lolz.guru/members/98981/
301 Moved Permanently 178 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /members/98981/ HTTP/1.1
Host: lolz.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 05 Jan 2023 18:03:42 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://lolz.guru/members/98981/
Strict-Transport-Security: max-age=15768000
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 326898eb925368408f6f42ee173b9d89
b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8
96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17421
Expires: Thu, 05 Jan 2023 22:54:03 GMT
Date: Thu, 05 Jan 2023 18:03:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b5997a492d3d161c9009d95add566733
9db765ae549ebe4aa859ca27abe365cf7f62dc4d
1ec0de25b0afd3b402c728b9c6b47c4fcf25fb989052427886841a3f52510a0e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1EC0DE25B0AFD3B402C728B9C6B47C4FCF25FB989052427886841A3F52510A0E"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11048
Expires: Thu, 05 Jan 2023 21:07:50 GMT
Date: Thu, 05 Jan 2023 18:03:42 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 05 Jan 2023 17:41:16 GMT
content-type: application/json
age: 1346
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 600f7ba6e1a6fbbd176cd2df19b1e4d9
cdd72b25fd91ee980aba193b12e890096e4fe852
860214860947dfbe26099f018747154823b175fceb2821a390cc655da191a6d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "860214860947DFBE26099F018747154823B175FCEB2821A390CC655DA191A6D0"
Last-Modified: Thu, 05 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13713
Expires: Thu, 05 Jan 2023 21:52:15 GMT
Date: Thu, 05 Jan 2023 18:03:42 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rEUrbVMipB1qfDFDnY12RElGuwxGOAWEDdV/qVznplSlcLiIJ9DwzANWQ00rH9tSKWro5nd3tUU=
x-amz-request-id: NE8BE9ZXZ7M66D1X
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 05 Jan 2023 18:01:50 GMT
age: 112
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:42 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash d6e624a78c415a74da4d5e1dad1535aa
e6fcfb17326bcaefe393992c56a664ddc353ff66
8be8ecc48425974940e7f67343e432c6f73b20ca5df77c2a2911d10ef6cd556f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 18:03:43 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 04 Jan 2023 21:43:03 GMT
Expires: Wed, 11 Jan 2023 21:43:02 GMT
Etag: "e6fcfb17326bcaefe393992c56a664ddc353ff66"
Cache-Control: max-age=530958,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 784e21da08d9b515-OSL
lolz.guru/members/98981/
301 Moved Permanently 178 B IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /members/98981/ HTTP/1.1
Host: lolz.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: text/html
content-length: 178
location: https://zelenka.guru/members/98981/
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 142791ef92511e0458d470ad0afc7e88
fc0f987833cd3c6fb3a18477f9d403474724ece5
97fa6737c51322dac359ec0ca17821e0a280610346aef88f18fde20105b03792
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "97FA6737C51322DAC359EC0CA17821E0A280610346AEF88F18FDE20105B03792"
Last-Modified: Wed, 04 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5528
Expires: Thu, 05 Jan 2023 19:35:51 GMT
Date: Thu, 05 Jan 2023 18:03:43 GMT
Connection: keep-alive
zelenka.guru/members/98981/
200 OK 1.3 kB URL HTTP/2 zelenka.guru/members/98981/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1171)
Hash 27c5d83ddd7f1f686dae22d97ab659f8
16c88a200974b16ca92b1a72833c42ca92c14256
ecb14d8546efd894c695958fc3e3f2a2dd0917a50a31f353d562035168b53b68
Analyzer Verdict Alert fortinet Malware
GET /members/98981/ HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: text/html
content-length: 1345
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Expires, Pragma, Content-Type, Backoff, Last-Modified, Cache-Control, ETag
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 05 Jan 2023 17:08:11 GMT
age: 3332
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 73a99621729e1bc9e236a1085b98a0cf
5e1f71493085f6be7788f59987c1f0850b77d4d7
219d1a8d7d1a027553f72c8c024488863d8996457b31c78014002f81174f3ad1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4788
Cache-Control: max-age=145374
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 18:03:43 GMT
Etag: "63b69329-1d7"
Expires: Sat, 07 Jan 2023 10:26:37 GMT
Last-Modified: Thu, 05 Jan 2023 09:06:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
zelenka.guru/aes.js
200 OK 26 kB IP
File type ASCII text, with very long lines (25638), with no line terminators
Hash 535ff81ab45764c67a7336a70ee7c7a6
c1cdb3fc5b8e033fbc2be2638b6189e9f3a4f669
991fa3ac0febff65dd238aa07315e6ccb792fb207828b371de8cb353bd4dd121
Analyzer Verdict Alert fortinet Malware
GET /aes.js HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
content-length: 25638
last-modified: Sun, 03 Jun 2018 20:00:00 GMT
etag: "5b1448c0-6426"
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/members/98981/
200 OK 17 kB URL HTTP/2 zelenka.guru/members/98981/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3360)
Hash 64f88c26b810356dd5e5890343853f3e
40af4965fa105a5599c5222513f9889f1bf3563e
b000b7ce4d15a28fad3adc3415fda17b658fc1e08425700b6800b54648e52161
Analyzer Verdict Alert fortinet Malware
GET /members/98981/ HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: text/html; charset=UTF-8
content-length: 17234
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: private, max-age=0
set-cookie: xf_session=028b757a010ce38bcdc2bfe458a908c3; path=/; secure; HttpOnly
x-frame-options: SAMEORIGIN
x-xss-protection: 1
last-modified: Thu, 05 Jan 2023 18:03:43 GMT
content-encoding: gzip
vary: Accept-Encoding
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fWBWaBTA0ZoBtJbiqqPcVg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bd75OmnEayBAMUyNyX66THOcR5w=
zelenka.guru/js/lolzteam/errorHandler.js?_v=1d49fc45
200 OK 1.2 kB URL HTTP/2 zelenka.guru/js/lolzteam/errorHandler.js?_v=1d49fc45
IP
Hash 15b5173ad1ab6c8053a5c886e5f99b72
1d89619c6b28c943c63f9266d976826c59e51f69
4c9ac3fef5b0d9c7cf41cb4071e5f44da56b0b1e4bfdc05653f57803f0c56ad1
Analyzer Verdict Alert fortinet Malware
GET /js/lolzteam/errorHandler.js?_v=1d49fc45 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
content-length: 1176
last-modified: Fri, 11 Nov 2022 11:35:26 GMT
vary: Accept-Encoding
etag: "636e337e-498"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/js/Nobita/FollowingAlerts/follow.js?_v=1d49fc45
200 OK 454 B URL HTTP/2 zelenka.guru/js/Nobita/FollowingAlerts/follow.js?_v=1d49fc45
IP
File type ASCII text, with very long lines (454), with no line terminators
Hash a12f99fb1ab577fabacf1266244b64f7
bf9afc36b4889982fe4f3bd07ab2a73cbbffa85c
913c2510461c045e1c46026ffb3d219d89b7d08fe2558a742abccc860580027a
Analyzer Verdict Alert fortinet Malware
GET /js/Nobita/FollowingAlerts/follow.js?_v=1d49fc45 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
content-length: 454
last-modified: Fri, 11 Nov 2022 11:35:26 GMT
vary: Accept-Encoding
etag: "636e337e-1c6"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/home.svg
200 OK 749 B URL HTTP/2 zelenka.guru/styles/mm/home.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (645)
Hash 585a86a8595a730b074d80e4b6959447
671f74ba8ce90a6b64b6e294038d966711da8b23
e8e5becab46e87d05b0551d9da64f510416a31811483c47478ee10d6ab7b0bbe
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/home.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 749
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-2ed"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/paper.svg
200 OK 895 B URL HTTP/2 zelenka.guru/styles/mm/paper.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (336)
Hash 61772c52576c14fe293e82b271e2972f
a906379feb9106fa295ac0f7fa7eb3eb54dcdec9
777d52d10b4a8a981cc4ee43823500087dd0d2209e50514df3765d10d742a63d
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/paper.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 895
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-37f"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/buy.svg
200 OK 1.2 kB URL HTTP/2 zelenka.guru/styles/mm/buy.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (344)
Hash f796e797192932ea9d82c2682b7568ea
744929b0b0b84c321048eb3d24e114590c320d87
a29c241035d53a2b9fd702f0b06821c16f2324fd580726afa0d32b5fdcc5728b
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/buy.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 1223
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-4c7"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/shield.svg
200 OK 812 B URL HTTP/2 zelenka.guru/styles/mm/shield.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (565)
Hash ed4e97d8851b3beae7df510697a3eb80
22d2dbad5b9dafe90fc255e073c4800e616732b7
28bae4941d25a2b04e3c19d9da161c5b00355a141b1b554eb47ed98cf9db539a
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/shield.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 812
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-32c"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/send.svg
200 OK 432 B URL HTTP/2 zelenka.guru/styles/mm/send.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (328)
Hash 8650fbba5c447a5aba47e0a7ac057829
48e6e755dd71913a17496fe0ed9f909865f28d2d
f03f16eb1f8689b4a3094f18fc905982c32361d7fa67a9eb85b9493f87982a58
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/send.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 432
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-1b0"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/chat.svg
200 OK 1.4 kB URL HTTP/2 zelenka.guru/styles/mm/chat.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (686)
Hash a09482b9ec1e6bcec3cf0dc395ed2614
5358ea23c9902e1e65ed0eeb571df2787bea3788
9d07bff0ec207cf8097ab26b4599c29e219ddd058db3ce5d7ea7b640618f3fd2
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/chat.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 1354
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-54a"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/voice.svg
200 OK 800 B URL HTTP/2 zelenka.guru/styles/mm/voice.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (369)
Hash 041c7deb4c221f1e51c9d6c66d588644
1298441e2319e8461d4a1698315444dc445eb242
5977716623714f02150a5f7c31f89c304265a8d5782b17e47a027c3d9001ad3f
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/voice.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 800
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-320"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/danger.svg
200 OK 902 B URL HTTP/2 zelenka.guru/styles/mm/danger.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (433)
Hash a65e41a7b6ccaf049e2e775326e74a0c
30aaaca66bd18539ccccd56dc6d328651575a9e7
28d452a1efbf6d513a7d02dbca936882a3bf9552211f75087274056e3fdbaec4
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/danger.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 902
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-386"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/circle.svg
200 OK 683 B URL HTTP/2 zelenka.guru/styles/mm/circle.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (339)
Hash 36c0971d9e77fc848b80f385242146a0
3ca04689f81ff0a21e81887bd9f32e8449b56378
8e4962642b4d7110d15d68553aaa0ddfc5dcaab5d4f4293d6cebb8705d74d844
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/circle.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 683
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-2ab"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/square.svg
200 OK 719 B URL HTTP/2 zelenka.guru/styles/mm/square.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (376)
Hash 702eb53194b95a6318f0e8e9295c80cd
7330f4aa9b442db95d9bd85040e8e12bff079ef5
587e1039cd67e4f2a95a1614adc096941f2a29a047eb89d3dd6b9e4c166ff405
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/square.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 719
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-2cf"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/graph.svg
200 OK 1.3 kB URL HTTP/2 zelenka.guru/styles/mm/graph.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (706)
Hash 865dc809dcb9f8fb94ca0dcae0a42d4d
bb482b7749efd9b1ed5b3881c335e689673fcc33
f362004a918d1c5d3405664a47c827b4696d599351ea28d969d6839ecc13767c
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/graph.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 1306
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-51a"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/language.svg?1
200 OK 1.2 kB URL HTTP/2 zelenka.guru/styles/mm/language.svg?1
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1093)
Hash 47689d5587cfdc167eb024b2a1c76735
0ade34df01ae54d32cd147a0627672822e20eb04
2dcce233f1cf1f6c7988302fc2bc49b4a5704bc043bdf3b5ec25f43f7b17534b
GET /styles/mm/language.svg?1 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
content-length: 1228
last-modified: Mon, 05 Sep 2022 09:57:35 GMT
etag: "6315c80f-4cc"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/css.php?css=member_view,message_simple,mmenu_all,notices,panel_scroller,trophy&style=9&dir=LTR&d=1672924284
200 OK 12 kB URL HTTP/2 zelenka.guru/css.php?css=member_view,message_simple,mmenu_all,notices,panel_scroller,trophy&style=9&dir=LTR&d=1672924284
IP
File type ASCII text, with very long lines (6252)
Hash 41b60159db8c1ff7360a7d43eb1b8a31
ac2e6f27dd7a83363454bcc2d6e5935800acf89b
9fe79e0faf3628a7f1ba87481f336f89b9bbf15768688207043013665c771b30
GET /css.php?css=member_view,message_simple,mmenu_all,notices,panel_scroller,trophy&style=9&dir=LTR&d=1672924284 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: text/css; charset=utf-8
content-length: 11459
expires: Thu, 12 Jan 2023 18:03:43 GMT
last-modified: Thu, 05 Jan 2023 13:11:24 GMT
cache-control: max-age=604800
content-encoding: gzip
vary: Accept-Encoding
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a430d46fb27196c8b03f382c1bafbb23
0b31940d1067eb87c24c6d356689d7f9f90231a6
3e9cd331b1c2c1eca94ff12ec1b685e1c1c1909e30e8b3cf4493dc6eac786df8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 18:03:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1672924284
200 OK 93 kB URL HTTP/2 zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1672924284
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8c8503f2882ed987d66f066da3fe0721
912fba31f232c082267530db8e36b5bc4b899246
6062650d55dacb3b3f9a7bf037c31ef8ec3b6218831949b16bffa754a5837dce
GET /css.php?css=xenforo,form,public&style=9&dir=LTR&d=1672924284 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: text/css; charset=utf-8
content-length: 93329
expires: Thu, 12 Jan 2023 18:03:43 GMT
last-modified: Thu, 05 Jan 2023 13:11:24 GMT
cache-control: max-age=604800
content-encoding: gzip
vary: Accept-Encoding
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-J7RS527GFK
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-J7RS527GFK
IP
File type ASCII text, with very long lines (20080)
Hash 0a6a43b82b574bc304b4dc20009d8c70
9031e129690854d97f2c8363910292a70e973268
503b41ebcc36f8bc1533bafddeca8534621c638105ab92ad2a4b92124595056d
GET /gtag/js?id=G-J7RS527GFK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 05 Jan 2023 18:03:44 GMT
expires: Thu, 05 Jan 2023 18:03:44 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76337
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 561e959ce9eff04b09da6f3def82f549
7866f989cdfb160709f4c93b767fd01e5553d75b
9076b4ae1a34ab02b362ffa44ecbf6d579f82042cfd7e7138977477ea5bd3e61
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 18:03:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zelenka.guru/styles/mm/profile.svg
200 OK 1.8 kB URL HTTP/2 zelenka.guru/styles/mm/profile.svg
IP
Hash e1d5dbd8fd5ea2cb14fad90c403a3f20
f6aeb2d0de766d8effcb085caf926e99267a5dbf
605ec2bdbabaf3fe954092993cec868a5355ffa9ac45270a227162fd82d2667e
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/profile.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: W/"6315c321-b7c"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/public/trophy_icons/3year_140.png?1
200 OK 27 kB URL HTTP/2 zelenka.guru/public/trophy_icons/3year_140.png?1
IP
File type PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced\012- data
Hash a3156b6fd48968b84ddb732452bbb6fa
740186eb58ca6ea667dba9374eeef8bdd9b5b57d
523ac95de15a3f19cbf92ca3a2b71a1bf911535967f9b1fc12f1799fb571bd94
Analyzer Verdict Alert fortinet Malware
GET /public/trophy_icons/3year_140.png?1 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/css.php?css=member_view,message_simple,mmenu_all,notices,panel_scroller,trophy&style=9&dir=LTR&d=1672924284
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: image/png
content-length: 26789
last-modified: Mon, 23 May 2022 09:33:53 GMT
etag: "628b5501-68a5"
expires: Sun, 08 Jan 2023 18:03:44 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/public/trophy_icons/2year_140.png?1
200 OK 18 kB URL HTTP/2 zelenka.guru/public/trophy_icons/2year_140.png?1
IP
File type PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced\012- data
Hash d5d8786e92464c8b5e263459c9637c03
c0df348205d8c85335c297147237053b3278cd23
38adb2d1ae7623379555a38be3820412bbd29902cf68d2ab58b162fb31e4e340
Analyzer Verdict Alert fortinet Malware
GET /public/trophy_icons/2year_140.png?1 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/css.php?css=member_view,message_simple,mmenu_all,notices,panel_scroller,trophy&style=9&dir=LTR&d=1672924284
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: image/png
content-length: 18466
last-modified: Mon, 23 May 2022 09:33:53 GMT
etag: "628b5501-4822"
expires: Sun, 08 Jan 2023 18:03:44 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/public/trophy_icons/1year_140.png
200 OK 20 kB URL HTTP/2 zelenka.guru/public/trophy_icons/1year_140.png
IP
File type PNG image data, 140 x 140, 8-bit/color RGBA, non-interlaced\012- data
Hash af38f7be9cef532c2021ea8a30166179
177dcd1c1200aac2cc8c3824615447f65b60eb8e
5c3845f7656c30e98fb2dc5976fae7c59e76ae60a0ab6559e288e2b38c50c564
GET /public/trophy_icons/1year_140.png HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/css.php?css=member_view,message_simple,mmenu_all,notices,panel_scroller,trophy&style=9&dir=LTR&d=1672924284
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: image/png
content-length: 19559
last-modified: Mon, 23 May 2022 09:33:53 GMT
etag: "628b5501-4c67"
expires: Sun, 08 Jan 2023 18:03:44 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/public/cd-top-arrow.svg
200 OK 555 B URL HTTP/2 zelenka.guru/public/cd-top-arrow.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash c2bab96d57583d68d57a99dc04f16482
17f5b39cdf2f8cd02d5f3ff422372dcefd1bea53
d94bbee4b8120bf8e4937e3e9c54de44bdb866291db81088601bde90085092da
Analyzer Verdict Alert fortinet Malware
GET /public/cd-top-arrow.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1672924284
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: image/svg+xml
content-length: 555
last-modified: Mon, 23 May 2022 09:33:53 GMT
etag: "628b5501-22b"
expires: Sun, 08 Jan 2023 18:03:44 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5dcd3e3f6440384500af24c809a3f175
3a5df7e2369c9d65865d73410b0cac87e1b5a54c
b7c5a41dbd443dcb04231372b9ac63a3853d57e43941af5b22073693291099df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 18:03:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5dcd3e3f6440384500af24c809a3f175
3a5df7e2369c9d65865d73410b0cac87e1b5a54c
b7c5a41dbd443dcb04231372b9ac63a3853d57e43941af5b22073693291099df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 18:03:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zelenka.guru/styles/mm/users.svg
200 OK 1.1 kB URL HTTP/2 zelenka.guru/styles/mm/users.svg
IP
Hash 38fbe9f435bb2ed5535692e3612d2ba4
0036f3223854630d119935adddc784ec29e6180e
d7cd0ef6a7c9b87a02875139188c5ebf6b001a5e6f3237ff568bc59fd4aa1cc9
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/users.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: W/"6315c321-70b"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/data/avatars/s/5360/5360191.jpg?1652248788
200 OK 1.2 kB URL HTTP/2 zelenka.guru/data/avatars/s/5360/5360191.jpg?1652248788
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 48x48, components 3\012- data
Hash 5d825cf96a01e93aee8728cb4b66c40e
ea07fa72ae188a5ddd640212c6b484101f82b1db
9cc7f187cc48e37954a47fb90f3a868f8c56de6ca8185d95c9e70ba9824d156d
GET /data/avatars/s/5360/5360191.jpg?1652248788 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: image/jpeg
content-length: 1219
last-modified: Wed, 11 May 2022 05:59:49 GMT
etag: "627b50d5-4c3"
expires: Sun, 08 Jan 2023 18:03:44 GMT
cache-control: max-age=259200
accept-ranges: bytes
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75cfc8b3d7a22c317465a354b950897b
272651a02a8fa17067d9e4e9ff4878d2c1af75af
40dc9698f6d97aeada27973d1b096a149bb5bb299c38a6ed87e853e6d724d26b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 18:03:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26240, version 1.0\012- data
Hash 4a90976686fcbd8296c7d7fccc04c273
bcb82e93ac7ad1fa2af6a37009a200f79f4cb4e5
59bd288e64c57e034672999e33ebda6eb5ad1575945eb563dbfb5b44f226e1e1
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zelenka.guru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 02 Jan 2023 18:56:02 GMT
expires: Tue, 02 Jan 2024 18:56:02 GMT
cache-control: public, max-age=31536000
age: 256062
last-modified: Mon, 15 Aug 2022 18:14:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zelenka.guru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 02 Jan 2023 18:52:41 GMT
expires: Tue, 02 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 256263
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5dcd3e3f6440384500af24c809a3f175
3a5df7e2369c9d65865d73410b0cac87e1b5a54c
b7c5a41dbd443dcb04231372b9ac63a3853d57e43941af5b22073693291099df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 05 Jan 2023 18:03:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zelenka.guru/styles/font/fa/fa-regular-400.woff2?_v=5.15.3
200 OK 169 kB URL HTTP/2 zelenka.guru/styles/font/fa/fa-regular-400.woff2?_v=5.15.3
IP
File type Web Open Font Format (Version 2), TrueType, length 168768, version 331.-31261\012- data
Size 169 kB (168768 bytes)
Hash d8689b99dce7c881d3130f3c91cfefdf
fb005c93930c13b3a5f449bbc75ba5ee23f609fa
4de49631fe60b17010f7cda29a6236ca6ad6102ea204e5c31d2c1e79ee276938
Analyzer Verdict Alert fortinet Malware
GET /styles/font/fa/fa-regular-400.woff2?_v=5.15.3 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1672924284
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: font/woff2
content-length: 168768
last-modified: Mon, 23 May 2022 09:33:53 GMT
etag: "628b5501-29340"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
X-Firefox-Spdy: h2
zelenka.guru/public/zelenka/256-christmas.svg
200 OK 148 kB URL HTTP/2 zelenka.guru/public/zelenka/256-christmas.svg
IP
Size 148 kB (148168 bytes)
Hash f5a5543221cfd783e0a207514e7efb4a
ff13fd4a3fadf82c9e62cd26b88bbbf17939af02
fd6677c9d54a3bde1ed660cb505420af79f5ac7e059c9b6212de257515bf4a25
Analyzer Verdict Alert fortinet Malware
GET /public/zelenka/256-christmas.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1672924284
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Fri, 16 Dec 2022 19:32:51 GMT
etag: W/"639cc7e3-8158"
expires: Sun, 08 Jan 2023 18:03:44 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/public/2017/zelenka.png
200 OK 9.6 kB URL HTTP/2 zelenka.guru/public/2017/zelenka.png
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 152x152, components 3\012- data
Hash fadafbda2fab7c8a1feed8c6e00abcee
887f25e551c19dafeb8c0f00f30ab58fc2211346
e3742682cfdd81665035a5e97e6b43d5891e2379ab6c2b06dbd764e672965d4d
GET /public/2017/zelenka.png HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: image/png
content-length: 9579
last-modified: Fri, 19 Aug 2022 15:39:15 GMT
etag: "62ffaea3-256b"
expires: Sun, 08 Jan 2023 18:03:44 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/favicon.svg?4
200 OK 1.4 kB URL HTTP/2 zelenka.guru/favicon.svg?4
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (626)
Hash d22fbfe2ced1c6d4a8997bdb0c38d3b5
d57652506d9d076d17f556fe8ed29c2fa5a88ceb
f223ae0076c1bf119bc649fad179dfaf5a11aa91d3104957002678837c1a716a
Analyzer Verdict Alert fortinet Malware
GET /favicon.svg?4 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:44 GMT
content-type: image/svg+xml
content-length: 1352
last-modified: Thu, 25 Aug 2022 11:38:05 GMT
etag: "63075f1d-548"
expires: Sun, 08 Jan 2023 18:03:44 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 178b20e87a491dd05b74dd7e4088d1a3
54ae5aed606cf91881e1c4adc54bdeb06cd14279
26f5ab0f2ff8ecf63e2e8c4b7e6df452369fbf3be5a8729a5b0ab629e09f46cb
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 18:03:44 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Mon, 09 Jan 2023 17:25:07 GMT
ETag: "54ae5aed606cf91881e1c4adc54bdeb06cd14279"
Last-Modified: Thu, 05 Jan 2023 17:25:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2015
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 784e21e39e030b06-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash a922ba190aab37415c4e0ebd6aa9ed45
414617cbc287aa35085a6e9c9b2370f079bb684f
a442ca77d3431a933fdb47ea0f9bbbe3e70954ebcad9cacb0384fe0c51a03f36
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 05 Jan 2023 18:03:44 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Mon, 09 Jan 2023 17:11:00 GMT
ETag: "414617cbc287aa35085a6e9c9b2370f079bb684f"
Last-Modified: Thu, 05 Jan 2023 17:11:01 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2119
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 784e21e3a9891c0e-OSL
counter.yadro.ru/hit?t52.6;rhttps%3A//zelenka.guru/members/98981/;s1280*1024*24;uhttps%3A//zelenka.guru/members/98981/;hEcho_inactive_inactive%20-%20%u0424%u043E%u0440%u0443%u043C%20%u0441%u043E%u0446%u0438%u0430%u043B%u044C%u043D%u043E%u0439%20%u0438%u043D%u0436%u0435%u043D%u0435%u0440%u0438%u0438%20%u2014%20Zelenka.guru%20%28Lolzteam%29;0.8851074825175134
200 OK 437 B URL HTTP/1.1 counter.yadro.ru/hit?t52.6;rhttps%3A//zelenka.guru/members/98981/;s1280*1024*24;uhttps%3A//zelenka.guru/members/98981/;hEcho_inactive_inactive%20-%20%u0424%u043E%u0440%u0443%u043C%20%u0441%u043E%u0446%u0438%u0430%u043B%u044C%u043D%u043E%u0439%20%u0438%u043D%u0436%u0435%u043D%u0435%u0440%u0438%u0438%20%u2014%20Zelenka.guru%20%28Lolzteam%29;0.8851074825175134
IP
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash bf642a0ca65e78499b0e54c330293e9c
8ab8e0db36536985e6ff9648f59a58e922390313
967b5552cee1deec46dc25b4e38dd4223a4fddea9d3399307a9570fef134dfa4
GET /hit?t52.6;rhttps%3A//zelenka.guru/members/98981/;s1280*1024*24;uhttps%3A//zelenka.guru/members/98981/;hEcho_inactive_inactive%20-%20%u0424%u043E%u0440%u0443%u043C%20%u0441%u043E%u0446%u0438%u0430%u043B%u044C%u043D%u043E%u0439%20%u0438%u043D%u0436%u0435%u043D%u0435%u0440%u0438%u0438%20%u2014%20Zelenka.guru%20%28Lolzteam%29;0.8851074825175134 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Thu, 05 Jan 2023 18:03:44 GMT
Content-Type: image/gif
Content-Length: 437
Connection: keep-alive
Expires: Tue, 04 Jan 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash b604b44a44140d3e443d1c1c9da02d8d
05407447253dbbd694e67456c6b25b5112bd359d
0dcc105aceee70b68e812bdb6033ab465720efe541259c35f19aa09fadc88bf8
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73737
date: Thu, 05 Jan 2023 18:03:44 GMT
access-control-allow-origin: *
etag: "63ae6ee1-12009"
expires: Thu, 05 Jan 2023 19:03:44 GMT
last-modified: Fri, 30 Dec 2022 07:53:53 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 05 Jan 2023 18:03:44 GMT
access-control-allow-origin: *
etag: "63ae6ee1-2b"
expires: Thu, 05 Jan 2023 19:03:44 GMT
accept-ranges: bytes
last-modified: Fri, 30 Dec 2022 07:53:53 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/85597711/1?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A704%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1328516358902%3Ahid%3A646120446%3Az%3A0%3Ai%3A20230105180334%3Aet%3A1672941815%3Ac%3A1%3Arn%3A217792772%3Arqn%3A1%3Au%3A1672941815640590124%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C100%2C0%2C%2C0%2C%2C412%2C65%2C%2C%2C%2C643%3Aco%3A0%3Ans%3A1672941813373%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672941815%3At%3AEcho_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20%28Lolzteam%29&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/85597711/1?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A704%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1328516358902%3Ahid%3A646120446%3Az%3A0%3Ai%3A20230105180334%3Aet%3A1672941815%3Ac%3A1%3Arn%3A217792772%3Arqn%3A1%3Au%3A1672941815640590124%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C100%2C0%2C%2C0%2C%2C412%2C65%2C%2C%2C%2C643%3Aco%3A0%3Ans%3A1672941813373%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672941815%3At%3AEcho_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20%28Lolzteam%29&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash fe63c24eb4c5b26a0c0c47ec9492d246
663aaef82614dd2ec4b815b6efdcd8c1ae4fb902
660ce069c94e495f782ab4e2f2bba3084671ebcf0f149f6f8113ad42be25c6b7
GET /watch/85597711/1?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A704%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1328516358902%3Ahid%3A646120446%3Az%3A0%3Ai%3A20230105180334%3Aet%3A1672941815%3Ac%3A1%3Arn%3A217792772%3Arqn%3A1%3Au%3A1672941815640590124%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C100%2C0%2C%2C0%2C%2C412%2C65%2C%2C%2C%2C643%3Aco%3A0%3Ans%3A1672941813373%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672941815%3At%3AEcho_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20%28Lolzteam%29&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zelenka.guru
Referer: https://zelenka.guru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Thu, 05 Jan 2023 18:03:45 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://zelenka.guru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 18:03:45 GMT
last-modified: Thu, 05-Jan-2023 18:03:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-J7RS527GFK>m=2oebu0&_p=796999499&cid=182509979.1672941814&ul=en-us&sr=1280x1024&_s=1&sid=1672941814&sct=1&seg=0&dl=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&dr=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&dt=Echo_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-J7RS527GFK>m=2oebu0&_p=796999499&cid=182509979.1672941814&ul=en-us&sr=1280x1024&_s=1&sid=1672941814&sct=1&seg=0&dl=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&dr=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&dt=Echo_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-J7RS527GFK>m=2oebu0&_p=796999499&cid=182509979.1672941814&ul=en-us&sr=1280x1024&_s=1&sid=1672941814&sct=1&seg=0&dl=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&dr=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&dt=Echo_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zelenka.guru
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://zelenka.guru
date: Thu, 05 Jan 2023 18:03:45 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17147
Expires: Thu, 05 Jan 2023 22:49:32 GMT
Date: Thu, 05 Jan 2023 18:03:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17147
Expires: Thu, 05 Jan 2023 22:49:32 GMT
Date: Thu, 05 Jan 2023 18:03:45 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1780bdca4138463723f65222d72004e2
c0acbd7a8cf08d7b675dd8a0cdb73d4ff4fbdb8b
92d022d0945f2e9ff1b27013792745c4ca2d65150693532049985efdf9022efa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "92D022D0945F2E9FF1B27013792745C4CA2D65150693532049985EFDF9022EFA"
Last-Modified: Wed, 04 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17147
Expires: Thu, 05 Jan 2023 22:49:32 GMT
Date: Thu, 05 Jan 2023 18:03:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ce88a04d7f32ce0497bd84db44da8d4
761049019c342553004815ea394dcf282f2cc613
038aa4e5da1428524de833071814998d6c1d8b8b60d4e9c10e60d8a75f7b88fb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F038e46b4-c5e2-4f46-817c-434795e1e545.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5601
x-amzn-requestid: 54813ea9-9435-4355-910b-5b4d1eadf2ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGlhgHU1oAMFTYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b282d6-17e772ae5b70371367792063;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 07:08:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pigrktUzOcu_-Z-HnUPOnmF7yhHIdOv9bB9x7VVONHr7YZXwZAEvZA==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:44:19 GMT
age: 40766
etag: "761049019c342553004815ea394dcf282f2cc613"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4cecd6a1a228ac55f193a180229d3a33
9e5fd5a101828d5491305deb539dc5836c5b3065
7bbd9e261625c2d2a700a817c2f10b779c8463baacda02f9f34161c08487ca31
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa32e61e5-fcf0-4825-a1bf-ea145dd3ae6c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8721
x-amzn-requestid: 1c24289e-6169-4088-a2b8-311e3640e4bf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eAA7IGTdIAMFzCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afe1e0-561d5981260c41511219c673;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 07:16:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: qoxCvnR2nVjlCdQJ6Wyq_Ot0p1SVdhl71LEKAm0-tkPMxWHGdIl42w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 07:31:55 GMT
age: 37910
etag: "9e5fd5a101828d5491305deb539dc5836c5b3065"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e832123ea0c92a446b5894e75efc86ae
bb438ca635b43819701067ef07a3d910ad29a0c7
e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vIFVXgt2RmoplkAVOtUrOkXj3LmhRw-XEPe7fugZ2-mv_iDY07XzUg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 23:39:12 GMT
age: 66273
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 008614d302ad57bc6502ad5e07652378
968bc262d2939ec6f0dce9d852682c0aaf86d3d7
5eab9a2591f0f9761ba3b90a5a191b79b6326cccb1ee6b586b00dfc1517c8db6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F343434d9-f716-41aa-8934-1a5f79402aa1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4248
x-amzn-requestid: 41ee9ad4-ddfd-42a5-b66c-167c4bda9153
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eCvUGHnlIAMFw8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b0f8e6-4ac2abc739dc4ff640301707;Sampled=0
x-amzn-remapped-date: Sun, 01 Jan 2023 03:07:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QVwr9xaKtzkI-Lnp683K6kKaWfnnmPs0o6HG7PBuAc9QbcMqczguNw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 06:16:00 GMT
age: 42465
etag: "968bc262d2939ec6f0dce9d852682c0aaf86d3d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f013561-93d6-474a-8f03-299013f0ba30.webp
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f013561-93d6-474a-8f03-299013f0ba30.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db1b2573cd90d9c94112bc677d90d8a7
52830fa620718a629970f4ca9df109ea1d979f2d
f869d532534d81fd1335a9182409f9f1dda1ec7e8dba6445bcd219aec5f5d1e2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5f013561-93d6-474a-8f03-299013f0ba30.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7367
x-amzn-requestid: 24c48b0b-7f01-4f67-b37e-8bc7ed792c36
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGlAJEqsIAMFeIw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b28200-0813561555102cf079fd916a;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 07:04:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pV_OpUPGuj1flqeUn8cyGYgNqGEKQrNgI9wjEhSotuT-jI0QElreQw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 05 Jan 2023 07:59:31 GMT
age: 36254
etag: "52830fa620718a629970f4ca9df109ea1d979f2d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7711a1490729319952a150b84e91a5d6
11fda31d48a4df3fd6346d92f45a680f500bff64
e9663e981c6716c243b58ac99549dfbe6dd8371c42d50add46457b5911f63529
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffb16f641-0924-4c5c-9f83-6779c59c746a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11381
x-amzn-requestid: f30a66f8-72cb-44a6-b87d-55d501050dcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ePKzmH6soAMFZOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b5f1b0-6fc1643036a4012935a38bb3;Sampled=0
x-amzn-remapped-date: Wed, 04 Jan 2023 21:37:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: iJNA1pytmUSUBG4YeU7rcEKCs04k9rPEuQ6o6FP5bWaQ25M7yGrySA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 04 Jan 2023 21:49:59 GMT
age: 72826
etag: "11fda31d48a4df3fd6346d92f45a680f500bff64"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
zelenka.guru/js/jquery/jquery-2.1.4.min.js
200 OK 0 B URL HTTP/2 zelenka.guru/js/jquery/jquery-2.1.4.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /js/jquery/jquery-2.1.4.min.js HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
last-modified: Tue, 03 Jan 2023 19:17:12 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63b47f38-1499c"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/xenforo/xenforo.js?_v=1d49fc451
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/xenforo/xenforo.js?_v=1d49fc451
IP
Analyzer Verdict Alert fortinet Malware
GET /js/lolzteam/xenforo/xenforo.js?_v=1d49fc451 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
last-modified: Thu, 05 Jan 2023 13:19:48 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63b6ce74-73192"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/xenforo/quick_reply_profile.js?_v=1d49fc45
200 OK 0 B URL HTTP/2 zelenka.guru/js/xenforo/quick_reply_profile.js?_v=1d49fc45
IP
Analyzer Verdict Alert fortinet Malware
GET /js/xenforo/quick_reply_profile.js?_v=1d49fc45 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
last-modified: Fri, 11 Nov 2022 11:35:26 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"636e337e-989"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/im/mustache.min.js
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/im/mustache.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /js/lolzteam/im/mustache.min.js HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
last-modified: Mon, 23 May 2022 09:52:26 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"628b595a-26e1"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/FroalaEditor/fix.js?_v=1d49fc45
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/FroalaEditor/fix.js?_v=1d49fc45
IP
GET /js/lolzteam/FroalaEditor/fix.js?_v=1d49fc45 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
last-modified: Sat, 24 Dec 2022 12:40:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63a6f335-4b18"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/mmenu-light.js?_v=1d49fc45
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/mmenu-light.js?_v=1d49fc45
IP
Analyzer Verdict Alert fortinet Malware
GET /js/lolzteam/mmenu-light.js?_v=1d49fc45 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
last-modified: Fri, 11 Nov 2022 11:35:26 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"636e337e-984"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,600;1,400;1,600&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,600;1,400;1,600&display=swap
IP
GET /css2?family=Open+Sans:ital,wght@0,400;0,600;1,400;1,600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 05 Jan 2023 18:03:44 GMT
date: Thu, 05 Jan 2023 18:03:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/FroalaEditor/utility.js?_v=1d49fc45
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/FroalaEditor/utility.js?_v=1d49fc45
IP
Analyzer Verdict Alert fortinet Malware
GET /js/lolzteam/FroalaEditor/utility.js?_v=1d49fc45 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
last-modified: Wed, 21 Dec 2022 20:49:18 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63a3714e-d66"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/profile.js?_v=1d49fc45
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/profile.js?_v=1d49fc45
IP
GET /js/lolzteam/profile.js?_v=1d49fc45 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/members/98981/
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=028b757a010ce38bcdc2bfe458a908c3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 05 Jan 2023 18:03:43 GMT
content-type: application/javascript
last-modified: Sat, 24 Dec 2022 12:40:21 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63a6f335-35f5"
expires: Sun, 08 Jan 2023 18:03:43 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/85597711?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A704%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1328516358902%3Ahid%3A646120446%3Az%3A0%3Ai%3A20230105180334%3Aet%3A1672941815%3Ac%3A1%3Arn%3A217792772%3Arqn%3A1%3Au%3A1672941815640590124%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C100%2C0%2C%2C0%2C%2C412%2C65%2C%2C%2C%2C643%3Aco%3A0%3Ans%3A1672941813373%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672941815%3At%3AEcho_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/85597711?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A704%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1328516358902%3Ahid%3A646120446%3Az%3A0%3Ai%3A20230105180334%3Aet%3A1672941815%3Ac%3A1%3Arn%3A217792772%3Arqn%3A1%3Au%3A1672941815640590124%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C100%2C0%2C%2C0%2C%2C412%2C65%2C%2C%2C%2C643%3Aco%3A0%3Ans%3A1672941813373%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672941815%3At%3AEcho_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/85597711?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A704%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1328516358902%3Ahid%3A646120446%3Az%3A0%3Ai%3A20230105180334%3Aet%3A1672941815%3Ac%3A1%3Arn%3A217792772%3Arqn%3A1%3Au%3A1672941815640590124%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C100%2C0%2C%2C0%2C%2C412%2C65%2C%2C%2C%2C643%3Aco%3A0%3Ans%3A1672941813373%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672941815%3At%3AEcho_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zelenka.guru
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/85597711/1?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Fmembers%2F98981%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Awy278c4xrecmji309n1ev%3Afp%3A704%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1328516358902%3Ahid%3A646120446%3Az%3A0%3Ai%3A20230105180334%3Aet%3A1672941815%3Ac%3A1%3Arn%3A217792772%3Arqn%3A1%3Au%3A1672941815640590124%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C100%2C0%2C%2C0%2C%2C412%2C65%2C%2C%2C%2C643%3Aco%3A0%3Ans%3A1672941813373%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1672941815%3At%3AEcho_inactive_inactive%20-%20%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20%28Lolzteam%29&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Thu, 05 Jan 2023 18:03:44 GMT
access-control-allow-origin: https://zelenka.guru
set-cookie: yabs-sid=2201291331672941824; Path=/; SameSite=None; Secure
i=f5hQSYtfaxdO4rkq31y8HtJ4NJTZVb8p5wjQN2Zb2WzIVURZcqQdC8Bqt9EuL+QK78OKAEWgqecotLp/sqX3ORybj4o=; Expires=Sun, 02-Jan-2033 18:03:39 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=500994611672941824; Expires=Fri, 05-Jan-2024 18:03:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=500994611672941824; Expires=Fri, 05-Jan-2024 18:03:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1704477824.yc.1672941824#1704477824.yrts.1672941824#1704477824.yrtsi.1672941824; Expires=Fri, 05-Jan-2024 18:03:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 05-Jan-2023 18:03:44 GMT
last-modified: Thu, 05-Jan-2023 18:03:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
151.80.169.28
34.160.144.191
104.18.32.68
93.184.220.29
88.212.201.204
23.36.77.32