{"report_id":"dcabec2f-5e71-43ab-bd0a-40e75d3d7ab3","version":0,"status":"done","tags":[],"date":"2026-09-27T19:34:35Z","url":{"schema":"http","addr":"zunoza.vip/","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"104.21.49.55","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zunoza.vip/auth/second","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"title":"Zunoza: Create an Account","dom":{"size":21789,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12498)","md5":"efac8d1e75ef4f6e17cd644a068deed6","sha1":"a0ed7b2774151cf1c258d5c8314d019d8302381b","sha256":"c47db372c6b5ed321b14cc9374f0c492006fb8fbe83277b4762606b83ace7290","sha512":"e87afca411d6f202eb770a88e0861985632f002ce988e60251b287c2bb3b87762db9cc1dfba0df6e1f9d3e29b84d63f8f2788fc4937ba37b17cf756e53a3bfe3","ssdeep":"384:ZcTn9wn0cTn4hPSWBvdKhj0Shj0ezVxj0SNXSjRS8J7shcP52k2121Td:Qn9SnpEvohj0yj0eHj0StSjbJ7sWUVgb","tlshash":"dea229783113832f623766e5b6e1ab1c219ae30bd817cc1db3cc51d85fc9dd89c92a99","dom_hash":"domhashe2dd0e2aac1d28c49726f59b0e34fa59","first_seen":"2026-09-27T19:23:13.410157Z","last_seen":"2026-09-27T19:34:53.413128Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zunoza.vip/","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"104.21.49.55","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-01T19:34:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zunoza.vip","ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-23","domain_rank":0,"first_seen":"2026-09-27T19:23:10.152409Z","last_seen":"2026-09-27T19:23:10.152409Z","alert_count":70,"request_count":35,"received_data":1918736,"sent_data":19296,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zunoza.vip/assets/route-DTUsIfhG.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"063120e217ac89f47563c1393f836276","sha1":"97c8b09ed76cef5248d27fbcda1f742bdde8e4ed","sha256":"0105b001dfabb7ec63e78a29a8b9d98388c9e14e8ac2605894ffa70973cc0c6a","sha512":"7ebcd1f8986828f41d0179ba129c83f8fa0867adaa188933cf0c326642798fe7155ca0fe376f0ef773a470b3eed92ebdef0d0dba1bc6553aa57b36cc8e7060ad","ssdeep":"384:0r3MxVSp9LUCiG2DGdwD6F5FLZaYqNS6vafmdbdTQ8bj9hHmog:G3MxYp9mEF5FLZSNS6vafATQ8bj9hHmn","tlshash":"a4820ae47181f2366f9204a2e839c154f1352d183017c85cf1a86cab7a6398e7977ffa","size":18329,"data":"","first_seen":"2026-09-27T19:23:13.412324Z","last_seen":"2026-09-27T19:34:53.430749Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/fpix.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"43985de08c88d52fc0481e8022cbf130","sha1":"a6482492a7bc43ca9280e4fd032b17867333d17a","sha256":"b5485a734ca4ad4b548c66826c64f0e4056262dd5dfb2c4208d16d7e2008be7c","sha512":"d268bcfb6c6780a3cc9d035cb1bfa41ea6724ad74ffe7be67929645dcf4aa962c95dd9a42c6aa602c913d795a254a345b7e07bdbca2b7e148b8dd287e4768d81","ssdeep":"","tlshash":"70f09e191c46b0bd16ed607aa33bbd192217274474d1c4235acc81286ee0d255fb5ecd","size":481,"data":"","first_seen":"2026-01-31T21:08:57.336506Z","last_seen":"2026-09-27T19:34:53.417594Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/main-H54J0iHV.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1e9456244a3ce0d2d8c6b4c55ea3f362","sha1":"e3bdbcfe85df88ba87d3c349c551562abc672571","sha256":"7cca8b7ab45ef5a2cfa1af5a25b937c6272ab6f0435fe9e5ee873363f39fb478","sha512":"b015a180ce25ff0ac56e45599670b294ab784634bb25c2a7a6d9e939b079f21409cc556af3e3f9c44661ac0fa6b40e75952a0014ba6804e0b59ed11ec318d82d","ssdeep":"12288:G58LdvwSFu/Q3a1d9eRbt7N7nOYXJN1YY6Z+Zxf4BllmlceoahdIt9pnWP5:G5aNwSFu/Q36zeRbt7N7nOYXJN1YYYbO","tlshash":"f0b45ce83196b5364be741f5507f1107b2382962700d8850f26dddae3bb844aa1bbfbd","size":528626,"data":"","first_seen":"2026-09-27T19:23:13.436557Z","last_seen":"2026-09-27T19:34:53.418642Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/useLandingPromo-A_jeyFza.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05b6e3f8d99f8655897afa6f69df1ca6","sha1":"ceba97357b776be3757f61af7656b959183d5baa","sha256":"42e2c36107248e94f1629eb33ab4a386ad907bcbae5282a7f36c4424015e9166","sha512":"e7434306d8e1571e8263b161ce5c9ad1c0ed389fce134c2bf6612317b54d46bac898256105ad2c7a2eb7940419c7a04ae3c7c9f51b42139df949a81be6552005","ssdeep":"96:B+eMdwwXAcWyhkj85Go5D+7kD3As1HjzHEiMkefHiXD8oI0Rx4XuhCJXxalKP:seMdzXAclhkjuGID+YD3As1vjXIT0Y2w","tlshash":"cca1199cf036bd3491e74ab814326100b33f6e5574998cc1a53c8d076f98bd86a33e6b","size":4863,"data":"","first_seen":"2026-09-27T19:23:13.416191Z","last_seen":"2026-09-27T19:34:53.420141Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/en-D3UE7oG3.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"fd9eb3f710fa9b95c1b9d6753be00ee2","sha1":"41e447a19a3f42638070b27e6aa94a08a2103556","sha256":"e7afae39b3d0cde3112ae7b09f8a442c8934e0f79995e716eaa0ab980c12be2b","sha512":"17d8178459b153811cba0bc9c314affb87ea7fd375cb3061f46e070f63c8f758a7dc3dfa8179f6252777e7aff0fb33d3fe9109a692339d81929a77637edbd0ec","ssdeep":"768:nWVC9gpRXrY6JmaG7eaB3rNNQjIf+kzxvrFjE0togNAbBVMv3a+pdZqdX2EU:OC92RXrhJmaRalUjE+kFvhASoiAbAvzB","tlshash":"d2232b0fca0515a408d333513dcb2b69bafc014692e2c4695dde812d23f6d69e63fbe8","size":49116,"data":"","first_seen":"2026-09-27T08:31:09.208225Z","last_seen":"2026-09-27T19:34:53.433014Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/wager-DQ-MpnhL.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7e55a71b0f36d1fc2965fd335b0263d","sha1":"1babf4a3c646c3b4c16426d4b01b31d9ee038728","sha256":"214f1db27e745ae80ba6b602ea125eacb9b140573236b07683eff351cce9639a","sha512":"0631ac3f375b4ee08cd253301318d9a629659a35a8ded0307913654c11aaa95ede27371a61ca0a92295c3be0c35a46a9aa48674954877684c3f2181e92fc809b","ssdeep":"","tlshash":"1651965775547239f3cf04db007f4908bbaa332a641d49b04066cc9eb4e469916abbb6","size":2996,"data":"","first_seen":"2026-09-27T19:23:13.442299Z","last_seen":"2026-09-27T19:34:53.434083Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/frontFetch-D3Prh4Jz.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34697ee3a2291afb36c7157302dde009","sha1":"bcacbd44b87ccc6f67d12ac456938b82357e5aae","sha256":"c2f2d479229be719370d8969d2ac59b2b9828b6574aa58bd16694e7da257a203","sha512":"374616c88b7c369f89191415163f603bfc7362452087904c4ae31852137c1b829b33db29396a77443ba4364738d9d2266f312f9eddce36bbbf4ed0f572ce84fe","ssdeep":"384:coTDa3qhho/rU3+/gI9TRn2Oen9j1IvcGE69LnJf8rEAwWp2YWMWE9bSu+lz9rwt:RHa3qhhCU/Etn2fnXIvcGHdvWpyMW+bf","tlshash":"a6a2b89a7242a22739e1c5d45c3e4125e2246814340b805cb9bdade7f963dcff4bbe35","size":22554,"data":"","first_seen":"2026-09-27T19:23:13.441195Z","last_seen":"2026-09-27T19:34:53.429185Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/index-CiAkY7UG.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34beec96856d3942173d108d66c24a57","sha1":"8455150ad2bcaa804d872f75ed1e4e0f607a1ba9","sha256":"99ddd0e38c1d589b529855c0f9ed2e09fab1fc89a31676c71d001ded78e2b3af","sha512":"1db0e965756ff3f86030c00a5b802b08aa1a7326aafbcb5ccc6a07b33717812e85c63297633f4ffc52c97ffc09b14a7be753816f09b28e4d93fdae516961fdb5","ssdeep":"384:eAHdv76O+Ty3hkV8ATWZvbd/bIjtsfI00GIU06cn2kU/miSXysPaoLDeyx9bb0m0:lcop/Tb7cn2H/7SZyo7pN0wdS","tlshash":"0f82641ed354a3bced8687b0832264b1755e159f20f6d3789294856073d30ecd6be8ee","size":19257,"data":"","first_seen":"2026-09-27T19:23:13.430854Z","last_seen":"2026-09-27T19:34:53.429822Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/about-us-BA8A9Llb.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d9e5f508c64ddf17ce4138dd76a0070","sha1":"dc252080c9eb6d0fc7331bbcdfbd38f509e6419a","sha256":"6c0df88c97ababc93e1c6c4af3907e1019b0c2bad115bc87f133f3d9030a5d0a","sha512":"0057011981cb9b01f52001ea8f546a23181530204e408a18ea812447c93cf1e27ff497cf46a3adbddaaee5ad98a2f14bc624cfa17cf6188b9da972bb37e7a100","ssdeep":"768:+CU2TVFDcSyUy1KVGjc8GsQHviMayuVJUbIddvvSC5hlhr:+wTjDUU2NjFuadpjlhr","tlshash":"7ed20994c564f47c6b37285ff02cc130f01d2d12aeaecdeae665ac6b24a9335a349357","size":30534,"data":"","first_seen":"2026-09-27T19:23:13.44336Z","last_seen":"2026-09-27T19:34:53.425242Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/op1.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","size":5906,"data":"","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-09-27T19:34:53.421017Z","times_seen":291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/index-CzE0sBq2.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"42552581d89e22c7a863359a481d0f85","sha1":"67911aaf7b91927942c009e74429ff41397a629a","sha256":"0d8ef1d49d8eee56e92b0c39582ebfbda7dc9fbeeae082362cd6752a1901e865","sha512":"7fea367072046c48efbd8a24637810663a6fa8522f54c8d7df7a6524d602efbd52e5bda06c66d16956492fadfd2bef56c0313454ef77a9b9ac70a81046227096","ssdeep":"384:dhOSzM46AqXXdqrdd0jbz9IcQrjxNkoHoRb/OnOZbXpAWGKmpM:+SojAqHYrd6jJQ0oHoV/OnKjNgM","tlshash":"2a720bd7b20162155fdb8182d4bd0704a1386525680a8c1cf6f94aefbe519c8bbffb74","size":17436,"data":"","first_seen":"2026-09-27T19:23:13.42971Z","last_seen":"2026-09-27T19:34:53.419243Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/second-Ds63bQvX.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3066ce31ef2909af1a2f0a18d88ed1b","sha1":"c4fd0f260d30611747aec251a9709e189fc69204","sha256":"993ee92ad1048b2fbadd7e9764e4a0cdc80c7cd9c00b39b1a0a957ade1936634","sha512":"658f5aefe3ca43ec10d4c00b8045c525c5b9a65664cb0ead510f1da9635d2170792ffddc9703ac9ae62b04e5194e2556283ea7515c30f665d6981254033f81d5","ssdeep":"384:SQcIAj0/VwmR00MshnHH8+MewRFLnPBmoRInNpqX0vZcKvsoiVRcFK9yNUEJxrsZ:J5Aj0/VwmR00MsJnfMewRFLBmYInOX0G","tlshash":"65a29770a15077fde91334b5ac7dd65830098e44c62b4e5cf1b87c276ab589a3e82bc7","size":21375,"data":"","first_seen":"2026-09-27T19:23:13.444398Z","last_seen":"2026-09-27T19:34:53.431624Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/data-BWfYQSsu.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bed9bcd2eac84d6ce26b0d6aa98f506b","sha1":"b8ba96de277065bf81a9c335283d49e13194dc93","sha256":"8982c44366479e7f0adaa31e9b67173eb753276186498bcf91ef3b9b6d01ee55","sha512":"320439a55e5f98239d30676ccad3af65be01689bfd0a3e2cbeda468bf0119ca23941457f478459dc382ea9e9a0cb29606d051f95b8b0a87e36b8a05042f33ad0","ssdeep":"","tlshash":"ea112301cdb224fce67255a411af0e3021c95de9368d8440f1699ed877502a291d9f99","size":919,"data":"","first_seen":"2026-09-27T19:23:13.439954Z","last_seen":"2026-09-27T19:34:53.432453Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/index-Dp7_fJlF.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3724618fb17d7c0cf22f1a139f595d0c","sha1":"359d431a2c64f29912e30588c131f1953b66e9bb","sha256":"9f06577e02c1d21c8393fca34714f3f5f2531dc5bafe6886ccad6f4928782f06","sha512":"0c7455f6b03c7ae8e0fffd25b0ee5970e43adf501171bf2a89a2a61a2d0cb3f1552ddb59fd3b639e8705ffa93739d741783d977d6ba591248778be25f503927b","ssdeep":"384:WCK02FgfRj8wTm+uWZobEDSxsn+vJ5tBV3rbf0n0j7wICYb:WCnfRj8wIWaEDSxsn+vJ5tBV3UnWkYb","tlshash":"a8827856e668636c7881867447339022a35fb0bf71df50e4ca1d87b0b64781cea638df","size":18160,"data":"","first_seen":"2026-09-27T19:23:13.417105Z","last_seen":"2026-09-27T19:34:53.424642Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/betsSectionSkeleton-Q_B2xtGL.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"d7756a693629d429c7fe254e6f5fc45b","sha1":"ee4c9bb81deda979c1c576bd7f9d08a096c0a8d8","sha256":"c1c3b06128daa0ed92f0460491ccdfb26cb8c8aa6141ced0a13e26b78aa0df32","sha512":"f825970ba543326f505b4ea9b8e882a09e199cad26513c5ba47c0e911362c097a1378c6d6e9e7537adecf3ededbb9d769c139663e9d5639003aa1939dfba3db4","ssdeep":"768:6om6s5jdiVxGssesgvxwsXxb2Nv5kgzhk6sK4Ujjo:9s5jdUxpzx/BDpUjjo","tlshash":"52c2a5f3630873fcf9c287700627b157913e29aa70cf6194c72e5958ac8548aea375db","size":26683,"data":"","first_seen":"2026-09-27T19:23:13.431895Z","last_seen":"2026-09-27T19:34:53.434649Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"warn","text":"Sentry DSN is not configured","filename":"https://zunoza.vip/assets/main-H54J0iHV.js","line_number":163,"column_number":20515}]},"http":[{"url":{"schema":"https","addr":"zunoza.vip/landings/second/register.avif","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.455Z","timestamp":1790537645455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /landings/second/register.avif HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"1718-LOEm9Pchoyt7/BPhyyhTIxrf1Uw\"\r\nlast-modified: Thu, 24 Sep 2026 21:28:05 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 4264\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIWSI%2BUMOnOAwDcM4nys6RvVNxFQC%2BBuSpcBwiG1IwKpzo1K7VVYT0HS8O50pmnoVlFV%2B1YIbv4AhTAWqbWOsmHcZbuZAriEWGVqtIIlqGwZKRLXF37fHc%2FTi4%2Fk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf19c191ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5912,"size_decoded":6815,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3dfb1e4faaddb0b3606aab9930cd8cd8","sha1":"2ce126f4f721a32b7bfc13e1cb2853231adfd54c","sha256":"50ab15ebf9171c6cab8f2439268ab055c1985f9d3f20e80ba31ff40ae5164e3a","sha512":"ead789be3e7b4999006ad7fe87e5959c3fab523918e9ac70d1889930840b067ca37820a816c8736e85a9cb51defdf18259edf45f723d86a5b393bc9b030b8e2b","ssdeep":"96:rGPsUBwHwYBcqpewMbqi/i1vcfXCWwz7cjTBqd/FjIbe9n03Q4kiy/ufMLA7:rGEUSXVpewu/0vefw/1d/FjIbe9Opy/W","tlshash":"ebc18e1a36af8046e4ba9eb3f2b06f263940db7cc2b4e95146a03271791c5e2885cdc5","first_seen":"2026-09-27T08:31:09.219303Z","last_seen":"2026-09-27T19:34:53.41442Z","times_seen":4,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/api/f/fpix","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.038Z","timestamp":1790537645038,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /api/f/fpix HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: application/json\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VoyVOF69UngZ0KZZxxss2QGixF31UaeNfFJCxWvlMB8B%2BLbyzblYWv0T8iXyxCpUGa6NtQkcMGh%2FO7jD56QlrEw86789OczRDe9Tt3u84xDGYc%2F2MEMv908xcAC0\"}]}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf199786fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":816,"mime_type":"application/json","magic":"JSON text data","md5":"98078306f4768a12d655203a847fc041","sha1":"9dd996d50c0e1a2a5b8c7a9a9743727c41aeda6e","sha256":"698266873be2bb527a0cfaa3a6b373c0fb0af60002c9e0538f7e9302a8b6ab4e","sha512":"68145f54424b4076e6bfb457c8f611063d75a6078b6ea8d6006870f67a002d04046a992669fd2aff7696e3653879813fa4c56106b32ef710bf782e18ffdbbbea","ssdeep":"","tlshash":"c7600020880020230080a0828c000002820800a200a0080008002e0008a00a00020800","first_seen":"2026-05-07T18:11:38.500329Z","last_seen":"2026-09-27T19:34:53.415355Z","times_seen":25,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/landings/second/hero.avif","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.405Z","timestamp":1790537645405,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /landings/second/hero.avif HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T12:46:47.66208Z","times_seen":18707282,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/fonts/Inter/Inter-Medium.woff2","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.423Z","timestamp":1790537645423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /fonts/Inter/Inter-Medium.woff2 HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zunoza.vip/assets/styles-Bgpzfixg.css\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fG1Lhb5rBEU2g6JaPX13CWdXu7QAihV%2BkW%2BvnDswoGJeq6U4%2BzAix6JHcBihh4DxHhTUaimO6gQGFzV0ztyvOYuxW2AgmnuuaPsWXZMjqVEMVbGjuopPzu7QmPgB\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"22680-rncwJS1knQw8bQAFbasmaGeizH8\"\r\nlast-modified: Fri, 25 Sep 2026 16:11:23 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a41cf19be90ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140928,"size_decoded":141806,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 140928, version 1.0","md5":"bbae0bdab1fad3e93e31a81826cb4bc8","sha1":"ae7730252d649d0c3c6d00056dab266867a2cc7f","sha256":"4e365416d075b96baa8fad6ba5c66448d60cfa79393cd4abe3c1ee0e02e35777","sha512":"e906abefb7f213ec6b55a802c43b94b6ba0306a21d7aaa8faeb108490b3b8d08af2b79cd1e78b381d38b82a7d662c6e1226c0ba4e5a2787986018ae6032228d2","ssdeep":"3072:mQCDkarMN2bVXPZ0iSkxjUyXW8xZnKZTJHJBB0prkxxBivlC4:UrA2JXPikxjRFxZnKpJHNaruyC4","tlshash":"05d312c532f917aef13881addda33db8713c6a36ad3629eda5030c17d104c92e9496e2","first_seen":"2026-09-27T08:31:09.23555Z","last_seen":"2026-09-27T19:34:53.416517Z","times_seen":4,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/flags/US.webp","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.458Z","timestamp":1790537645458,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /flags/US.webp HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"6c0-HNyZyZ9nlimVryL8nIEflLctU6w\"\r\nlast-modified: Thu, 16 Jul 2026 16:07:13 GMT\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nage: 4267\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SDoN%2FsNShC4jnUAvLBf3fsPzzbi1AcgtogbUuuc7QjsnulxcKx8rty%2FvP4NVIt2oEJ1uhQCT8PL8Qa%2FtlFPpM7AxJP0w17b2rKFW%2FzJTqoiW5oPtGoh7b0qTr%2Bap\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf19c191dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1728\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1728,"size_decoded":2462,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d5b2ad4da5657d21695de35554777081","sha1":"1cdc99c99f67962995af22fc9c811f94b72d53ac","sha256":"e3a1cbe55c01edaea1f1715a1593ff2a0685067bc0c5d77aeca7f27fe3a630b4","sha512":"c69e0989ba173bf00495affc2ee10a77cd8a5dd8a05426985c0db982ce8cdc22f376449fd57f97966526fbd4ca0332be02decdf91a0f8e4436cace537a20e39d","ssdeep":"","tlshash":"653128758f3056cae7dc0d60343094e0a3efeddc8b280e293088fe0364f1626785aa60","first_seen":"2026-01-11T01:55:53.490895Z","last_seen":"2026-09-27T19:34:53.417069Z","times_seen":122,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/fpix.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.743Z","timestamp":1790537644743,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /fpix.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AYbuxFdPaHh%2BWjttkRuh5tiRX5npDPtWCe7LqZ5J8stmW04QM5F6zdS%2B411PvMknjJGQwXUsePjDvQQ3wMCYMbVgsp6R0MBeES%2FRdSbqjE%2FQ%2FjE3KXqQRDxDOts%2B\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Thu, 16 Jul 2026 16:07:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"1e1-pkgkkqe8Q8qSgOT9AysXhnMz0Xo\"\r\nage: 4438\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a41cf197a802c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":481,"size_decoded":1065,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"43985de08c88d52fc0481e8022cbf130","sha1":"a6482492a7bc43ca9280e4fd032b17867333d17a","sha256":"b5485a734ca4ad4b548c66826c64f0e4056262dd5dfb2c4208d16d7e2008be7c","sha512":"d268bcfb6c6780a3cc9d035cb1bfa41ea6724ad74ffe7be67929645dcf4aa962c95dd9a42c6aa602c913d795a254a345b7e07bdbca2b7e148b8dd287e4768d81","ssdeep":"","tlshash":"70f09e191c46b0bd16ed607aa33bbd192217274474d1c4235acc81286ee0d255fb5ecd","first_seen":"2026-01-31T21:08:57.336506Z","last_seen":"2026-09-27T19:34:53.417594Z","times_seen":101,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/api/rum","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.039Z","timestamp":1790537645039,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"POST /api/rum HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nContent-Type: application/json\r\nContent-Length: 66\r\nOrigin: https://zunoza.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":66,"data":"{\"metric\":\"FCP\",\"value\":716,\"id\":\"v5-1790537644912-3094590109944\"}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xd8vID1iwtQjw3WRQIJTNmfTBcizOJdZ5JEgpe084amJSsEujpoSTtdqgGhiqw1Xe%2BhhEfABIRZsZ%2F5E9vU9Tls9yt0DJ8mKPObYI8gYLQom96SQF3u7IWCmmW3h\"}]}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1998870c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1339,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T12:46:47.66208Z","times_seen":18707282,"resource_available":true,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":404,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/landings/second/hero.avif","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.411Z","timestamp":1790537645411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /landings/second/hero.avif HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\npriority: u=3,i\r\netag: \"1f31d-lp+rNMxewLdTlzSKlvXaJhjTAjg\"\r\nlast-modified: Thu, 24 Sep 2026 21:28:05 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 4264\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DAa21PtLUY%2FctjCoolFZTNP%2BdNEH5fl7O1puHX17yOPk%2FCBuacAQXRWgt3nGORfNyFvujP1dUH87jsiRBRc6g%2BLxiM0sfKn%2FhJMYmLc%2FhnK2vVKJ9IAiwu%2FOefWp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf19bd904c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127773\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127773,"size_decoded":128683,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"5833dede4aa769204a067b0f54bd20c5","sha1":"969fab34cc5ec0b75397348a96f5da2618d30238","sha256":"a348354e25d1e8b9a3e568ad607429030986fbe41c67477607aabdff43e29a5d","sha512":"74dca2e4c0d6f5bc385e6c56f0c4b962f74f9ead996f2bdfe9c10bf2d536dd74425278b4183cd89d5c3bfda18e8248bea0709fae346749df0d6ca861be4a63c3","ssdeep":"3072:cUfUcfjoiM0CeFd6oOcDssSGY7TH5SnXNRO+bYhN9xcRf:cHY5+SnXTOH/Pch","tlshash":"17c3121c812c4cdc361aa1efec955131311cd250c60acbaf9bc7b7ae799bd298498fd1","first_seen":"2026-09-27T08:31:09.234478Z","last_seen":"2026-09-27T19:34:53.418149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/main-H54J0iHV.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.722Z","timestamp":1790537644722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/main-H54J0iHV.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"230b4-HTKLmgTChclJRpL6dYjQxTdyP5U\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:10 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8IuyPcbUTrfyMc7PKfeVyp09UrBgQ62rytb8WpPb61MPGzbb10P21wE9%2FoSk%2F1vXDmLUklTpZEgW%2BQPDXcc11dDmmubnyTRZvRTzUAljBZNzJd4ZU4bWPfAr49oQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1978fedc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 143540\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528626,"size_decoded":144360,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40460)","md5":"1e9456244a3ce0d2d8c6b4c55ea3f362","sha1":"e3bdbcfe85df88ba87d3c349c551562abc672571","sha256":"7cca8b7ab45ef5a2cfa1af5a25b937c6272ab6f0435fe9e5ee873363f39fb478","sha512":"b015a180ce25ff0ac56e45599670b294ab784634bb25c2a7a6d9e939b079f21409cc556af3e3f9c44661ac0fa6b40e75952a0014ba6804e0b59ed11ec318d82d","ssdeep":"12288:G58LdvwSFu/Q3a1d9eRbt7N7nOYXJN1YY6Z+Zxf4BllmlceoahdIt9pnWP5:G5aNwSFu/Q36zeRbt7N7nOYXJN1YYYbO","tlshash":"f0b45ce83196b5364be741f5507f1107b2382962700d8850f26dddae3bb844aa1bbfbd","first_seen":"2026-09-27T19:23:13.436557Z","last_seen":"2026-09-27T19:34:53.418642Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/index-CzE0sBq2.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.730Z","timestamp":1790537644730,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/index-CzE0sBq2.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"169c-iSa5LpnymUhgwnxvchIeSPZP300\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1H%2FC55KGIpBF9DRoutFw7ONv5SUxsmKIDJFkoBGXGw0O64%2Fhm7daOazybvOxwp9TYGm6dLJ5qbyYhhKmdJWJByu%2Bx%2F9Y2DgtSF5HihydkDjUgf47sOazS78xYsf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1979ff1c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17436,"size_decoded":6609,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11613)","md5":"42552581d89e22c7a863359a481d0f85","sha1":"67911aaf7b91927942c009e74429ff41397a629a","sha256":"0d8ef1d49d8eee56e92b0c39582ebfbda7dc9fbeeae082362cd6752a1901e865","sha512":"7fea367072046c48efbd8a24637810663a6fa8522f54c8d7df7a6524d602efbd52e5bda06c66d16956492fadfd2bef56c0313454ef77a9b9ac70a81046227096","ssdeep":"384:dhOSzM46AqXXdqrdd0jbz9IcQrjxNkoHoRb/OnOZbXpAWGKmpM:+SojAqHYrd6jJQ0oHoV/OnKjNgM","tlshash":"2a720bd7b20162155fdb8182d4bd0704a1386525680a8c1cf6f94aefbe519c8bbffb74","first_seen":"2026-09-27T19:23:13.42971Z","last_seen":"2026-09-27T19:34:53.419243Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/useLandingPromo-A_jeyFza.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.732Z","timestamp":1790537644732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/useLandingPromo-A_jeyFza.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"772-Lj2aGhMEZ2f/93yC5bQJo4bdq74\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2Bi90DP0jSwVs63lS4SE5l4PqROKT83HbiNKuRhxNYVzVroNEIMSAp0L1fr8M49HHPgKcjmrLjMDZTIsW59AeucnIuMX7N%2BgQk9zXS677coGRw62c6dfU7qYCDLP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1979ff5c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1906\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4863,"size_decoded":2720,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4862)","md5":"05b6e3f8d99f8655897afa6f69df1ca6","sha1":"ceba97357b776be3757f61af7656b959183d5baa","sha256":"42e2c36107248e94f1629eb33ab4a386ad907bcbae5282a7f36c4424015e9166","sha512":"e7434306d8e1571e8263b161ce5c9ad1c0ed389fce134c2bf6612317b54d46bac898256105ad2c7a2eb7940419c7a04ae3c7c9f51b42139df949a81be6552005","ssdeep":"96:B+eMdwwXAcWyhkj85Go5D+7kD3As1HjzHEiMkefHiXD8oI0Rx4XuhCJXxalKP:seMdzXAclhkjuGID+YD3As1vjXIT0Y2w","tlshash":"cca1199cf036bd3491e74ab814326100b33f6e5574998cc1a53c8d076f98bd86a33e6b","first_seen":"2026-09-27T19:23:13.416191Z","last_seen":"2026-09-27T19:34:53.420141Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/op1.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.742Z","timestamp":1790537644742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /op1.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncontent-encoding: br\r\netag: \"7ef-4X5NhZNKJU2qAzl29j6Dsyi4/K4\"\r\nlast-modified: Thu, 16 Jul 2026 16:07:41 GMT\r\nvary: Accept-Encoding\r\naccept-ranges: bytes\r\nage: 4438\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XCri69eUnu9rgN%2FNK9Bo5aWIQ9rcQA8M2qmxUDczwomZfDTgZFKHzQDLL6fP%2BX7%2Fk7J423JCJnob1Tk7OCN5eV5WgADWJFMgge49gEYJYd4E6ZDlQB7T5HVAM8Xw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf197a801c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2031\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5906,"size_decoded":2806,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5905)","md5":"8bcfe273763be53ba87613b21d4bd80b","sha1":"0784b9ce9f450c2bb33a9b08a5f2de2633e0a481","sha256":"d79474635d2a5fddfea4f74fbcd168be27fa6a40545ef2d801cf146121cd41c1","sha512":"f5de8b0a6c09c0502c0d247d566d69ee8deb3e67b463d7a31de7a5e0adcebd353ea513f084a6eb4504f602999bba6806015b75930f464a7aa6b7d7ba0290961e","ssdeep":"96:aTF5H5HQTNy2o4j471V0HjDkAMEmLmwwrHGNsuNS3DWmoLxu:e5Z52DjM1VYjwAMlkrmNseS3gu","tlshash":"7bc196e332ea25f246ee74a9d6213252a73817b4340e501cb76caddb1484d06b3e5fb4","first_seen":"2025-12-19T01:02:07.6499Z","last_seen":"2026-09-27T19:34:53.421017Z","times_seen":291,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/styles-Bgpzfixg.css","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.035Z","timestamp":1790537645035,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/styles-Bgpzfixg.css HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: text/css; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"8c9e-Mbfp98T/8npSsOYT5f8F2/P8hLQ\"\r\nlast-modified: Wed, 23 Sep 2026 21:45:14 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 258379\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=frwJMy8SAF3Zcvm%2BTfvXnkpl7ns7dtglgzUmfAeXEB1vWylJIpHDTv4fwlongabw5qoAiaszuF5E0h7JmNWk7jnnjU4XtrGon9eOKus4DsMYY4f%2BeAem4ZaLrpf7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf199786dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 35998\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":384315,"size_decoded":36810,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"ff4f874b354c86c6632175d689684509","sha1":"ba32915db0d67a8f3e91b4826c9079658c92284e","sha256":"40b51c750c73c6f2f896d9ccbf9388fd8114cb6eb7e14aef6eb5a8562c994365","sha512":"452c99ebbf549e0d798fe9d3c9042f02ac0ca794f5dcfbff0632cac853cc5b6c868bfc13ab120f97e139d5c82c21da7e502de32e9a2614a48ad714abe6ce92ec","ssdeep":"6144:HcgDL+pazx68c/O3jchNU4hQlH6wDYgOKE0QCno1yKGI+MAxoK/KCYc97yReuYBf:LgW","tlshash":"cd84a490f119e0bb7d2bb4fda38cf89dd105f081de3a4ba9f951912123d3bf26962614","first_seen":"2026-09-27T08:31:09.230049Z","last_seen":"2026-09-27T19:34:53.42154Z","times_seen":4,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/landings/second/play.avif","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.457Z","timestamp":1790537645457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /landings/second/play.avif HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"1cbb-zDoSYcPuXINQFf+/rs3r3tRbSbc\"\r\nlast-modified: Thu, 24 Sep 2026 21:28:05 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 4921\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iQ%2BicKd0p7h7CnJMvJn97zpiE%2F6sig8EudZxYo%2BGfYo3AWrPYnpJbBv7vndVXD%2Bomggx%2F1sPsqck0STlFNGT7IRDqUzQnvpWgKS6TPNVW6Bh0hSDAmjLqgNNLDrG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf19c191cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7355\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7355,"size_decoded":8258,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"3a28ab9c1cf794e145490811cee0511d","sha1":"cc3a1261c3ee5c835015ffbfaecdebded45b49b7","sha256":"9cf1c1ee3a1fba3e7b0a7e0ba45952bafa889665fbabc29fc69ee692959b3a53","sha512":"b1cce3cedfb0689e5003142bf5c85499f0983704c4f85618e7c9f301c0795a04b8a6c79537987b098ea640c57487a07a379b715c9b28f176a6b2467bbab73deb","ssdeep":"96:rGPa9bct0fWW9NldbKU2ibw6heDPolFYjA6tBoYp0EGOcvVPNflGIywVn2IzOkCy:rGSCAdbGIeklujltPcvVlflGbwV2IJ","tlshash":"1fe1b09c36506fd0de192dbb3aa065314542c29b5ba2714e574ff66bf4d87a09e120c2","first_seen":"2026-09-27T08:31:09.211154Z","last_seen":"2026-09-27T19:34:53.422052Z","times_seen":4,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/auth","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T19:34:04.318Z","timestamp":1790537644318,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /auth HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WHHZ8y7MTWxZyr4oG2Q1bXpgdNiI45mtKnPdPqAzAub%2B%2FbKCoVSmYTAmzn7KdNa7czPhsWoPP08agYOSvtqGF%2FFa%2FPN0M6O63CakgkjfEZV5uFd6R4HXd6ypPzaf\"}]}\r\npriority: u=0,i\r\nlocation: /auth/second\r\nset-cookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; Max-Age=31536000; Path=/; SameSite=Lax\nlanding_choice=1; Max-Age=31536000; Path=/; HttpOnly; SameSite=Lax\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf194ff1dc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"landing_visitor","value":"v-3830bfb7a13842baa4f6c5f21b33068a","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; Max-Age=31536000; Path=/; SameSite=Lax"},{"name":"landing_choice","value":"1","quoted":false,"path":"/","max_age":31536000,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"landing_choice=1; Max-Age=31536000; Path=/; HttpOnly; SameSite=Lax"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T12:46:47.66208Z","times_seen":18707282,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/apple-touch-icon.png","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.032Z","timestamp":1790537645032,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\netag: \"158e-E2xpKcekYMhDj6KT9vepXXpIXO8\"\r\nlast-modified: Wed, 23 Sep 2026 21:44:41 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'\r\naccept-ranges: bytes\r\nage: 6721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FDMD2%2BUphS8c1k2xDwuqnit4Hu95Kv3D9t4D5Zr%2BA9mSKYXb2WJ8yK%2FUNtWymxOPToE8CWbXUCSLZIJuIyYxMrhJvSuHPReLDiPOjc7k6%2BynkIJjBYMrmrW9pDnj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf199786bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5518,"size_decoded":6537,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e412480e2b0a49f248aa87a6d248efc9","sha1":"136c6929c7a460c8438fa293f6f7a95d7a485cef","sha256":"16576dbbf6e56e33a6444cf780ac417641ef24f030e46d3fa2c15839ee331163","sha512":"aedd1821d9af2f2b1f079b212c437bd4a304ce731b0b01867d082190d86a8848ad905023cf73333a6d0ed4678b143b3f2f81191427f02459a27b632ef2759f76","ssdeep":"96:oIluHoXhT1GFWT6xh0Y8NCchKqV5mMPrUSk2xUpfAtjjKsRb9L34umvAfJy6peqi:uoGm6xqVjhoMPQt2xpPKC6Ide8/vo","tlshash":"94b16de1b933e5d88993cd3b838ae73c4e1fb23a174b30b99969555005315c49d7a3b4","first_seen":"2026-09-27T08:31:09.232244Z","last_seen":"2026-09-27T19:34:53.422618Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/fonts/Inter/Inter-ExtraBold.woff2","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.091Z","timestamp":1790537645091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /fonts/Inter/Inter-ExtraBold.woff2 HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zunoza.vip/assets/styles-Bgpzfixg.css\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vc%2BhQkVXQKiu8Up6xNWIbtdEJ%2Fsdpaw0Avtz%2FZkl54Lbb2yXlyLAn5by1cLkY2ImIquN7l3%2B%2FUl%2B8CgQ3SkGXXUaxyVvWUFXbB9f7HipIf6vv8pKewwDq7kw9WfW\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"22b34-Bi1hCY0jeSOjRKRNAtMTK3MtFYg\"\r\nlast-modified: Fri, 25 Sep 2026 16:11:23 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a41cf199d883c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":142132,"size_decoded":143016,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 142132, version 1.0","md5":"f1652f7f91e4eca678baaaeb4d7142b3","sha1":"062d61098d237923a344a44d02d3132b732d1588","sha256":"4925e324620921ec3b3c6df0f7f07bdd3195c8e125e5f993c70d19fffe6f8d79","sha512":"0d0c7991f5ef900f95c86e42d3bfef87a7311735bf4bea8875d1ea37a0226b74f6646924b237ff3885cebe766c7653604e42a31b51630ab01571e75b8c9cd560","ssdeep":"3072:F59uyZ2d+JjAR9Le4IEqm8SV5/PhaADKzBtH3a0QaTDJmFt+iuJTVRpt:D9uyZFAR5eUJr5/PhHD8THK0QmO+iuJP","tlshash":"acd312ec7df82f3dd1d620752417fe2117d82a800b6697ef4d8a66a13e08c791e193d9","first_seen":"2026-09-27T08:31:09.202832Z","last_seen":"2026-09-27T19:34:53.42333Z","times_seen":4,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/fonts/Inter/Inter-SemiBold.woff2","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.421Z","timestamp":1790537645421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /fonts/Inter/Inter-SemiBold.woff2 HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zunoza.vip/assets/styles-Bgpzfixg.css\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQBt7qYGJJmxphC0nhAj26VqI6ocEcv3ONDjnDOrAhYHtCAsEt0ofTPoI1zS2OdxCWwk62yTv8NTvx%2B3fUIl9Neo7dhfMMwudeoPmtHWXFBdMlMza53jtRRd4q2y\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"22938-DVCVhZCVVwxwno0neCz2plFSRXw\"\r\nlast-modified: Fri, 25 Sep 2026 16:11:23 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6721\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a41cf19be909c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141624,"size_decoded":142498,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 141624, version 1.0","md5":"bcc4026fdd04385d94087510cd803b23","sha1":"0d5095859095570c709e8d27782cf6a65152457c","sha256":"be5e388913c44259fd4d76d19abef7ff492ea1377bea3219745cef803a279659","sha512":"7330003896c6c31fb1744d68a3c9c44ed3c1f79f871bc65b5432429423377ef7f36f073fa76470c6bdf8ae4e375ca9e0ff728c8fba7f52ab9a19ed68219f414c","ssdeep":"3072:uylPAais9dQY+Obs4tQ5KJevEbFnUsuM07/XfzyCnCakGVhxSymRPeI+:75iSmYNbT6KJlbFr0aekGVh+mI+","tlshash":"e8d3120bee690eb2e38ccc78dde9e96165712e1ec11a47ccbac3d0566a16f485405cdf","first_seen":"2025-10-09T07:22:38.742519Z","last_seen":"2026-09-27T19:34:53.423946Z","times_seen":7,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T19:34:04.137Z","timestamp":1790537644137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 307 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zCFgwOMCbI9XhnE9Ddlc913ZLouZrK%2BbtCyWz43TgGWgNC6M1OQUBMXL9dWKNAO%2Bj6bEKVmH1HWA5bhgDoRI%2FzYH7kz6WayedwqYmkVbkhXbuxy6TLIOQD%2BAVys1\"}]}\r\npriority: u=0,i\r\ncache-control: private, no-store\r\nlocation: /auth\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1942ecbc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T12:46:47.66208Z","times_seen":18707282,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":24,"connect":16,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/index-Dp7_fJlF.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.735Z","timestamp":1790537644735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/index-Dp7_fJlF.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"1693-6dzrp+xdo5Z518IZFRbqfrklcPU\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vnM7LIvJzV0rmbhX9bEkadwuV78SrzeE5I9GiwAF1qb3lncb7LMxWFHECrJyCxDC0XFB9ohDAeeRptk5PGc8RpULRvjan7L9WaA5YY42Y8ez7yi0cJZcu3m9sKv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1979ffac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5779\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18160,"size_decoded":6590,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (18159)","md5":"3724618fb17d7c0cf22f1a139f595d0c","sha1":"359d431a2c64f29912e30588c131f1953b66e9bb","sha256":"9f06577e02c1d21c8393fca34714f3f5f2531dc5bafe6886ccad6f4928782f06","sha512":"0c7455f6b03c7ae8e0fffd25b0ee5970e43adf501171bf2a89a2a61a2d0cb3f1552ddb59fd3b639e8705ffa93739d741783d977d6ba591248778be25f503927b","ssdeep":"384:WCK02FgfRj8wTm+uWZobEDSxsn+vJ5tBV3rbf0n0j7wICYb:WCnfRj8wIWaEDSxsn+vJ5tBV3UnWkYb","tlshash":"a8827856e668636c7881867447339022a35fb0bf71df50e4ca1d87b0b64781cea638df","first_seen":"2026-09-27T19:23:13.417105Z","last_seen":"2026-09-27T19:34:53.424642Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/about-us-BA8A9Llb.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.738Z","timestamp":1790537644738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/about-us-BA8A9Llb.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"29ef-Ti7QC+iHY06nJzsu2l0s3j3rOEM\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkTZUmbB1RD1Gx%2FVZmo5WxCfpp1zK53d3bFFZDvLXG%2B3y4TiZZjFSHBDxsa4OTNIe%2FNpGN5IRgvacwE7z9MK%2FEugaRbB0uWF7Z%2B5qgA%2FnnsfI2exQXlSYpVqJZ7p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1979ffec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10735\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30534,"size_decoded":11559,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (22575)","md5":"8d9e5f508c64ddf17ce4138dd76a0070","sha1":"dc252080c9eb6d0fc7331bbcdfbd38f509e6419a","sha256":"6c0df88c97ababc93e1c6c4af3907e1019b0c2bad115bc87f133f3d9030a5d0a","sha512":"0057011981cb9b01f52001ea8f546a23181530204e408a18ea812447c93cf1e27ff497cf46a3adbddaaee5ad98a2f14bc624cfa17cf6188b9da972bb37e7a100","ssdeep":"768:+CU2TVFDcSyUy1KVGjc8GsQHviMayuVJUbIddvvSC5hlhr:+wTjDUU2NjFuadpjlhr","tlshash":"7ed20994c564f47c6b37285ff02cc130f01d2d12aeaecdeae665ac6b24a9335a349357","first_seen":"2026-09-27T19:23:13.44336Z","last_seen":"2026-09-27T19:34:53.425242Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/styles-KbY3cvvC.css","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.740Z","timestamp":1790537644740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/styles-KbY3cvvC.css HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D0eZ3Xj61mhmafGxDJc11nJKQjZcMVVZFROvd2lEYgs3DLdInPXMfGlHzYgjAmBCLGvgumUAIK3AITyScXP3AOYRXL9TcwU7DUHF3G9BgicZ3IB5PZmdJAooWyGP\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a41cf197a800c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11703,"size_decoded":4920,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6859)","md5":"b6508d67ebb5ecc378204a1a1c7b66e3","sha1":"69341c276b6f70571ef3e2375c898c0f7c7dfc52","sha256":"39b857db95948ed32e497441f5a3ad7d105e3c1f75c8df71906e6083c954e00c","sha512":"be45278133b0585d26569f714d0084fbbdb11f90d53e5dd5d8c3e1e574a96597c18a834394b6953515957c58fb9596522cfa7ab373a449b740d47d0a7d720937","ssdeep":"192:ZACT1W0uDmJs897Yuz4n4AscI6Pj8VCh9vaIVazlZue7lZee/BTqLQLMLU4vSdLI:bcTn4AsWr9By2Qms2cYg4kLI","tlshash":"f8323b715612413e613387ecf7ac73140299a25bc50ac82d73de239e8fc8d8a9d67ba5","first_seen":"2026-09-27T19:34:53.426044Z","last_seen":"2026-09-27T19:34:53.426044Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/fonts/Inter/Inter-Regular.woff2","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.426Z","timestamp":1790537645426,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /fonts/Inter/Inter-Regular.woff2 HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zunoza.vip/assets/styles-Bgpzfixg.css\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KB4pPIyIa0%2F8RdT61CtpuO%2FqQEaNacmcDTmtSazYX%2Bf46EmUlfNHsCWzH0xZ0XZhSqtMySEU6pJli14WEhJ%2FvE9kUnhGjh5pO%2BVOAqPDsMCPvWl%2FOFLilfYveq7L\"}]}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\netag: W/\"219f4-0wP33cqEQo2mjPOCRJflhExdvbE\"\r\nlast-modified: Fri, 25 Sep 2026 16:11:23 GMT\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 6722\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncf-ray: a41cf19be90bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137716,"size_decoded":138600,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 137716, version 1.0","md5":"731a3bf9546920845a4efca3936a2507","sha1":"d303f7ddca84428da68cf3824497e5844c5dbdb1","sha256":"b47bda0211fb64b046fde6877239f95906d35ca1f38022f3e3e0427dd48b1d76","sha512":"c9ed888b69d52fe93e67478573626d59425b9ccf13c15981f5faa047b62cbe1157374166c7a0b35511ccb200953e2fbe20d37bf0c2c2247caf525bae85dd456d","ssdeep":"3072:pyuIb9lLNxtFgBTqfFKAYAAiQTwev9RT084rYtnY:p63eTxAYADy9j4","tlshash":"f9d312135bdfc2ffd9d0e6b894f9b1d34169cc095b6242b42d210b3e9db3266e621863","first_seen":"2025-10-09T07:22:38.650505Z","last_seen":"2026-09-27T19:34:53.427428Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/auth/second","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-27T19:34:04.417Z","timestamp":1790537644417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /auth/second HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4BiPO%2BkpaohwwnuMGclX9uGWTb4Nu9oCW3Jsn76eEpyljra8cwID9bYZIP0ch06fIFfDXpSU8gXAIaM20gP9opfGxvJESUxpgJohABKP8w3ETTf0tNk5G9Pw%2Bwo\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a41cf1959f4cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8734,"size_decoded":4229,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2680)","md5":"ae3a85d222b07705dd3e02f9c19feb0d","sha1":"066c6f711a394f45277217c6b701ae83c3de4314","sha256":"f104ec32161005e0bb7d1e033904b975066be599c1c6230c39fec450e8643803","sha512":"4f4159d5eaf5db0c9f2088b66fec29e02748ac351e5c6f1d5f9049c57be40da64f72bf541926e86b2e17c194872e942150fc6e0f0b15b2e109c5c28eb737ace4","ssdeep":"192:uXACT1W0uDmJs897Yuz4n4AscI6Pj8VCh9vaL4vSdLztkn:EcTn4AsWr904kLCn","tlshash":"00021ab25453c1166136f689fba9550802e5a14fc849c83cb2cee29dcfc8ec7499ee75","first_seen":"2026-09-27T19:34:53.428233Z","last_seen":"2026-09-27T19:34:53.428233Z","times_seen":1,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/frontFetch-D3Prh4Jz.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.728Z","timestamp":1790537644728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/frontFetch-D3Prh4Jz.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"1ae2-gBhxwnTDMXBmUckPViPVtFr3uVw\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g%2Bm5wCK%2FmdZ2AoxIc9FQQfXmQtNfELn3Dj%2FDJ8gBFZFQtXkLAANSkmKO8d4FI4WvhY6lK4U4zDrMHICDeNSQL0Zf1XYy7jBBBBnglcNXPDHj2yl4Vgz8tFvjkris\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1978ff0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6882\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22554,"size_decoded":7699,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (22553)","md5":"34697ee3a2291afb36c7157302dde009","sha1":"bcacbd44b87ccc6f67d12ac456938b82357e5aae","sha256":"c2f2d479229be719370d8969d2ac59b2b9828b6574aa58bd16694e7da257a203","sha512":"374616c88b7c369f89191415163f603bfc7362452087904c4ae31852137c1b829b33db29396a77443ba4364738d9d2266f312f9eddce36bbbf4ed0f572ce84fe","ssdeep":"384:coTDa3qhho/rU3+/gI9TRn2Oen9j1IvcGE69LnJf8rEAwWp2YWMWE9bSu+lz9rwt:RHa3qhhCU/Etn2fnXIvcGHdvWpyMW+bf","tlshash":"a6a2b89a7242a22739e1c5d45c3e4125e2246814340b805cb9bdade7f963dcff4bbe35","first_seen":"2026-09-27T19:23:13.441195Z","last_seen":"2026-09-27T19:34:53.429185Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/index-CiAkY7UG.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.737Z","timestamp":1790537644737,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/index-CiAkY7UG.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"17f6-iKHwJpODefPDiwf7/DxpiJykees\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQHkFz%2Fcgx9F%2B%2FVfMtV7ixJ8lVcxREA0s%2BidRPk2zw3wXuZMEzrZlAHz37uOm0zjrzrLhgPaFbjh70nMaALfTAxb%2F8DkaoOfq37plzIDeclTopmuscjSVMFWN2XF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1979ffdc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19257,"size_decoded":6955,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (19256)","md5":"34beec96856d3942173d108d66c24a57","sha1":"8455150ad2bcaa804d872f75ed1e4e0f607a1ba9","sha256":"99ddd0e38c1d589b529855c0f9ed2e09fab1fc89a31676c71d001ded78e2b3af","sha512":"1db0e965756ff3f86030c00a5b802b08aa1a7326aafbcb5ccc6a07b33717812e85c63297633f4ffc52c97ffc09b14a7be753816f09b28e4d93fdae516961fdb5","ssdeep":"384:eAHdv76O+Ty3hkV8ATWZvbd/bIjtsfI00GIU06cn2kU/miSXysPaoLDeyx9bb0m0:lcop/Tb7cn2H/7SZyo7pN0wdS","tlshash":"0f82641ed354a3bced8687b0832264b1755e159f20f6d3789294856073d30ecd6be8ee","first_seen":"2026-09-27T19:23:13.430854Z","last_seen":"2026-09-27T19:34:53.429822Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/route-DTUsIfhG.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.724Z","timestamp":1790537644724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/route-DTUsIfhG.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"186e-hqxdRQSwHFGWbNmt1lHrAU3kuC8\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vl%2B6kUwxMjT%2BGAGeciwmkW7%2BNAoR9eF%2BxGPlIsnnamB%2FaAWegIS0VH8YC%2BVTPu%2BxSecm3rLrcysoESSkiEtgACwawNjO8dIc2kF6lwCdrReqs%2FZSkummiihQoxEi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1978feec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6254\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18329,"size_decoded":7081,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18328)","md5":"063120e217ac89f47563c1393f836276","sha1":"97c8b09ed76cef5248d27fbcda1f742bdde8e4ed","sha256":"0105b001dfabb7ec63e78a29a8b9d98388c9e14e8ac2605894ffa70973cc0c6a","sha512":"7ebcd1f8986828f41d0179ba129c83f8fa0867adaa188933cf0c326642798fe7155ca0fe376f0ef773a470b3eed92ebdef0d0dba1bc6553aa57b36cc8e7060ad","ssdeep":"384:0r3MxVSp9LUCiG2DGdwD6F5FLZaYqNS6vafmdbdTQ8bj9hHmog:G3MxYp9mEF5FLZSNS6vafATQ8bj9hHmn","tlshash":"a4820ae47181f2366f9204a2e839c154f1352d183017c85cf1a86cab7a6398e7977ffa","first_seen":"2026-09-27T19:23:13.412324Z","last_seen":"2026-09-27T19:34:53.430749Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/second-Ds63bQvX.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.734Z","timestamp":1790537644734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/second-Ds63bQvX.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"1995-3hx/9op7WcBFCd/BMVp3sfLujuw\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbGs5K9eSSE2GmMSP7NhNrlpwwyPckUjhdkuKYHLoJp5CvjkjkmjtHR4GiU5W5OO4gAUMtS4ZMHEoQaZDTx8L6HHWq6J%2B0A62OdbGSV9Kd9ehxuYMPikX0bbaIQN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1979ff7c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6549\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21375,"size_decoded":7362,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21339)","md5":"f3066ce31ef2909af1a2f0a18d88ed1b","sha1":"c4fd0f260d30611747aec251a9709e189fc69204","sha256":"993ee92ad1048b2fbadd7e9764e4a0cdc80c7cd9c00b39b1a0a957ade1936634","sha512":"658f5aefe3ca43ec10d4c00b8045c525c5b9a65664cb0ead510f1da9635d2170792ffddc9703ac9ae62b04e5194e2556283ea7515c30f665d6981254033f81d5","ssdeep":"384:SQcIAj0/VwmR00MshnHH8+MewRFLnPBmoRInNpqX0vZcKvsoiVRcFK9yNUEJxrsZ:J5Aj0/VwmR00MsJnfMewRFLBmYInOX0G","tlshash":"65a29770a15077fde91334b5ac7dd65830098e44c62b4e5cf1b87c276ab589a3e82bc7","first_seen":"2026-09-27T19:23:13.444398Z","last_seen":"2026-09-27T19:34:53.431624Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/data-BWfYQSsu.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.739Z","timestamp":1790537644739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/data-BWfYQSsu.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BXjGlC1DpNwZ3g7yfFvqFSEiIn5VXcH9WzkqfJuoRtqHhOVSidZI3l951VPd2vXsJJuW7SV57rFBPblzF%2Fx6L0unmtMYRVSft0q5i0c2w8dLj%2BjwsqY5N7L4gZvG\"}]}\r\npriority: u=1,i=?0\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=2592000, immutable\r\netag: W/\"397-uLqW3idwZb+BqcM1KD1J4TGU3JM\"\r\nlast-modified: Sun, 27 Sep 2026 18:36:44 GMT\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nage: 909\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf197afffc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":919,"size_decoded":1440,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (881)","md5":"bed9bcd2eac84d6ce26b0d6aa98f506b","sha1":"b8ba96de277065bf81a9c335283d49e13194dc93","sha256":"8982c44366479e7f0adaa31e9b67173eb753276186498bcf91ef3b9b6d01ee55","sha512":"320439a55e5f98239d30676ccad3af65be01689bfd0a3e2cbeda468bf0119ca23941457f478459dc382ea9e9a0cb29606d051f95b8b0a87e36b8a05042f33ad0","ssdeep":"","tlshash":"ea112301cdb224fce67255a411af0e3021c95de9368d8440f1699ed877502a291d9f99","first_seen":"2026-09-27T19:23:13.439954Z","last_seen":"2026-09-27T19:34:53.432453Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/en-D3UE7oG3.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.036Z","timestamp":1790537645036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/en-D3UE7oG3.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/assets/main-H54J0iHV.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"3a33-tfj8yd7mTZaFRGL0vxo+IIdjXRQ\"\r\nlast-modified: Thu, 24 Sep 2026 21:28:31 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 190904\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZ2tnYoP0LYjZWnIDiVSQRoGVguIFtf02y9uB5lDUgqiJzNiAvs%2FwVGLxoooPl23PmVRvpmCwT2gX7mNhqh7LPRTSEAKpKGkhBVguE0mdEEzZc54t80sTkVyz3nw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf199786ec759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14899\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49118,"size_decoded":15716,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (12626)","md5":"fd9eb3f710fa9b95c1b9d6753be00ee2","sha1":"41e447a19a3f42638070b27e6aa94a08a2103556","sha256":"e7afae39b3d0cde3112ae7b09f8a442c8934e0f79995e716eaa0ab980c12be2b","sha512":"17d8178459b153811cba0bc9c314affb87ea7fd375cb3061f46e070f63c8f758a7dc3dfa8179f6252777e7aff0fb33d3fe9109a692339d81929a77637edbd0ec","ssdeep":"768:nWVC9gpRXrY6JmaG7eaB3rNNQjIf+kzxvrFjE0togNAbBVMv3a+pdZqdX2EU:OC92RXrhJmaRalUjE+kFvhASoiAbAvzB","tlshash":"d2232b0fca0515a408d333513dcb2b69bafc014692e2c4695dde812d23f6d69e63fbe8","first_seen":"2026-09-27T08:31:09.208225Z","last_seen":"2026-09-27T19:34:53.433014Z","times_seen":4,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/landings/second/bonus.avif","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.456Z","timestamp":1790537645456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /landings/second/bonus.avif HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: image/avif\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\netag: \"18de-K0TgL1xu1rdYbABEvKWfaOR7XeY\"\r\nlast-modified: Thu, 24 Sep 2026 21:28:05 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\naccept-ranges: bytes\r\nage: 4264\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EzOBJk%2FbeC3ShFiakhHOafkHI8OLVGk9iLoDlXf0qZXa%2Bk9ny9YAjK%2FrBX9L2xsJ0%2F8ibChc2fqWQHl3gHdr3H%2BSbha0bo%2Bylvm4d5IJCGL7BCLjSh%2BoCyc3Y8%2F2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf19c191bc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6366\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6366,"size_decoded":7275,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"ddbbc54fef7343d2ea284b18780bfd22","sha1":"2b44e02f5c6ed6b7586c0044bca59f68e47b5de6","sha256":"6d00963a49d0ae460d3b4fb755577ebb0396ce568b8a640788e6e7499249ef67","sha512":"d40072c82391cefe2d6d0d7ff647524bab316d949b3c0746f2bf2ed400a09e237673b95230b6d36d5abf1ffea325eaba4a74a527af54126719548bcbc2176ac2","ssdeep":"192:rG737xdRIVWI6Pz9VRzcFPAZ5I35KyuHMCgvM:rSxrwn6Pz9VKFPEqRuQvM","tlshash":"aad17e25a8403ec0d836843035e048d87ba779a86abe5fa947cbf24475349eb8d4288f","first_seen":"2026-09-27T08:31:09.206688Z","last_seen":"2026-09-27T19:34:53.433609Z","times_seen":4,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/api/rum","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.138Z","timestamp":1790537645138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"POST /api/rum HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nContent-Type: application/json\r\nContent-Length: 67\r\nOrigin: https://zunoza.vip\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":67,"data":"{\"metric\":\"TTFB\",\"value\":391,\"id\":\"v5-1790537644912-5933711405628\"}"}},"response":{"raw":"HTTP/3 204 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wzqgm1BtbyTfQ3OWCekgjZeY5UIYjAPJdbdwn3ok8UdDqM4ZGoSdihPzbIDAN4wn24rRO0Anm0XNeq%2F5ucfeysBPZmabTrdgTIzgwHHH9ci7s07W%2Bhar014hWS4h\"}]}\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncf-cache-status: DYNAMIC\r\npriority: u=6,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf19a1894c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":1340,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-28T12:46:47.66208Z","times_seen":18707282,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":233,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/wager-DQ-MpnhL.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.731Z","timestamp":1790537644731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/wager-DQ-MpnhL.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"4e2-EqnealfJ4tLtbLS+FPgsmjbphBw\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 909\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXVQCh4h5BQPYqNT2%2BDn8GOLOkgR1ckPfeuizjm1XDCxL90Jq7UeJXW4w7939TmRHzwE9PdUBjxUeKeI4V3b4akmXUmF7J%2FQmoGmTxMasQLzbcnO4CPV9AThQj7u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf1979ff2c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2996,"size_decoded":2064,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2995)","md5":"e7e55a71b0f36d1fc2965fd335b0263d","sha1":"1babf4a3c646c3b4c16426d4b01b31d9ee038728","sha256":"214f1db27e745ae80ba6b602ea125eacb9b140573236b07683eff351cce9639a","sha512":"0631ac3f375b4ee08cd253301318d9a629659a35a8ded0307913654c11aaa95ede27371a61ca0a92295c3be0c35a46a9aa48674954877684c3f2181e92fc809b","ssdeep":"","tlshash":"1651965775547239f3cf04db007f4908bbaa332a641d49b04066cc9eb4e469916abbb6","first_seen":"2026-09-27T19:23:13.442299Z","last_seen":"2026-09-27T19:34:53.434083Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/assets/betsSectionSkeleton-Q_B2xtGL.js","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:04.792Z","timestamp":1790537644792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /assets/betsSectionSkeleton-Q_B2xtGL.js HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/assets/index-CiAkY7UG.js\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=1,i=?0\r\ncache-control: public, max-age=2592000, immutable\r\ncontent-encoding: br\r\netag: \"1d0b-PyJYF66L4kK+Y1fhy068uuot9jU\"\r\nlast-modified: Sun, 27 Sep 2026 18:37:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 900\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xltHgGnxRMBrr6kKNcPlvetxgBvUEbwpl9QKitPmBTx6kC%2F4pIlI3zj0aPUveTbThUUIv7A4jnaiq4iHSVUSf9kf%2F%2F2XrNy7zw%2BfOlzArxKDRZBam9KAswTZnTCG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf197f80fc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7435\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26683,"size_decoded":8254,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26682)","md5":"d7756a693629d429c7fe254e6f5fc45b","sha1":"ee4c9bb81deda979c1c576bd7f9d08a096c0a8d8","sha256":"c1c3b06128daa0ed92f0460491ccdfb26cb8c8aa6141ced0a13e26b78aa0df32","sha512":"f825970ba543326f505b4ea9b8e882a09e199cad26513c5ba47c0e911362c097a1378c6d6e9e7537adecf3ededbb9d769c139663e9d5639003aa1939dfba3db4","ssdeep":"768:6om6s5jdiVxGssesgvxwsXxb2Nv5kgzhk6sK4Ujjo:9s5jdUxpzx/BDpUjjo","tlshash":"52c2a5f3630873fcf9c287700627b157913e29aa70cf6194c72e5958ac8548aea375db","first_seen":"2026-09-27T19:23:13.431895Z","last_seen":"2026-09-27T19:34:53.434649Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zunoza.vip/second-design/logo_blue.svg","fqdn":"zunoza.vip","domain":"zunoza.vip","tld":"vip"},"ip":{"addr":"172.67.159.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zunoza.vip/auth/second","date":"2026-09-27T19:34:05.033Z","timestamp":1790537645033,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zunoza.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 20 Sep 2026 12:48:08 GMT","end":"Sat, 19 Dec 2026 13:46:52 GMT"},"fingerprint":{"sha1":"23:F0:6B:FE:7F:B8:31:42:6D:E0:9A:B7:73:77:C1:CB:26:58:03:1E","sha256":"37:9F:8C:90:22:FF:9C:D9:7D:BE:5E:E6:5F:46:35:07:2C:9D:6C:30:B0:46:2B:1B:01:F5:67:A8:C4:29:5D:93"}}},"request":{"raw":"GET /second-design/logo_blue.svg HTTP/1.1\r\nHost: zunoza.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zunoza.vip/auth/second\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: landing_visitor=v-3830bfb7a13842baa4f6c5f21b33068a; landing_choice=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 27 Sep 2026 19:34:05 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\netag: \"21d-rz3zMMh7ZsOPYV3cMGMu2LEf05c\"\r\nlast-modified: Wed, 23 Sep 2026 21:45:13 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer\r\npermissions-policy: camera=(), microphone=(), geolocation=()\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'\r\naccept-ranges: bytes\r\nage: 4815\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onsM40AemjluZooUZTZXRTCV1IpBIIJTziaLwGfe5cEV%2BelPaUZh4zycP947%2B4Tr2evMqrH1vM%2BfoTpUwTU0ED7QjM9L8pK81h9Kyk8Bras0K8Es%2FPvJJ95QBgp4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a41cf199786cc759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 541\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1555,"size_decoded":1584,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8ec1594d32ef1e01bf0b313ce332be7","sha1":"2c1ea45657f677e2ac9e42eae9bfada889c5e7f6","sha256":"e5ae7767688696f53f5c59a09b9ae6b95ea37818d8b93d9113b043b6e82af744","sha512":"32493bf8ecdd493023a1b4425bf3dc33be0c30e463aed25e97a8ee4daf656803b2bf122e58c271d03d8b9eafa938d8139ee912014dee4697151fffd5a9a54704","ssdeep":"","tlshash":"fe311f79f499d836d224d26ceb94d425919482d7c4c58129b0c9ff2f582d8c31f1e3f4","first_seen":"2026-09-27T08:31:09.224562Z","last_seen":"2026-09-27T19:34:53.435242Z","times_seen":4,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-27","alert":"Sinkholed","trigger":"zunoza.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}