cb76739f9ac83a86ce7cefa98437d84","first_seen":"2026-09-20T10:21:52.027428Z","last_seen":"2026-09-20T10:31:48.326661Z","times_seen":2,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5a0ad8e3bc81f.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.495Z","timestamp":1789900256495,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5a0ad8e3bc81f.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ee1b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"5e33-5a974af657f2d\"\r\nlast-modified: Thu, 02 Jul 2020 12:38:27 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Uoxp9UxoDn3PiQLBbff6LpunNVXOzuihHndT%2Fn33fcOL6NJAG5TaoqumDtoRqOfyaZkxO60zTKK42CDa0tT5YWBf66GLY%2BmQ7qxvOWDle7jiPn6o%2B4yN27LroW6cu6%2Fmusc%3D\"}]}\r\ncontent-length: 42977\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5ba39ba98c125.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.500Z","timestamp":1789900256500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5ba39ba98c125.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b3ee0b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"697b-5a964296d35e9\"\r\nlast-modified: Wed, 01 Jul 2020 16:55:40 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z65qzl9lQx9NiqK0I38cNa5CypPasrmWAUKFm2%2Fjref7Pe0EgQLVx5JjP70iuZg%2ByKMYvVvdjqtjeEDQzR4Cv9tto1oNALPejVEENoMRUixfayNrv%2BQA2E9ofROkslGL%2BDw%3D\"}]}\r\ncontent-length: 48454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/dist/assets/svg/sprite.symbol.svg","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.605Z","timestamp":1789900256605,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /dist/assets/svg/sprite.symbol.svg HTTP/1.1\r\nHost: zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nCookie: PHPSESSID=m91nv57691k4gkp5smfji02vm4\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: a3e0285bcefcb4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nlast-modified: Wed, 09 Nov 2022 18:02:30 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BNxEQIQma9CqOMhVd3MIK%2F%2B2k9lW%2FADAOsTYyJNVrhbSDfGaB3BlmrbEtIUpb%2BglRnImOXJWOK6yRE0zCxTXqhf8NYQU41oWX8eHtA4JzoDcQ7P4lGdpV0uZMCBbg%3D%3D\"}]}\r\ncontent-length: 15516\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45167,"size_decoded":16247,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f57b346be0e6974e5f0770a35049a747","sha1":"88249e46eae5b42d144a2aa4e77f5c92bd4c1262","sha256":"ebcec155913db1609149621640c33f57330bd57cb180f6ebdc51bf2d380c5259","sha512":"84bea7f42129e61e21f77b6ec32008b3bc41d6979c3a0dde828092c96d0af8ae70cf39a07885d3a7242c88471ad954dc2d8ca6466dd1015dde92395c4cfaa37e","ssdeep":"768:SPveqsYKEd9h+DM2b+MfUPDVlE1XiE27i25iF+EzSF5/SED5Jw/7c85Rg:IWqsYKEd0ffUPDVlE1iE27i25i4SED5n","tlshash":"d013647c8350c378a9c5cbfcaf35a4a0619e50ef91f7c38896e9ca6062d34d8f51e991","first_seen":"2026-09-20T10:21:52.084116Z","last_seen":"2026-09-20T10:31:48.327522Z","times_seen":2,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__cs.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026co=aHR0cHM6Ly96cm9rbmEubGl2ZTo0NDM.\u0026hl=cs\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bt4xeccgrwmq","date":"2026-09-20T10:30:57.152Z","timestamp":1789900257152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /recaptcha/releases/zqB-6Xpbd3lCIvi7Tr2D0pob/recaptcha__cs.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354911\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 14 Sep 2026 19:32:57 GMT\r\nexpires: Tue, 14 Sep 2027 19:32:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 14 Sep 2026 02:03:12 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 485880\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848315,"size_decoded":355798,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (618)","md5":"c3b71d49a9de8aa538a8acf820eb2dbe","sha1":"fda3678b2da9fc3d8ad51fd9c3245040d4bf9a98","sha256":"86112994f880678126b181b9f2adcc5f4cc2348660a193bc37f24144bd5affb4","sha512":"e936ae9ac174c91dd7abd14b34d692b097981ec870e28a1f95a04b50f65d53d2367058c4f800fe5e89e51bb1bc682da0a868d4063705fd399fef61e54c5bcf64","ssdeep":"12288:CgsXbOSz8FNaieyWB7k8fOLsQtcOIX8tVdUz:UbOSyAXfOL/tc9erUz","tlshash":"80054ad9b04274b55322b9f1506b141ea33ea467dc4c085eb1a9c5f16eb4c0eb07bebb","first_seen":"2026-09-14T22:40:25.177092Z","last_seen":"2026-09-20T10:31:48.308416Z","times_seen":5,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6Ldflc0iAAAAAJkG1ub7mPGvOaetcxsxs7qZqzkP\u0026co=aHR0cHM6Ly96cm9rbmEubGl2ZTo0NDM.\u0026hl=cs\u0026v=zqB-6Xpbd3lCIvi7Tr2D0pob\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=bt4xeccgrwmq","date":"2026-09-20T10:30:57.389Z","timestamp":1789900257389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 18 Sep 2026 10:12:28 GMT\r\nexpires: Sat, 18 Sep 2027 10:12:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 173909\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-20T13:43:47.9445Z","times_seen":994824,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":3,"connect":28,"send":0,"wait":16,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zrokna.live/","fqdn":"zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T10:30:54.455Z","timestamp":1789900254455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e0284ecdc4b4f3-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache\r\nserver: cloudflare\r\nset-cookie: PHPSESSID=m91nv57691k4gkp5smfji02vm4; path=/; HttpOnly\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DrxgFagnW8ziPh%2F3oV58m8VArGkqzkBJKvIAzI4eIgvdK%2FJ5QxUSB%2FlcMUTM5o08Gy6SqV9rzy0Puvd7bZeMAmVqXRH5auN1COjCbu8jBXNj%2BPPcaRRGeMQgf7eWqw%3D%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"m91nv57691k4gkp5smfji02vm4","quoted":false,"path":"/","secure":false,"http_only":true,"same_site":"","partitioned":false,"raw":"PHPSESSID=m91nv57691k4gkp5smfji02vm4; path=/; HttpOnly"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":56561,"size_decoded":8483,"mime_type":"text/html; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (395), with CRLF, LF line terminators","md5":"5f6f944d4cb06dd95d8a4245e9c827d5","sha1":"c7cc82879b0b5b4f610cea8d7c7d9e5ebab1eeed","sha256":"bf49031455f4bc2001fc8e347b4e028c3c044cc61701e5a6cb34430e7790cc75","sha512":"5743a87096ac12d50878f217c5969cac1ff23fa9c14096eb29aa6aa6ece7e723b65df51ca931cf8eb49f47683ea4522caf01d7db30d0d9bb9a2a2b32f6b0e0d3","ssdeep":"384:bTPPsCPRU7yoWhcDsuuthWvwR30K36pFG3o4AbHgUPngZ3KVA/Dz:nhU7yoW6AuShWvw2bHgUPngZ3KVA/Dz","tlshash":"0a43622384f858220242e1c87f7d7759ef92b817d9ab4909b1dd0fc94f92ec28a1367d","first_seen":"2026-09-20T10:31:48.32872Z","last_seen":"2026-09-20T10:31:48.32872Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1635,"timings":{"blocked":0,"dns":42,"connect":24,"send":0,"wait":1569,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.zrokna.live/media/cache/gallery_image_medium/uploads/gallery/5c0e6f3b7c018.JPG","fqdn":"www.zrokna.live","domain":"zrokna.live","tld":"live"},"ip":{"addr":"104.21.55.162","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zrokna.live/","date":"2026-09-20T10:30:56.494Z","timestamp":1789900256494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zrokna.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 11:00:03 GMT","end":"Mon, 02 Nov 2026 11:56:27 GMT"},"fingerprint":{"sha1":"EA:0C:3D:37:40:E4:65:B2:1C:B0:9B:25:88:07:EE:31:8B:93:D5:BC","sha256":"46:FD:E5:A4:E2:43:C1:E4:0E:B4:3A:E7:4C:E8:6A:56:F4:56:6A:A7:51:69:FC:55:20:E0:20:B6:A3:79:2D:2F"}}},"request":{"raw":"GET /media/cache/gallery_image_medium/uploads/gallery/5c0e6f3b7c018.JPG HTTP/1.1\r\nHost: www.zrokna.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zrokna.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:30:56 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e0285b2ed5b4f3-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 602\r\ncache-control: public, max-age=1209600, must-revalidate\r\netag: \"f5c8-5a9642860f609\"\r\nlast-modified: Wed, 01 Jul 2020 16:55:22 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Hp9pmq9p6Rv9e%2FI6YchD7mzZx0NoWFo12HDW9b7gWIUt2ie4Rgz0i2dWSdkD8fK6%2BduahgzVE6OXPIzoyWtcHA0H8UlqmA4wJgY9fwOXueZiD3nXmi3hveSvnYEUHPEkCs%3D\"}]}\r\ncontent-length: 112958\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/jpeg","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T14:41:49.53962Z","times_seen":18569658,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"www.zrokna.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"www.zrokna.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}