{"report_id":"e85ea415-4965-4855-a57a-ff97a819af58","version":0,"status":"done","tags":[],"date":"2026-09-20T10:40:23Z","url":{"schema":"http","addr":"zamekleba.live/","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zamekleba.live/","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"title":"Zamek Łeba – butikowy obiekt nad morzem | SPA, restauracja, widok na Bałtyk","dom":{"size":596528,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19192)","md5":"50b4bb5f331a7827c8670ba61519254f","sha1":"384b262191c49eb08ca873a6fa6fca70586f56bc","sha256":"c2ab91b50df238af1f4971c52864320232a3e2dd04ef29036fdbf4c955aebcea","sha512":"bc254eb21339f76e3ec901f7328063cc661c87c3618bcb38fe1e1d4ab5de5b08ebe4e2a40af07402dd704dd90134e32e075342737284455fb7d440998c56356f","ssdeep":"12288:epuIDk52yoFJqqVJ3hML9owMaYOdkKSQ6HywrRgHFwil:vIDaoFJVhMpowMaYDB74l","tlshash":"02c47df202a9258f11530d44d01e3f0add8cf797b6318d817a9cc51eafaed918d2e679","dom_hash":"domhashf42d0d0f2c6798410141ef3fa6ca4f6e","first_seen":"2026-09-20T10:40:55.125393Z","last_seen":"2026-09-20T10:40:55.125393Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zamekleba.live/","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T10:40:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"widgets.premiumhotel.pl","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2018-09-27","domain_rank":0,"first_seen":"2025-12-27T04:18:08.70517Z","last_seen":"2026-09-20T10:15:22.5028Z","alert_count":0,"request_count":1,"received_data":9240,"sent_data":566,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-13T23:01:27.934223Z","alert_count":0,"request_count":2,"received_data":1086,"sent_data":2099,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-13T23:16:40.429603Z","alert_count":0,"request_count":1,"received_data":13361,"sent_data":489,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-09-14T00:01:55.00998Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":838,"comment":"","tags":null,"fingerprints":null},{"fqdn":"zamekleba.live","ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-20T10:15:21.729014Z","last_seen":"2026-09-20T10:15:21.729014Z","alert_count":250,"request_count":50,"received_data":12767967,"sent_data":62103,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"CookieYes","description":"","website":"https://www.cookieyes.com/","common_platform_enumeration":"","icon":"cookieyes.svg","categories":["Cookie compliance"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-13T22:44:45.310895Z","alert_count":0,"request_count":4,"received_data":2043184,"sent_data":1949,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.mojekonferencje.pl","ip":{"addr":"104.21.63.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2007-01-28","domain_rank":0,"first_seen":"2017-02-02T12:46:21Z","last_seen":"2026-09-20T10:15:23.646529Z","alert_count":0,"request_count":1,"received_data":7990,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn-cookieyes.com","ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-22","domain_rank":9847,"first_seen":"2020-04-26T13:42:32Z","last_seen":"2026-09-14T12:39:51.182487Z","alert_count":0,"request_count":1,"received_data":15782,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"open.upperbooking.com","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2012-07-06","domain_rank":2094240,"first_seen":"2015-04-23T06:42:03Z","last_seen":"2026-09-20T10:15:24.009894Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":481,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d39a8679ed70005ee063ea62886141a2","sha1":"52b556cb7bdbe59b9b1ab9415ff905b561b8399e","sha256":"b33ed8fd08f8cf0138f219167d4bb5817f1b09c1d9ac7431e833899ecfff40f1","sha512":"c65e2fe579412ea8ef38d29185f47dec1f4fb871ec28767c104821f1c3368793c4ff577ed58971d27a9bbac97fee734093766954f7e9d2fc0ff1cb687a0ab977","ssdeep":"96:A1VdZYqhPnjpsx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBf2PfCHiUr3:AXdZYqNjpm4yPqSMbqaQGL2QfdDayCZa","tlshash":"3ca1ca9929fb50210233b1bd1bafa918b63895236208dd61bd8c9264af94437d7f1bc9","size":4693,"data":"","first_seen":"2026-05-25T14:46:35.360433Z","last_seen":"2026-10-15T04:34:23.768203Z","times_seen":121462,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-10905183754\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc45748732e1b0ac161f088cad8b0f5a","sha1":"d39f606d7441f31426c7580f29ea68346d006bc4","sha256":"b6086202c6ad62db2c40f9a66a51e95b6f72573704985ffa41191883832da841","sha512":"a6c08ad93ee217b3b239397651ba2ad167bd21f8937579e1b795847171f23d47a1dce705bf3757ba3d5c530522814a1f34f607b743e139461a759bbde5d2c3ee","ssdeep":"6144:KI1rBbPP1gbcjM7X+3Kbcc6MbBEAF33GRqLrcagcOf:592btoDqEagP","tlshash":"ed942acd73d6746283a3f674903f018bb27a69a2b84cc899f289d8d42d3465a5173f7c","size":435737,"data":"","first_seen":"2026-09-20T10:15:32.266082Z","last_seen":"2026-09-20T10:40:55.156674Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V9BKLMKDT0\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7759d1cc26ea02e6867466b6bd2d1ad6","sha1":"4f89f29d27c37266ac9ae9b2cb05f6916b5b1dff","sha256":"d2ebb1a2922b801b8980bf0403bdfdc0c147f4b89e53a6d8b32641307f78edd7","sha512":"04a1a9373900f9c3ecb473bef73aad4733bdf53f373a08113577d2fdf5d576fab54d6ce42afae4ed4b4494e7f9b4d058f370065baf757f56a79c31316d441fd0","ssdeep":"6144:ELI1rBQ5PN1gbcjM7X+3Kbcc6MbBEAF33GB5mrc1Pg45wBff:F29Abtoz5x1PbA","tlshash":"01c408de73c67422979af168943f01cb697b28a2b49cc89ab1cddce02d3454a5163f7c","size":594006,"data":"","first_seen":"2026-09-20T10:15:32.257702Z","last_seen":"2026-09-20T10:40:55.129046Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/baguetteBox.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"add865daffd8b6e10264279f48d8ac50","sha1":"300d6a58c385a454ac7f6b271e210ab59f54796c","sha256":"50b415d35552f4b088d9e3e92ec9a46be5b499ac05a44034aedc677b3523e00e","sha512":"ecacd2b78009f5b2dc8570919659f26140e37e13b620511649af9ae7fde43c641bafeb30453a2b1d07f20030214a55470acd5ba45741d78e3b651cc5ca2897b2","ssdeep":"192:uSfaBAmpbVFVAMuQ6Ss4xdnHy4AH93Ej7tSM4cEuuF8mVg9CNK:uSSJpzWML6S5xdnHy4AH93iEcEH/5NK","tlshash":"3b12f6fd320232748583256dd9efd18ff1351126aa060414e129d9a43cb4eee537bfba","size":9577,"data":"","first_seen":"2023-03-08T04:31:18Z","last_seen":"2026-10-13T04:56:13.344968Z","times_seen":929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/jquery.nicescroll.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d247c9568e051b91d27ba6901447e8b0","sha1":"25fbb66bc92f7538edab6575cf57c4391d7adb17","sha256":"2c991660c701f37fb337c54edc49d2a0d607881a3dde688e178ed97ec3d23434","sha512":"ccc7eb30065802534294f2a337e24cbac94afc1eac3ccd3d046beb5a55be7329a63e6b144f5c491773f893123794e87dcf2a5a912816693a58eaf0c963fdc38a","ssdeep":"768:kJza49Lluo96Hj113vGPPjDhiz7o2D00SGwcZ:kJl673AjUz7oYUAZ","tlshash":"fc43c6ceb521706a01cf9236d0cb4746613ae55a670a84d8b138dcf82e75ab5b237f7c","size":60010,"data":"","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-10-15T02:28:03.633576Z","times_seen":2613,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee7fa39ecb3ed82c77b2c3fddc2aa6ad","sha1":"29f01a651ba900596379ad6010ee3bbae1e6e5aa","sha256":"e796899c96ea60a62daee3b65b45494586c138045a9d1a5dcaac1b410c58fcd4","sha512":"25c86daa8dcb16154d20b7b81f04c10a146971a59d21b8c9a0c97b18281b5145a388f93d16e538b2d1a57387f000c22db00a467894afaa5280b9bf0d54c16642","ssdeep":"","tlshash":"5bc09b8c211a5c7155e72780cb7ff604b555331498e56931491a63449d30f57db55858","size":149,"data":"","first_seen":"2026-09-20T10:15:32.323632Z","last_seen":"2026-09-20T10:40:55.1702Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b247847ba406afd8e8c514dd1ea0e49c","sha1":"a9ded55637d6a90dc8be79910f424f9f22f472c1","sha256":"7218ca61f28362a9977df53f1263140b2253a1eabaebbaeb7e1f145fa4d4dd63","sha512":"ab9b00738ddff6276b773d2ad43a5caa068d72b7e9614bf9abf91c41357b7cfaf2a7171b93212f16827f63d94cac39535dcf1292772080ccfa0da6cbeb8dcf18","ssdeep":"","tlshash":"27f0558b29db14702d57a03e5b3d491420923117b084d032bcfc88252f0869a4a68aa8","size":559,"data":"","first_seen":"2026-09-20T10:15:32.325008Z","last_seen":"2026-09-20T10:40:55.170895Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7083a402a128738c62c9c13ec485cfb8","sha1":"fccd9bdf07a40ce8118e1b949cacd382d032d343","sha256":"20641596d6cc10635c5dff06a2b8e549322371a97a89aca2cb50bf4703c61411","sha512":"be3ef74c1791765a2ea7070c62266aa3dec43e8945c653ae889c59e68ac44a7e13ae2fa9eccce413e614cfab2d3a2defbccda9982ee5ba59cbba713a8d7afa1f","ssdeep":"","tlshash":"e811a40836b10981627bb42637ffe4800d3a3327d2198e90b63e599e0f112e5754724f","size":873,"data":"","first_seen":"2026-09-20T10:15:32.326017Z","last_seen":"2026-09-20T10:40:55.171596Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/jquery-3.5.1.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89475,"data":"","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-10-15T04:22:25.173186Z","times_seen":17987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/Canvallax.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc59456a94a57dcddbbc259309b8f70c","sha1":"85ff00c01c07013d57218d28e3c91e798bace0cf","sha256":"ea79bea047f2197bb089f33b9cd8e01c0d7fc5b0d643e516d175afd895b60449","sha512":"597ea1a33273726fdae28d6a253d65021d51c605ee70ef553674bf370c7f2eb43c8593f450c8fbe4b538616ad260e7fbcdded054d185cd13561c82d3c08c62e7","ssdeep":"192:Y8d7YWtYtfps30Kj84RGvDDaR2Z25HOIoTxQGMQ53Rsr+DvoV:Y8d73tMp8pj84RGHaR2Z25HOIoT6TQ5s","tlshash":"5832a6cdb2d2746683932966407f750eb33768585d0e8508b238a0e7ac75f8a127ff79","size":11366,"data":"","first_seen":"2026-09-20T10:15:32.30499Z","last_seen":"2026-09-20T10:40:55.156151Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/prefixfree.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"887cae650070152a6f1397c3597a75ab","sha1":"ec2fe968b65cc738b4fc317657af32d2a1f5e71b","sha256":"9ca4c3f8e6bfef8e40e24c8a9584f0eee4017fdae799304ce9410558fe47a65e","sha512":"fab4608e7dc37bfd1ce458fd6075394834a16d42d7c15ea61cb73b480311f4a2f07263c6b8f349f7aafedd52ea731ad435b2197e75cff3cc831545c2f992f4ff","ssdeep":"96:kYXzuAbJ1r3SHFi3EshYMbfWQzFJzjiWuBSurAu7VMSxD7zYaifPN:kOzuAPaiJhYMb+QLfBUSjmlePN","tlshash":"e2c1a539711cfa26139260b141af390bb176cc15f52a8a70f219dc597c7c79a00abfbb","size":5888,"data":"","first_seen":"2023-03-10T03:17:26Z","last_seen":"2026-10-14T15:44:55.090068Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.premiumhotel.pl/core/widget.js?app=zamekleba.premiumhotel.pl\u0026lang=pl\u0026defaultModule=booking\u0026defaultContext=KONTEKST","fqdn":"widgets.premiumhotel.pl","domain":"premiumhotel.pl","tld":"pl"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6806fd331bf0e3e0f35aa848a6c0a343","sha1":"d4f3b18bc9363fa82036c560490e21d469ce0bab","sha256":"85abba3b0e2b7e8f8645ae4150dd1e65a2de530d9c6548b61e099006176704b0","sha512":"88d83bae0a4ead95a473cbff85487ee23485f9ac92770a92161239c21ae8f65d0132bc9d15140049482f64e7ebda7c109d0b1bcbd10fde1696875ae079e0a2c6","ssdeep":"192:r8y2jsFTF3GRyJiNxL+6vEC3bjP1auqXbeyaSVhL8pH:r33FTF9m+6vECLjHqXbeyPV58pH","tlshash":"1502daa9f4a3959453f811de26b69361b2785007b1048899b0dc8c6bff2cd5a45f3ff8","size":8658,"data":"","first_seen":"2026-09-20T10:15:32.249259Z","last_seen":"2026-09-20T10:40:55.154908Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/802ba3faf2547cb9b9981071/script.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6740a1e7579c6a920665d29a474da08","sha1":"6b27001015753f6a1c9e2c4f3b64afa73159b1a5","sha256":"da9476d30c5ecbe44ada6dbcb9d89ffdc389bd90bb718df7f01ed3577b41ada9","sha512":"1e68826af32d3fe97627a50cf32a427ac4856d0acb9dff932d39caa66d5b47aadccc415846ebacb56dcd4227bb395af8209d830b7122229dbfd28d90c5b4512f","ssdeep":"384:WqZV8dIDoxCUeib7BkEKZy0qhaRA7/tNKErE8MotaUVkc6T:WO4IXLuoZy0qhaRA7/SEkStVR6T","tlshash":"a262a794b7e174b2039370b4913f5a0bb37569b4644a80b8b264dcd66cbc48ed637fb8","size":15113,"data":"","first_seen":"2024-05-17T08:41:44Z","last_seen":"2026-10-15T03:22:52.973012Z","times_seen":1501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/jquery.bxslider.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70f3a8484c7bc490f4476a59108ed9f1","sha1":"325918bfd07ebf1f6c6627d224f597bafa8b0fdb","sha256":"d9a3e8f06cc8581fd6eeb011535e3fe287f9d38d22be1ec1f9fd9bf804adf62a","sha512":"9e8dbf283b025921aed0b57259577085af39f7114e9f52bca0b3c88b63ba83122fe5f43bd382f6a508791fc5f83e94c4ce3183e7cfcced363075ff0b59e4902b","ssdeep":"768:Gd4mA6iMGQR0sB7U5is2DKNa+YM2H/+W68HbZMH4wlR3Ew:iJA6JGQRnB7XKNKM2HhHHbZMH4wlR3Ew","tlshash":"6663520561f122761a23317dab8edd40d2fb82478529e5a4f9fd470cdf8166402fbbea","size":67552,"data":"","first_seen":"2023-03-07T23:45:50Z","last_seen":"2026-10-14T10:22:50.850818Z","times_seen":715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/owl.carousel.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-10-15T04:36:09.114461Z","times_seen":72383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/aos.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8cccb00f6290db316544b6e8e2e8b00e","sha1":"e1ea59cb2ac42d446b16e4f60dcb9aed9a26d075","sha256":"ea0776169602aa06ca7e5f4f7455bbc86459d46ca900ed665bf9fe077c77b40b","sha512":"23cbabad4cc49ab466f572a79df93c4008fcecc01e91296af515e472b1ec802f7bd2527104e56154138200eea7d2af95bf23301df03fdb94c156d0b4f9b53d17","ssdeep":"384:3PXfNaS8QzGOFEUqF5ZDUbpva23GSeIf+y54:/XfNaS8QzGeEU05ZDU9C6GSeIf+y54","tlshash":"324209ec3144f0a717e7d1bb816fa10ef5f18838689d9051d258d4d23eb4cae86a3e5e","size":12414,"data":"","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-10-13T02:44:42.913811Z","times_seen":641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a6ef6a00531f83ff27285693a736201","sha1":"faf75f48d6abc6f28ab0f48cb46a5bfa4f001c4e","sha256":"3507dcdbb44e0c93025266aa8ccc1d7e7e16d2000e95786dd59666dd895d83c1","sha512":"bb9574ecd2dab5696a1f859313f5c90c9ab135ca7339688ae1e419548ce1825dd37d3119a409489faddeb9324757aaa893e307b4896fe1836567fc702472c6a9","ssdeep":"","tlshash":"89e0d86576087f34a65b252335e7ca40ecb11048254123308c3c5ca41db6d81411798e","size":358,"data":"","first_seen":"2023-03-07T12:27:34Z","last_seen":"2026-10-14T21:54:23.786343Z","times_seen":1948,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/mzebley/dynamowaves/dist/dynamowaves.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a560de5813b460fc666a5a74e6893470","sha1":"9beae9c9c36eda2c83d7d007c3d8d4b4917efbb9","sha256":"b4e9d25962a8a84b4bf5d38b9bcaa31230a57037bd63a8644ccf396ea049dc40","sha512":"95519f3b3716822c8cd1744f785465c7220d2caa37502eba109f45e5c10f072124ec018eb97411a89c0159ab2ca10e084527dc8aa38f09d06866a9e139e6eca9","ssdeep":"384:n8O/uUXenhrYbbTZzYy2gGcrmlZyDAkkGFSx8z7mw5J4g36f4+W3:n8O/uUXenhrYHTZYyLrmlZyDAkpFS6X5","tlshash":"1c427756b1b0a8368a5202e2902607163b3e217a2202407d777cbcdf9c67d4f76f77b9","size":12587,"data":"","first_seen":"2026-09-20T10:15:32.278196Z","last_seen":"2026-09-20T10:40:55.162186Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/conan.js?1789900779","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f653141abf806cf656e8ef67c1de5c81","sha1":"43e83c87ccd45d25aeab935a07922fe3c6393eec","sha256":"f4b6bc2717ee772efe5c558e3930d7dd8ee553a6c6e87446579c2a6a1cbc64fe","sha512":"2ff88f9c393ae6e1f0c879c6e3845c2c4e5d99918a5f08268ed85383b22876b2564c968e5d24d0850566c8ac7fcf8cbc47417befae55fa387b7693c61057abad","ssdeep":"384:bSTt7typH4SN9+GeiSv82cMU+M3MME86D:bSTkN9+GeiSv82jU+M3zE86D","tlshash":"0682320976b2002254bf343e8bff82452675901bd20ecd247d5c9ea84f90a7d76f27ea","size":17771,"data":"","first_seen":"2026-09-20T10:15:32.23056Z","last_seen":"2026-09-20T10:40:55.152301Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VWN2VV5Z7B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a85c5067ed34c56696849957ddad758","sha1":"48a2fdbd0320094522597805826968cdf9577b54","sha256":"70d5ec24a4743885c30a90c92cb56b7f986518bd778c587f83a1dd78cd4bedb8","sha512":"4ba40c4688f0dd378817320c176d88502b01b286a4194c24dd132c6ee6a985492f59636c98b82b2dcd4d89122974040c2f9216f6bb043a503b4134d5fc3753bf","ssdeep":"6144:dKI1rBQ5PN1gbcn76+4bcc6MbBEAF33GBAmrc1od45znljf:v29AbqxAx1oK5Z","tlshash":"eeb408ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","size":523506,"data":"","first_seen":"2026-09-20T10:15:32.289761Z","last_seen":"2026-09-20T10:40:55.151761Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NJCD66B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a72ee10ecd4f0f9b4229d173555464cb","sha1":"f894616b3cd67c1fe4b9d138eba51d6c37977e4c","sha256":"a5ee2d64705916e793af49118d0cbcd8afe963b1134cc227156d44b709926eb2","sha512":"5524c9ecdee5e5920dd97a9f1ea7330f61e057b3c5712abd54b72b9980e3146dabbd025024b6ee89959a46438e09a9a3a766d9e5c6f1a81953f4fbbcefd56650","ssdeep":"6144:rdu6PpI1rB/Ph1gbcjM7X+3KbIc6MbBEAF33GRGhrcXcz/PLDG+f:wtcbtojGqXcLW+","tlshash":"11a42acdb3d674228392f674903f018bb67a69a2b84cc895f289dcd42e3465a5173f7c","size":487128,"data":"","first_seen":"2026-09-20T10:15:32.288362Z","last_seen":"2026-09-20T10:40:55.167584Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ffe3001f8f61190c2bf802c20d36e81","sha1":"6d1df327615717c624dc76e6e45488a51286abe3","sha256":"b09ca08e32af7600288098c2d23a425c22063ba886856e6f9710b11af25a3925","sha512":"8659ca8d428204e19b9ad4bae73a02915a8f61e013c1784041f8eb29df9357c4c699339bf0763c8b08406f36050090b61b5805d85d6c06d4fa8be736e99a5eb0","ssdeep":"","tlshash":"2be0a31d1c1eb46117f41958f77b851530d5120125411665cb97c8543970cd954c5f4c","size":422,"data":"","first_seen":"2026-09-20T10:15:32.327742Z","last_seen":"2026-09-20T10:40:55.17283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Pageview limit exceeded: Banner disabled","filename":"https://cdn-cookieyes.com/client_data/802ba3faf2547cb9b9981071/script.js","line_number":1,"column_number":15063},{"level":"warn","text":"Google Analytics and Tag Manager is being shimmed by Firefox. See https://bugzilla.mozilla.org/show_bug.cgi?id=1713687 for details.","filename":"sandbox eval code","line_number":1,"column_number":9}]},"http":[{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/img5.jpg","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.720Z","timestamp":1789900779720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/img5.jpg HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e035214a0656c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"7adb-5fa2b93f9fccf\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:56 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JetBnyrvgZ8NNfYlhcCAsEaJifiK3YiQNH0Ig5lNubnWlANJvKmPcPAHHXfolcj4rfcjVPNuYzBw%2BRB%2B80E6cH4v4bpHkjpAlKASbgxdPc59x%2BUS14nkcSvV1T1BaUs1kA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 31451\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31451,"size_decoded":32201,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 527x526, components 3","md5":"b9be504788fc64a1b38bcdcd220f3632","sha1":"9afd76930d494c4cf3066e0af27cb9f116f28d76","sha256":"9fb171abc1768d870edd818e8c982a6633a5dbf26c22cb05dcf786f88b0138fa","sha512":"e6917fdf2fe3fd4a50e8c624b8b36f66c22b8cebfca097b3e299e33b116bad1fae86a5641fbb63f4992c946ad104419f50972a6256d791352b8691104dfa37c7","ssdeep":"768:0lwBeaidK+fULZDVULLJDo+XOdFZ/aPPAJAtTqgi8k:s6elwZDavW+EmPAJAtTqyk","tlshash":"32e2f1f6f0252407837db2b53ed94e12c15e053f83d0fa9b970b859a50bda0568d9fe2","first_seen":"2026-09-20T10:15:32.274699Z","last_seen":"2026-09-20T10:40:55.126831Z","times_seen":2,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/img4.jpg","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.722Z","timestamp":1789900779722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/img4.jpg HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a3e035214a0856c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"d8b3-5fa3b1383617b\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Wed, 26 Apr 2023 10:55:20 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qm4vdGJnm4CDWVnD5aHA%2FcUiVJxreFh%2FS3TKn6cN9Cqg3tZ73tXboSS7CJ%2FWtrcVMGUHlZgPxqh46ym7Eluj68pt3PLx2gPQDhlW4bWurDhOc0o40vJ2wDghLejBWUogHQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55475\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55475,"size_decoded":56225,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 607x564, components 3","md5":"9d6f8e09465eb503f8e8cd24b388ab0b","sha1":"4856d2a8702bc17b41fe6c606368fc21d46ec2c9","sha256":"d2da3fd647b432bc616047fd4d1ed8a5b6b68a036a5eb323a2c3a0fbf9c8c2f0","sha512":"7bc6325e272545291f87509219d59929db98270ba5c918e9bef9f303551efad5986f684406a038cb7cc5479f5ceb466bf1b2d8c4689f0b913dc9d364b18f7dd5","ssdeep":"1536:ac0YiAinBA+m+1VpY0XlXAbnRpYcRIT+WjviD:ac0m+1DY0XFgzRewD","tlshash":"1643f1a5ba34e158226315c67992db14ef07bd700526de09f2e385bff32866231206bf","first_seen":"2026-09-20T10:15:32.295448Z","last_seen":"2026-09-20T10:40:55.127515Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/font/Spartan/Spartan-Medium.woff2","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.108Z","timestamp":1789900780108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/font/Spartan/Spartan-Medium.woff2 HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/front/css/main.css?1789900779\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e03523ba3d56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"6be0-5fa2b93a2570c\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:50 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cR5%2FwT%2FbwQ1sQ4e6p5G91taHu5W8iV9oz%2BrjRsvUFk29%2F3a2MVnUy86Cser5XlaJApvVl4qej%2BTxuXioYAeGKrkw9CjdLvGnb53leLgiUrXT1oLDfKA0wb6CUV6ZjX586w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27616\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27616,"size_decoded":28373,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27616, version 1.0","md5":"6fb6c0aab985cda80d1d5e797992015a","sha1":"f9f61230f005a7e22726cbcfbf9e35d5f9ae5628","sha256":"d5e5bb9f443b55aa4a134bd2a61f81f9eb49655120c093b683fe9977c02ca91c","sha512":"693d9e029e28a7434ac6b563ab2828a30d547ff855a7a735622d871130420fccc59bba9b7d8ad1ed3ac64496bf9bfaabba14a4eba079c538bd562486d8beb1be","ssdeep":"768:69zgxy+mGQmL3c3VoCm7SJ55TAEuPN1uT7Y/RG:8N9APKT7YY","tlshash":"d4c2e1a32f629c7ac07670bde2c12b703161dd93e1d2f59162aac66cd87670ed0d4d1b","first_seen":"2024-08-20T14:56:29.272253Z","last_seen":"2026-09-20T10:40:55.128331Z","times_seen":5,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-V9BKLMKDT0\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.414Z","timestamp":1789900780414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-V9BKLMKDT0\u0026cx=c\u0026gtm=4e69g1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\nexpires: Sun, 20 Sep 2026 10:39:40 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 193683\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":594006,"size_decoded":194267,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7912)","md5":"7759d1cc26ea02e6867466b6bd2d1ad6","sha1":"4f89f29d27c37266ac9ae9b2cb05f6916b5b1dff","sha256":"d2ebb1a2922b801b8980bf0403bdfdc0c147f4b89e53a6d8b32641307f78edd7","sha512":"04a1a9373900f9c3ecb473bef73aad4733bdf53f373a08113577d2fdf5d576fab54d6ce42afae4ed4b4494e7f9b4d058f370065baf757f56a79c31316d441fd0","ssdeep":"6144:ELI1rBQ5PN1gbcjM7X+3Kbcc6MbBEAF33GB5mrc1Pg45wBff:F29Abtoz5x1PbA","tlshash":"01c408de73c67422979af168943f01cb697b28a2b49cc89ab1cddce02d3454a5163f7c","first_seen":"2026-09-20T10:15:32.257702Z","last_seen":"2026-09-20T10:40:55.129046Z","times_seen":2,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":117,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/12/dnakXhWRWVTszhXW6uGw1NeZMHIFJE2n5QzjW2uz.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.699Z","timestamp":1789900779699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/12/dnakXhWRWVTszhXW6uGw1NeZMHIFJE2n5QzjW2uz.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352129f256c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"5d216-62d02ec47b14f\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Fri, 31 Jan 2025 16:20:37 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xnfzBTvM%2BLdE9cFiw8vxAh4X2D%2FxjkTqdk4MZnlBJN%2FEIEtMk1hY%2BX7gLeiwyt8PXf2EfxQv3AFw7zSo%2BayDzKwN%2Fn9mxUNmIWOtu3GFvkoliUPHCKPYYn0XsJug71Vag%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 381462\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381462,"size_decoded":382220,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cf2d85e62caeb8812774f7b96c04a166","sha1":"fc846bc61c97b0f3878fcea76ecdfa5d7add34b6","sha256":"6de5ebb9b721504d1a556506d986c5e30f5e50c1c2ffecc6859675fa9a4312a3","sha512":"2321f8a479bf1c011f862fad0554490142f01dc93c2ece931eeeaa75af1aa6e555fd63d67112345e6fdee18aceeadfc749ce63186a086797996de83ca2ae527c","ssdeep":"6144:tSVuPPbeVK3pn+xezuzKW3m1CVf6J2/tM0g6XoU8F02SaiZt1oytoI/HjQpI13S1:tSVEeMZn+xBzKUmeCJh5DUXVOyKQ7JS1","tlshash":"6484235bccaf149fd7423a0b42fa3026b072b835a7955711587dcb6292ed873719f0ac","first_seen":"2026-09-20T10:15:32.297594Z","last_seen":"2026-09-20T10:40:55.12982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/12/65uQrXZ4ZuuIHvNhpk9pdkfonB62o9-metaWmFtZWt4QmFsdHlrLTMuanBn-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.111Z","timestamp":1789900780111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/12/65uQrXZ4ZuuIHvNhpk9pdkfonB62o9-metaWmFtZWt4QmFsdHlrLTMuanBn-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3e03523ba3f56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"99d80-64b91ef1f72fd\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 24 Feb 2026 13:33:34 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zE4diU6a65gHiZqHx7qNPz4aKHq54EgSFWkahuySrfSjaiKJtGUSJernPJaRoU6DTHLdNo3mCk%2Fm%2Fp5z3%2BLJrCOQpnFRSuc9%2FiLWcENMPckB0ynAHFXchgTety4i3Ke7Pg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 630144\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":630144,"size_decoded":630898,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1439, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d59d147c5e4ea40ec345d8a44238a671","sha1":"1a9ff0c55b47da06705b85412e0a393405ff5c6a","sha256":"20aed47b9692a58835d83fa3f59a423cae68438bdd5c865e0dd92d3eec2dbb2a","sha512":"c56559e97cec5f92018ada85f9a9d7c6ea7b195bc7808173a2b4bea10e9b2dd86b6a5f8111e36dc482ef85e543c780f71de0273ba5ce73e6f852089971885953","ssdeep":"12288:R6SUsQajEZJ0IrtWxW1A9jYPwSnCGRciH8rL0rqy+QU0xjQhG70qaR8u:RVRoZbtWY69j4ZfZH9rqy+QUUjWjV8u","tlshash":"5fd4235bbbf4398432759da0e14dae2aa4a0ce200d5e0c7395810835c75efe6dd3fe99","first_seen":"2026-09-20T10:15:32.253388Z","last_seen":"2026-09-20T10:40:55.130622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/283/HX1nHyOJT7ZYT1DS3XEx46x3aV5x9z-metac2liby1kaWV0YS1sb3ctZm9kbWFwLmpwZw==-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.703Z","timestamp":1789900779703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/283/HX1nHyOJT7ZYT1DS3XEx46x3aV5x9z-metac2liby1kaWV0YS1sb3ctZm9kbWFwLmpwZw==-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352129f556c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"17f6a-65802e0dbbeeb\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Sat, 01 Aug 2026 21:20:45 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hUZgs5wnaZ8jDf%2FR5BH286759H3GqkfELEhvGDqh6gHfU1ZHyI3%2FsUdZcymXzOQvqFGGm6E3ogjqOv752xtqUimfVGlWqalO0uqOoy5pxD5JmjAQwOhRXrYltTisXLmLIA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98154\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98154,"size_decoded":98903,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 640x640, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b6664b16db8afa15dc86aa5b50f1994f","sha1":"73e6e2fe77ce89b7bf3a1098acc902bb24f0ee24","sha256":"fedf1a3c925468445aba2de45bed430a9ec47fb54495aec83da0b2f0ed034d28","sha512":"ee6570abbe0e5424f9ce9237874c6f2dbc1103aac962b5de2cefd59374b78f51e70d4bf881bdbcc18840f501b6cf737fe0824600ddee3565e458af70a0d58caa","ssdeep":"1536:gJFM9KM3w0yN/yFncAy7oLPbp0DlmjHQvcRZercJ/CAvxBl3r2X0YUhh7mzfSfK/:gLM9KfYCXmPbK8LJ3ercJxxBlb00YUhS","tlshash":"69a312b7ce016d2a22e46d341c95f78c9bd3f8c9cd9042bba6a21bc4842d779051afd6","first_seen":"2026-09-20T10:15:32.262645Z","last_seen":"2026-09-20T10:40:55.1313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/12/23GXRAYHVZ0yjd9OMyNpw2xD2jqGeq5nV3aChX65.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.114Z","timestamp":1789900780114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/12/23GXRAYHVZ0yjd9OMyNpw2xD2jqGeq5nV3aChX65.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3e03523ba4256c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"b29b4-64b91fe70a55b\"\r\nexpires: Mon, 20 Sep 2027 10:14:21 GMT\r\nlast-modified: Tue, 24 Feb 2026 13:37:51 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDW7jSUhQ5CQYrtuz%2B1MDtmALCngzRkaYzNjOUjUOOljLkfOpvPCCYqSGKbtRuztT3YL6zKxRtuH1kzuEr6T7L4TYa5KtxhxZqw%2Bn2Zm%2Bx9FZiWNa3jVErrRxfs0cOVCXg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 731572\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":731572,"size_decoded":732324,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"52e7a64f8e4fe0381369699b54df5948","sha1":"e859284251ff4b874c674087901c724a7abdf168","sha256":"ed729e848c444ea97e5d687834e81748a54cd1811f706a4570087bf7d849b589","sha512":"c65464d8824fbc35fc2005262fc4b14b87a761e449ff0274baebb538895dea6c75ceb2756992ffb309686efa39fd3127ce99359483cd729e9738ccfc111d41de","ssdeep":"12288:ejjWa2YR0itQ1bHm159sbge3s8DaSRIict5JodIPn8K+Pc2Ubt631Zdai51:wjWaPu2Qk1Hs8e3s8WSR/OJoO8czp63L","tlshash":"f0f423916cf9d8df94317aa274527c234edad8d74e1e43049b2c863ec2be2db8a61447","first_seen":"2026-09-20T10:15:32.256378Z","last_seen":"2026-09-20T10:40:55.132051Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/css/handing.css?1789900779","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.455Z","timestamp":1789900779455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/css/handing.css?1789900779 HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xb99DFgDEPdHTMXUMLe%2Bv44jU55NKyt7a%2BbaRWEoUcFYrhHcT3LDzLStwFPj4Qusii7qIy6bzYHpwVd9LQEgwcIE0qyd0464IN9enWfM2poM82ZqXlagJQr4v%2FRxhNrdLw%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3e0351f99d056c4-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"1b4a-61166a98a1840-gzip\"\r\nexpires: Mon, 20 Sep 2027 10:39:39 GMT\r\nlast-modified: Thu, 15 Feb 2024 07:34:49 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6986,"size_decoded":2452,"mime_type":"text/css","magic":"ASCII text","md5":"2820f1c833afaeed7f8d6f96510e46d0","sha1":"58e2042c716a5b481220f999a49de82e9fe82f66","sha256":"ec170ccfae32447fd3f116b9ffc568c24afac40d80cf03717a7462e718880882","sha512":"c53c2e9dd068dd7177598be3afda75907c3c8140d9361fcd2084cabc8105ca33496413c85fbd7f916f159326dd8c0dbe15337a5fe1517b24a2ac1f92547a28ba","ssdeep":"192:zVIYQTaelNacmUXjuPNibZQ0zSy4Of70JgG8OjLiweNUuZW+5Coum/vK:xcIOS9qsgz6uZW+5Coum/vK","tlshash":"8de1525d0b630464b533c25c17ed1d18237dc043a726eceeb68b396adf17a58a4e3ad2","first_seen":"2026-09-20T10:15:32.246746Z","last_seen":"2026-09-20T10:40:55.13273Z","times_seen":2,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/12/39LMFPsjVl2XSKHnJwGVkND4d6yelm-metaYmczLmpwZw==-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.718Z","timestamp":1789900779718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/12/39LMFPsjVl2XSKHnJwGVkND4d6yelm-metaYmczLmpwZw==-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e035214a0356c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"21d92-5fa3b0d68cd44\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Wed, 26 Apr 2023 10:53:38 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jpJuO0GndOoeNyhcTE9hjlISCSM4FZTXiuW4%2BN4q0OSkzscwVnZRo%2Bnk1aUo6JcZ%2FE4%2FMpMmA44%2BWqo31HiEEHCC41fxYxCqA4LBWO4E1A3thm8Z%2Bbhtu4vrQkgQjTO0rQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 138642\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138642,"size_decoded":139400,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a6a7fe7f0bd44a3a18e5c6a0ea031499","sha1":"3af820220f15af2bfbec5b90e335a74472e285b5","sha256":"9516e228e44c3c29c0c613609699070ded29f45a0a75b827949701cfdd6d4c95","sha512":"2c52c3d9b3891db99d3e59d3252d278e2ea630332c1f3f80eda14b46720f4a30d0233704ddec526019e159d15e7d7f1f35ff47c861189c2be08921ecbb530744","ssdeep":"3072:rZrqoBVhtmKzS2rbHjZ5uU1UeV7apVN7YQVj7bTz/J1TnuO:r8oBNmWbDPuUa87ki8XTz/J97","tlshash":"7ed323829818b3736bb7fbf04b4910ac579d82ec021a3113d4ec06b96963ed5ed9f225","first_seen":"2026-09-20T10:15:32.273268Z","last_seen":"2026-09-20T10:40:55.133402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":81,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/aos.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.728Z","timestamp":1789900779728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/js/aos.js HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w4uSepuxz%2BVa2ZVeF45cw6A9NV4MQsAoxmFzDyQM1bNTTsq2S1dx3Y0GHJSCpxJwFH4iTuqEM5um4PT1oRsPzcWfLcq55dyGXJeV%2FZQyScO02lyR%2FxlqKOqcYwJYr2q6ZA%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a3e035215a0c56c4-OSL\r\ncf-cache-status: HIT\r\netag: W/\"307e-5fa2b93700be6\"\r\nage: 1519\r\ncache-control: max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:47 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12414,"size_decoded":5158,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12414), with no line terminators","md5":"8cccb00f6290db316544b6e8e2e8b00e","sha1":"e1ea59cb2ac42d446b16e4f60dcb9aed9a26d075","sha256":"ea0776169602aa06ca7e5f4f7455bbc86459d46ca900ed665bf9fe077c77b40b","sha512":"23cbabad4cc49ab466f572a79df93c4008fcecc01e91296af515e472b1ec802f7bd2527104e56154138200eea7d2af95bf23301df03fdb94c156d0b4f9b53d17","ssdeep":"384:3PXfNaS8QzGOFEUqF5ZDUbpva23GSeIf+y54:/XfNaS8QzGeEU05ZDU9C6GSeIf+y54","tlshash":"324209ec3144f0a717e7d1bb816fa10ef5f18838689d9051d258d4d23eb4cae86a3e5e","first_seen":"2023-03-07T01:30:58Z","last_seen":"2026-10-13T02:44:42.913811Z","times_seen":641,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.mojekonferencje.pl/css/site/images/obiekt_rekomendowany.png","fqdn":"www.mojekonferencje.pl","domain":"mojekonferencje.pl","tld":"pl"},"ip":{"addr":"104.21.63.224","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.100Z","timestamp":1789900780100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mojekonferencje.pl","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 17 Aug 2026 10:19:16 GMT","end":"Sun, 15 Nov 2026 11:17:45 GMT"},"fingerprint":{"sha1":"21:CB:B7:4F:DA:F2:BB:5E:31:AD:F5:9B:A9:0E:08:2E:05:14:14:48","sha256":"1E:00:D6:BF:7B:5B:6A:2C:CA:DF:85:6F:F1:DA:F9:05:C6:9C:85:E6:E8:13:D0:21:59:56:12:48:27:1E:C1:EA"}}},"request":{"raw":"GET /css/site/images/obiekt_rekomendowany.png HTTP/1.1\r\nHost: www.mojekonferencje.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Storage-Access: none\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 03 Nov 2023 11:12:59 GMT\r\netag: \"6544d5bb-1c1f\"\r\nstrict-transport-security: max-age=15552000; preload\r\naccept-ranges: bytes\r\nage: 43\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6oI4UMV9Vd0TLlE%2FVGuxsVrETp3VtHisaPvRZRPBNBNDu9XK8pYbH5qwEW%2FCR0CHY%2BDLTEk7o0wJ0jGBjcjm4ELB9qupzGy4GxA3JUCtaLuLyuWEf%2BFrvIcjYisMiwcdfCoCkC8kARZj\"}]}\r\ncf-ray: a3e03523dadc2678-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7199\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7199,"size_decoded":7990,"mime_type":"image/png","magic":"PNG image data, 146 x 146, 8-bit/color RGBA, non-interlaced","md5":"6a63b73accff4864641dab92357cadc6","sha1":"b1d67bdf4b4310a9702c449827ef5c36c8c7b60f","sha256":"7294dfa762cf60d2c6991e73f579654882e8bf3a52fe5bfa6a15f257c87a970a","sha512":"b4552221f42de5a446731262712dbc363f266e6275358811a0b72e0176566c4432631216d44c3d56421d1a82baecc36ea0ecb02c23a97ad8acd7876d7adc4cd0","ssdeep":"96:wnVngoNA9qQ4HmjWiZuh+ak47LPs1+m9z7Xt9POlMXNZ+YbFfeDhFxk2RQmIhpGv:U3APfq3exz7X/POu9fp2hM2uGv","tlshash":"2fe18e070ffc2580dee75dc69774d18504db5552299f52deac9c2a1e28329d9b13c328","first_seen":"2023-08-17T13:15:36Z","last_seen":"2026-09-20T10:40:55.134492Z","times_seen":8,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":12,"connect":16,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/font/Spartan/Spartan-Light.woff2","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.107Z","timestamp":1789900780107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/font/Spartan/Spartan-Light.woff2 HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/front/css/main.css?1789900779\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e03523ba3c56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"6aac-5fa2b93a3be6d\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:51 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=demTN%2Fbcaz3j2zTqL%2BxGI0njdnBD5JgRzRO5bhxB%2BAa0FUjgvid%2FMOAlpDMN7mOVGuu0s6KbPimrxYxBhiP3dO4Jrehag8lyM9lfJYFnQabmbgVEn%2BtGFrc9MuEcf7qYXA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27308,"size_decoded":28065,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27308, version 1.0","md5":"a567a72cd948f98fd4b17ce978aac3f1","sha1":"74d9981283f7c7957265c4861eee8581b8b3e056","sha256":"437d8eb8c82558cd88eef262a0838e4321bfb6222e462a66a5b4f52878303eee","sha512":"afc96d66b0047099c94004898e92815232d15ed9a8aba52aad01d482ca30ea4846cb3d50299d3e187211da3f67a121cea0646361250776447197f57298672302","ssdeep":"768:0Rv1E8CepNdm6Z2C50ISitB7HhT5jsLcTnKDwlp8:0Z17VpNdmkWTiz7HB5fpp8","tlshash":"1bc2f1be7134e3c9ccceb4301b80a9439d6f5c6d252e1a5c9702ef23722c8d7626850e","first_seen":"2026-01-25T21:19:49.336831Z","last_seen":"2026-09-20T10:40:55.135034Z","times_seen":4,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T10:39:37.907Z","timestamp":1789900777907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kRMuw%2BracG2AcbtF%2BGGXVgk3QkSnXZhT9oBrZOnVYoPUradk13PWvffI6QAqPiviOrRXNhOUQ0VpExMPZdWjc9B13v7vlPkKl73pMCk8QT8uDLzj7CK9%2BSErICOEeBpD9w%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3e03517992756c4-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: no-cache, private, max-age=31536000\r\npriority: u=0,i\r\nexpires: Mon, 20 Sep 2027 10:39:38 GMT\r\nserver: cloudflare\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; expires=Sun, 20 Sep 2026 12:39:39 GMT; Max-Age=7200; path=/; samesite=lax\nzamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D; expires=Sun, 20 Sep 2026 12:39:39 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-20T12:39:39Z","raw_expires":"Sun, 20 Sep 2026 12:39:39 GMT","max_age":7200,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; expires=Sun, 20 Sep 2026 12:39:39 GMT; Max-Age=7200; path=/; samesite=lax"},{"name":"zamek_leba_session","value":"eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-20T12:39:39Z","raw_expires":"Sun, 20 Sep 2026 12:39:39 GMT","max_age":7200,"secure":false,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D; expires=Sun, 20 Sep 2026 12:39:39 GMT; Max-Age=7200; path=/; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"bxSlider","description":"Add a respsonsive image slider to any website.","website":"https://bxslider.com/","common_platform_enumeration":"","icon":"bxSlider.png","categories":["Photo galleries","JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"CookieYes","description":"","website":"https://www.cookieyes.com/","common_platform_enumeration":"","icon":"cookieyes.svg","categories":["Cookie compliance"]},{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":578445,"size_decoded":331683,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (19786), with CRLF line terminators","md5":"f39bc3c4137e98e7ece7fd4e7fe528bc","sha1":"5877077d579e8aa2c2548d1dbdcf586330ec437c","sha256":"871cbcb8da7c4c5b35def54154cadc4ad876dea9b19a20c7f12415bdfa6978e7","sha512":"7d5c9675442ed209abf53eac59ed612772ac27a8ba5b365eadf28d75ccc558d34cbc98d803ce63f90470656f944dda804a03f7ba9cdb1c5f4d832f7b3e3aadd1","ssdeep":"12288:qIDk52yoFJqqVJ3hML9BwMaYOdkKSQ6HywrRgHFwig:qIDaoFJVhMpBwMaYDB74g","tlshash":"68c48df202a9258e11630e44d01e3f0aed8cb797b231cd817a9cc51fabbed515d2e679","first_seen":"2026-09-20T10:40:55.135516Z","last_seen":"2026-09-20T10:40:55.135516Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1356,"timings":{"blocked":-1,"dns":235,"connect":23,"send":0,"wait":1092,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-cookieyes.com/client_data/802ba3faf2547cb9b9981071/script.js","fqdn":"cdn-cookieyes.com","domain":"cdn-cookieyes.com","tld":"com"},"ip":{"addr":"104.18.18.62","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.661Z","timestamp":1789900779661,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn-cookieyes.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 01 Sep 2026 02:58:25 GMT","end":"Mon, 30 Nov 2026 03:58:12 GMT"},"fingerprint":{"sha1":"F5:3A:BD:D5:13:C0:EF:4B:D2:E9:56:AB:13:62:FC:DE:57:44:74:31","sha256":"08:1B:49:E6:CF:61:D9:22:DE:23:7E:00:39:FA:EE:76:28:49:BC:F6:3F:7C:9B:06:BE:2C:26:D2:5B:B6:A3:D8"}}},"request":{"raw":"GET /client_data/802ba3faf2547cb9b9981071/script.js HTTP/1.1\r\nHost: cdn-cookieyes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nx-amz-id-2: gDFXRCzPex7bXmSLHvKRJCqFMpD1hvFSjDP6E1XAulqOvsyEb0fwODgOSLNrpDnj05AeG6uTCdcBnR44yZAKrF1R7IsMcOaj\r\nx-amz-request-id: BTM84PX4ASGW1TDY\r\nx-amz-replication-status: COMPLETED\r\nlast-modified: Wed, 16 Sep 2026 02:05:09 GMT\r\netag: W/\"a6740a1e7579c6a920665d29a474da08\"\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\ncache-control: max-age=0, must-revalidate, s-maxage=604800, proxy-revalidate\r\nage: 374544\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\ncf-ray: a3e03520fcd535a6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15113,"size_decoded":5906,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15113), with no line terminators","md5":"a6740a1e7579c6a920665d29a474da08","sha1":"6b27001015753f6a1c9e2c4f3b64afa73159b1a5","sha256":"da9476d30c5ecbe44ada6dbcb9d89ffdc389bd90bb718df7f01ed3577b41ada9","sha512":"1e68826af32d3fe97627a50cf32a427ac4856d0acb9dff932d39caa66d5b47aadccc415846ebacb56dcd4227bb395af8209d830b7122229dbfd28d90c5b4512f","ssdeep":"384:WqZV8dIDoxCUeib7BkEKZy0qhaRA7/tNKErE8MotaUVkc6T:WO4IXLuoZy0qhaRA7/SEkStVR6T","tlshash":"a262a794b7e174b2039370b4913f5a0bb37569b4644a80b8b264dcd66cbc48ed637fb8","first_seen":"2024-05-17T08:41:44Z","last_seen":"2026-10-15T03:22:52.973012Z","times_seen":1501,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":10,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/arrow_bottom.svg","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.692Z","timestamp":1789900779692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/arrow_bottom.svg HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3e0352119ed56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"e0ce-5fa2b93e25ddd-gzip\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ByQ1I1bCd7zJbdwp4Nx64lat47lQLecKoPIRhraB%2Bb5SbLMkAJIB4NRR9TBQsRZ6FtjFdkWdOPADQhfuqK8CLkFLmRnEo4hTv%2Bmw4GKfrGahUPA95LgbhK5ze%2F1a6gUTLw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8561\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57550,"size_decoded":9365,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"34c6e068609f92062d304c59b44157b4","sha1":"13aa4634c20753e9895e58ef6b61373aa7efbd12","sha256":"dc0c462dc30736625912ff5d48f65370ba81f4cf569f8f89097b9b1d6e304a70","sha512":"9710480a339e1a0f45f27618a57c1d4c9b2c6d011d28a57a4cd02011bd2cc91716309d16b7e740485785da4b1a23e30b875300eafd02cf0ecb5968b6d09cae34","ssdeep":"768:d0tWO7gQB6uonv8abit2L9v0B88Ic3bFIHtYBEobBGhsyfTuNBsmHVGJAwB974qf:dvWu26","tlshash":"1d43ac08a3d4193f247246d8e7e2f54651372aa32f317a6e96254332c90f6fb61bb4cd","first_seen":"2026-09-20T10:15:32.27595Z","last_seen":"2026-09-20T10:40:55.137195Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/243/uCiP5Y63rcJSxLICYnKAVRYTXeh8ej-metaMzQuanBn-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.710Z","timestamp":1789900779710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/243/uCiP5Y63rcJSxLICYnKAVRYTXeh8ej-metaMzQuanBn-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352139fb56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"a5430-63a5a66c2e485\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Sun, 20 Jul 2025 11:10:05 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IimNuWncOc0iYJi5Fj6WsZHhk0szFNhgzGSycYMebXc%2BQxbb5p36fEGTUIyjKab0sUKL6zrKaIPSiKqLx5ql7I4YSi9qHHVh71tvTD22x8A4XoBwGY50skyZ1NrAmMv%2B4A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 676912\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":676912,"size_decoded":677662,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1078, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6e51628867f9c80cdd64dc013a99100b","sha1":"fa7ada6a4437a1171077713772686c0253768e9c","sha256":"835147433a98c3c3e46da3d155f3f5c5a0e62f07793695e195536f4a655d54bf","sha512":"91da2168d5a407b6772a9996a3eaedb1f67a91c9112bbd622576a3bbc74b0586256d81256e6bf2578c72f03d3f07486ac960a9a844340f5ad042931a48c43cc2","ssdeep":"12288:/IUFLTAMCjrp9NdIknUfaPJ4glJuhBRTspZyPBc8+XrWlDLpat7yGt25:AUFLTe9LOfaP7lJ4BRwfOBcvrWj6y15","tlshash":"ebe423d2becaccde6760b35e4d764af20c2602334560cbf53d20658b65d09ad4eafb84","first_seen":"2026-09-20T10:15:32.280738Z","last_seen":"2026-09-20T10:40:55.137762Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/86/7HTAKuqfJLoXKkLAbnbfUsJ4e2El3C-metaMjAyNDExMDQtxYFlYmFfZHppZW5fMS0xMjQuanBn-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.717Z","timestamp":1789900779717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/86/7HTAKuqfJLoXKkLAbnbfUsJ4e2El3C-metaMjAyNDExMDQtxYFlYmFfZHppZW5fMS0xMjQuanBn-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e035214a0156c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"3332a-6325d2c05c5c1\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Wed, 09 Apr 2025 19:06:52 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfTH%2FiULfEvZ07P4VXLCpFl%2B54jWI9an5RZgB1g%2FB0YwG%2FukFESHSpJ6IvhzamJEWybOmVMNVXWxyUTZL%2B2BaN5LOun7XO0OO6z5zl2XulnZtQyPGhO026IRcaaDeJfRsA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 209706\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":209706,"size_decoded":210462,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ec10c4c32453ead6f66f2cd1f962b11f","sha1":"81277b92846b28548ec8eac3d64910def1c54ed8","sha256":"dd42c62c79c842d7e3d11b26575ef4bd510d18490df9a53807743e684acea407","sha512":"80b970d4eb5d7260123cdf35ffba0f29925b93708ea34314178e0b1281c7b043097806adb0dad8f389ac5ed8206988f378e7a54026538d0a372de3fc9d08aa13","ssdeep":"6144:jrJOFsRxGmEob9HBBG4Sb0vJMlnLCeWJmD:fEFsRQm9ZBBGDb0vJMlnLkJmD","tlshash":"c62412a2751e9c2a241839608df5e9e69d6da6d01fef27150f331d03ad0fba4cdc0a9c","first_seen":"2026-09-20T10:15:32.240977Z","last_seen":"2026-09-20T10:40:55.138391Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/owl.carousel.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.726Z","timestamp":1789900779726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/js/owl.carousel.min.js HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gk3OcSFqItsIKe%2FFbC26wo%2Byw8UUnrzxA6vFGL2cbI%2FRxWQuNmFjYEA4MInA8X9kKZLN%2FeRHM%2B3POoA32Zdsqx%2FXqViaU6DRV56fM3VH5XclpT1vzG%2Btq%2B5YB0u%2FFDv%2BNQ%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a3e035215a0b56c4-OSL\r\ncf-cache-status: HIT\r\netag: W/\"ad36-5fa2b9375a96a\"\r\nage: 1519\r\ncache-control: max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:48 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44342,"size_decoded":13396,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-10-15T04:36:09.114461Z","times_seen":72383,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/logoblack.svg","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.690Z","timestamp":1789900779690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/logoblack.svg HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3e0352119eb56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"14ff-5fa2b9417c5e5-gzip\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ajnLDryp3ALYyDx6jKMPbcWCOc4tJJ1fwq5%2Bh4%2BSYxV%2FsNYZ%2F2uoChUGhBrFm%2F7tnG7b1JxVDef6nqp67lyuHDqegplNbJsNYuPvEnv3V0ZDNReLvXNGrd19u9klzLFvCw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2229\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5375,"size_decoded":3037,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"146204821b30ea66fcd2da88876984d7","sha1":"a03e4ad882a9431eb760db27fcb6a4a70943b06c","sha256":"7369e6646f0a376831206f7fa4c4a0e0f0e20d49b12c6843aa4730aaea26d1e6","sha512":"e4ef30fb03aebe9b1adb05380e65de04c07aea815e5a698c9c618e96df1f91009f18dabbacba38658c439b7907b347f66311e9f6577b4790c08139a39eeff870","ssdeep":"96:hQXWXQUZWgb4LMSVL73TkaLtCkSLUur7d6Cvo3VLFLwtjLUFBUbEikocEYvJ12gP:hQNUZF4LMgL73TkISLUAJRvo3V5GwLIm","tlshash":"99b18498ca124df8790907c896f00c243b7b841f647a4badddabf7317813da4c966a5c","first_seen":"2026-09-20T10:15:32.236024Z","last_seen":"2026-09-20T10:40:55.139471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/139/pAAVIboQtekIHibkHrK84dIBE6kTze-metaMS5KUEc=-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.700Z","timestamp":1789900779700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/139/pAAVIboQtekIHibkHrK84dIBE6kTze-metaMS5KUEc=-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352129f356c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"cad6a-641c547af341d\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Wed, 22 Oct 2025 20:37:07 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IQvxz035LjnpyGGABN2tBTuuz%2F0oilWAsIAEVK6jsVWAX9NIuPcZtXYi%2BD42JxaWxahb6zxw84DXKdw7jZNZ4EqMwYkZhCqQiOlOxtStWhswCw27fxnumOt3KiSJJLYn2Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 830826\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":830826,"size_decoded":831576,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x2320, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"01091ef4e02c82f114c3e81b10392148","sha1":"743240c935cff12cd8e8fcd57b67e9230ed46fdb","sha256":"225884b37e8d24b6fd73daf9f0a10e93b49c6722a16d23b6e97d3eade17806aa","sha512":"2cdeee8e6913a08809092a5e2417c10b5f7ce9132fd04fa342aec090c5be861a28fe94252c3e163e0f574a6e28a11e41ea6b7df38041b84fc5df4d83d6c68156","ssdeep":"24576:C60j3U14E2rBhv9vYElc7WXiQcqL+5QayUA:A3U14E2lhv9eW/c/+h","tlshash":"3505332f0acbebd526566bf70abf5346e6ddd4c47c011bc3a580181a167cce086ab4ec","first_seen":"2026-09-20T10:15:32.302551Z","last_seen":"2026-09-20T10:40:55.140307Z","times_seen":2,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":188,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/228/jqvSncee58nHEkIGsi3pKMDkdcbXao-metaUFNYXzIwMjIxMDI2XzIwNDg0Mi5qcGc=-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.705Z","timestamp":1789900779705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/228/jqvSncee58nHEkIGsi3pKMDkdcbXao-metaUFNYXzIwMjIxMDI2XzIwNDg0Mi5qcGc=-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352129f756c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"266dc-636872fd386db\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Sun, 01 Jun 2025 18:55:11 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RRF6HcuqGLy5EXTIVos%2BIPokZSl8486vKSuqCIIErQxIBohlSWDESfg%2F8Xs6GnHQt5N%2FANIOp%2FZRSCgXAarn4pqbhNgIoOxCst7vpEhnlvmheY8Hr48am1zwW4ovxeR0Cw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157404,"size_decoded":158158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a6823d59d38f542f80be62ce950151c4","sha1":"7d83bd8ba962644341aa252dd1d1e846f1a40813","sha256":"f2d97a9ca77a9a3a7e3a9a9a13aba6fe783a317004ee7c7d5d3de6a043c71fad","sha512":"78a42c5b7e858a15193fcb036cde896655bbd297da7ce31d042b3ffb3e22e527a0875c55128da823497b477dea030956862a2c62be613421b6a21874ca8cf69e","ssdeep":"3072:VQIjE+TS5aNE0W2weM0wP9VwFL6mC+LDr5CxGeEd+GhckQX:VDBS5aNLmmwi6m/LDw8BhcN","tlshash":"14f312e0b8570ea3c36bf78020189417d67ab7e8f049872535494fef5df626a8dc1a1e","first_seen":"2026-09-20T10:15:32.320858Z","last_seen":"2026-09-20T10:40:55.141027Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/138/fwxYoOeR7If68awnHzjnAbwiPkRSzk-metaWmFtZWt4QmFsdHlrLTUzLmpwZw==-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.713Z","timestamp":1789900779713,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/138/fwxYoOeR7If68awnHzjnAbwiPkRSzk-metaWmFtZWt4QmFsdHlrLTUzLmpwZw==-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352139fe56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"140af8-64b53c3c743d5\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Sat, 21 Feb 2026 11:23:19 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ad5ve3OICQPpIeeoA%2B2g0OU1gEmFLd0LSRaFKOCT8PpBmGSwLYq%2Fg2v8HktjdWIbqWKPSTtbonY%2FaeVQ%2BV%2F%2FYko13HmNp5I0HlV9Ju5l0e0cU7FUwd9W3yPJoCNhK52F1A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1313528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1313528,"size_decoded":1314288,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1439, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5352277328183be6afa4741e9e623032","sha1":"34b199371e040a262a4b4da6f8a99e2af6a2e7dd","sha256":"d322fbf8707b207a9bec654f9bc6619f5a31e2da262c262a0e342a1665c5deb4","sha512":"76b9c9a1ee7c3fb5697051876a0631693d787a78309df54c4e5398b2e164a3cf99ba6abdd1d84c6714a497e27ff502a169aa068a1fb90221c32d942f012777a1","ssdeep":"24576:8HlFr0wPBcoozgjyf1Gder2Dhw+EeToq6ZKMWxjPB0Wexkx+ddIYp:8HljPhozgjzW2VOKMWxNuxkx+D","tlshash":"5d25336a0a4e7936bceb0128ce7ace69c1b1873356400cb9179d40f276e9e57c3b5ed1","first_seen":"2026-09-20T10:15:32.283295Z","last_seen":"2026-09-20T10:40:55.141651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/jquery.nicescroll.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.734Z","timestamp":1789900779734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/js/jquery.nicescroll.min.js HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOK1acprvGEiNT6IPfkZ3Go%2FVnnf8aHe%2FE%2FGDA1wpKCfQx81YMondhep2SdI7a81ihCKqVyQlRNI00fYsnWC60CxhysEGkbAiytEXhxRxhBkGTBQ%2Fy58MJ3CdveyUD7a0w%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a3e035215a1056c4-OSL\r\ncf-cache-status: HIT\r\netag: W/\"ea6a-5fa2b937c508f\"\r\nage: 1519\r\ncache-control: max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:48 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60010,"size_decoded":18761,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59928)","md5":"d247c9568e051b91d27ba6901447e8b0","sha1":"25fbb66bc92f7538edab6575cf57c4391d7adb17","sha256":"2c991660c701f37fb337c54edc49d2a0d607881a3dde688e178ed97ec3d23434","sha512":"ccc7eb30065802534294f2a337e24cbac94afc1eac3ccd3d046beb5a55be7329a63e6b144f5c491773f893123794e87dcf2a5a912816693a58eaf0c963fdc38a","ssdeep":"768:kJza49Lluo96Hj113vGPPjDhiz7o2D00SGwcZ:kJl673AjUz7oYUAZ","tlshash":"fc43c6ceb521706a01cf9236d0cb4746613ae55a670a84d8b138dcf82e75ab5b237f7c","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-10-15T02:28:03.633576Z","times_seen":2613,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/love.png","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.773Z","timestamp":1789900779773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/love.png HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3e03521aa1556c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"465-5fa2b94196bc7\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:58 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XVsYuJqbwNcYnWC2neQp7riTucEwcmVO7k5I3ZBWRNW8QQiC4zXib9gUJU34ByVSrY28I0Crv%2FToaxauuu6s%2Fa7PbiZQCKreN9yxVugkQY1k%2BCxSoVMRLJoMVXoyxzcGeg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1125\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125,"size_decoded":1872,"mime_type":"image/png","magic":"PNG image data, 15 x 12, 8-bit/color RGBA, non-interlaced","md5":"438176be5678812311637deda00b8a48","sha1":"cb0e82c93da9a5a1c365ebf4f64b7652408e3c16","sha256":"b97f4479fc5bcff99f1190618039219f4759384d888be9c74842370f67ad8deb","sha512":"55e5d909109e4c0c06756947a1f20c11fbbf03152963e3b9f42a993e2f31fb798054ed3f69516bb4d1fabcf12ff1a1319e2353683c029a687a5441c6c928fb14","ssdeep":"","tlshash":"3f21268dfd83d8409565ed962cd642124f230664a9e1e45b99cec0171ab46f94c15fd3","first_seen":"2026-09-20T10:15:32.287384Z","last_seen":"2026-09-20T10:40:55.142751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/logo-string-black.svg","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.694Z","timestamp":1789900779694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/logo-string-black.svg HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3e0352119ee56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"f5a-5fa2b94162fa4-gzip\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q6SaqQzWR65YDxVbUvjbUsM4vIxR40OvHttnAKKKbdev%2F2%2FLatcD7VA1%2BZGqfttGGL%2BgAR9uxJj9wz99T1A26ATz4nM41Qbw3HhlTCyM4cYFb93%2B0dBXsAcjygDE8UikRQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1786\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3930,"size_decoded":2593,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"74eeec3464a10b190ef6c371bfcf4eb2","sha1":"b42dbc32511c279421c04e7d649af875961c1bf8","sha256":"e8ca4821702a9fe8c021aab0945c4595fc1fdcefb3dc0091881578ddb149d2bf","sha512":"ca9e108992ea71b760c447cc2ea577a44faa80f8b274d5b26f7d423578dee7189fa0fd806a9487fc36ee371c6024e58908e607884a8fc56c8df9a56a8243cb57","ssdeep":"","tlshash":"2b81957caaa094eaaec887c4a4f04a507bd7809971758addd169e3736c12d70ccbb90c","first_seen":"2026-09-20T10:15:32.23918Z","last_seen":"2026-09-20T10:40:55.143384Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/font/Migra/Migra-Extralight.woff2","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.105Z","timestamp":1789900780105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/font/Migra/Migra-Extralight.woff2 HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/front/css/main.css?1789900779\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e03523ba3b56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"c70c-5fa2b939314c0\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:49 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2B44y1SOmLRr1vkoAbBHzyJ8NuGHG9IwwMfjEwLfdaCZZO5LAVMc4bqXqe7SwaFENcV0%2FaBwXtQ3vSzpHx4QKj8K41jOD7hPyqTSLOmuNy7r94oxieBYYejuhtTR0lODcQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50956,"size_decoded":51707,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 50956, version 1.0","md5":"52f2d2dd510bf49793bf1afbe5cee5d5","sha1":"b2926283548b545a01cf5dfe7430d65ad1f9fd5d","sha256":"f2744e9619a2509416cfffdad408ffa80e72ca5264a306c017f708946f3a7d8c","sha512":"31f0b8d78dc3a8a2efc8b355e2ce8f56f3efbb7c4246d35c2e3440b0433daf295c6d94b456d4b968f39a735dc029448fcd00e83ecb8ae73eda3f4ec27d8f9450","ssdeep":"768:TDCZm07Y/WDNA3BAJsGPpAK7wW9KNNqFcTSnE+AcrGY7Q5mEeHlqvTYU0bZQx:TAY+RgaJsG58AKN2Prr6mEeHlqvTmqx","tlshash":"e83302ad2724422aa0dcf63c9415ac85f4a32f1456bddb8c67134351f5698ecf7ca734","first_seen":"2026-09-20T10:15:32.284332Z","last_seen":"2026-09-20T10:40:55.143964Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/font/Spectral/Spectral-Light.woff2","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.110Z","timestamp":1789900780110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/font/Spectral/Spectral-Light.woff2 HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/front/css/main.css?1789900779\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3e03523ba3e56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"14b70-5fa2b93cc746c\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:53 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3hFLNwB1%2BKrxajX0u8VCUOY3V9TO88zY8GpyTtjAB35Gu5ZPY0BtGiXl4hy4TQTLxj48B96WzUkZKPJq3JyNHmVxD2PmlkSdK0EDqixtQvcmNMvUQs601sVRzJrRq%2BsyQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 84848\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84848,"size_decoded":85600,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84848, version 1.0","md5":"d3960d9a9e86728cef30640009fc9346","sha1":"66190dec7eb7886a35ac700d234e53ad4d8a7694","sha256":"733b1975a4c0f21e927cf9179bbc907f71522b0f3aaa7c91ce6d790350aeb2ba","sha512":"f6c4512df148e0185abee4e526c99099c08a4e273267cf00a6d2fdbb6475ae16f79f757f1ff1f0e221ef315fb872923e01af1e73b2fcafb748b6077edbdf1773","ssdeep":"1536:db02crUmaoaC+cktW7YrSL7SsF0spcnpyJHccjVMqFzEyYn2p:qBQroajcktP80ScpyJHjMcznYn2p","tlshash":"f48302e3e24bb7c99a67bcb596e41f025bd620a06b9045b22f82f7d011ef51013cd1ee","first_seen":"2023-09-22T20:22:49Z","last_seen":"2026-09-20T10:40:55.144606Z","times_seen":9,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/12/l5V6ghNrF3JfW72VZoOVVo4sD9yyT5fG6P2vjiwo.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.112Z","timestamp":1789900780112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/12/l5V6ghNrF3JfW72VZoOVVo4sD9yyT5fG6P2vjiwo.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3e03523ba4056c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"1ec55c-64b920948de4d\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 24 Feb 2026 13:40:53 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZJB0CglSmkc3CtOuKWr8b%2B8sEpbnhn1Dm3BiJ9j9WiTb8b2PxxDoGLpdAzWxHyTy0P5%2F598d5I8EROEoLnfjG15q8BxoWCeGYap8pPtrfkkFnjgLAmeEujCV8CUvChPIvw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2016604\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2016604,"size_decoded":2017356,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x2880, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1cf0a118f64b649ab62d97a2b09b518f","sha1":"dad6a11020e516281ec03f0be724fc7ecc438753","sha256":"8a5366d2a79be4cd91057019ad67b71c7b9a6594e6f1ed6855fc68ce1422d56d","sha512":"cc814d0f69f4102df1a77ca6553fc34228f97c5072feebf36a01a51b054fc1a757bdc1f3dd6a04596cd8ca44ff4fb579f89bfaa738f3856835d8b0b0f661368b","ssdeep":"24576:9vvvS00vExjj7q7DFHWB/J1IQw9vAXz7Ua:9v3RJ7q7RHWBhMIzD","tlshash":"9a2523568066f5851ddb3beb801f03860ebeb8805ee16b416099116d74ef1f73ac6a3e","first_seen":"2026-09-20T10:15:32.264232Z","last_seen":"2026-09-20T10:40:55.14513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/img1.jpg","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.113Z","timestamp":1789900780113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/img1.jpg HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/front/css/handing.css?1789900779\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a3e03523ba4156c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"2a26c-5fa2b940084b4\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:57 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2B2VNWpRbghoZTFLtaiYJWEWedYZKBXbQHQHpYKyuzR8oxqomZ2bIvu1lL44CM6RqtUNFF85g4IQGLy9u7D2wRHOdjHXj29FRQQxDBYUap2ebkTK0rVnKc2leL0Anp7FdQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 172652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172652,"size_decoded":173400,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 744x1241, components 3","md5":"0ec67f99b108aa9835e939fcb0897a6b","sha1":"6210e5f204382e85890d1b6e08ed6bbfca4386fe","sha256":"c8ca2b115bd037732cc7dffe0bc613eb067a470af4ca36d5f54fe81fa5ae2458","sha512":"cb8f3e2902c08a9575f0fd7a334de72b3d9e341e0d8b80b1c9bce2260c31426d2038ad98009c0e830287dbbc0f8b2920bfbc3c6f867a90d0c5c3cca1d3347108","ssdeep":"3072:0sSnxz8S0K7BDpYN2OBrYsstyVMx1PZSxCiR3vHSWNbWRbMNdZycLiH4n7:azVR99ecssHJZEBam7zd7","tlshash":"aaf3123e022351193088ea67d5d79e5cc4bf92f5a7c6e826688373d3ac062c7951f6c7","first_seen":"2026-09-20T10:15:32.227254Z","last_seen":"2026-09-20T10:40:55.145687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/build/assets/app-9f56d488.css","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.450Z","timestamp":1789900779450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /build/assets/app-9f56d488.css HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVB4p79r4I%2Bw4dRHgZT7m88guQIcFaDqOFvyJyVvkniDC6fmgIuxDQ9kadA6Eit2sLAuvMFIkxtvexxR09Er2to%2BckBuAp3Pj0aGAz4x05cQhAedg%2FhqdCdWf52dYMt0ag%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/css\r\npriority: u=0,i=?0\r\ncf-ray: a3e0351f99ce56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1518\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"1d632-5fc09cd338392-gzip\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Fri, 19 May 2023 10:58:31 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":120370,"size_decoded":21911,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e1fef64ef3d2decd55e551e2dbc92625","sha1":"2de7d04ed650daf10f9bf2642930fbc8b7659751","sha256":"9f56d488d19e23e6afb04ad2914773be824cc75cfcb9eca1f1b12c901d6d7952","sha512":"ed096fdb3be27244a7bd4d94014f764df89ed20283a073e896225310d1e049f6cf060365bf04d9ce12ac8769fb9425bb867f5a15603d61cff569be1f2e195caf","ssdeep":"3072:Y8Y3Edf+Snu3HKsE3R7+dx6E7+8EPDj/1czQ:Y8Y3Cf+Snu3HKsE3R7lKEPDj/1czQ","tlshash":"14c3835d7b0d4029bd2782a392de7a4ca139b084de3118dafd2720554ec2fe63d77b68","first_seen":"2026-09-20T10:15:32.268249Z","last_seen":"2026-09-20T10:40:55.146297Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/css/heman.css?1789900779","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.452Z","timestamp":1789900779452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/css/heman.css?1789900779 HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZoxCaN6HYbSsnmkBnr0g2E827KpHP4%2FE%2BBsUpyTl8je2ZJCo%2FwIU49y9DNJY8PR6LtKq0djDEgM0EwGDCL4UhHJgWqG0cfISZ1MdoxXEBcPrn3k5PRAh%2FCZIOuNkPmDimg%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3e0351f99cf56c4-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"22be-6114058c2bb40-gzip\"\r\nexpires: Mon, 20 Sep 2027 10:39:39 GMT\r\nlast-modified: Tue, 13 Feb 2024 09:52:05 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8894,"size_decoded":2612,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b5ccf89dc880686dbedb76a6a027932a","sha1":"7f2ae0cc1fcc4310827de15d9ff235a31f652385","sha256":"8ecebb27e0cf3595fdd904cdbd81c7264b5fb321fe416ad7231cfaccfa7564af","sha512":"4fafa75a1a53cdc303a9c9051ca197c89b932e9dda6844d7526fe539866cc249779352cca38b90b32913e33ca4802e3d1948d0117bf9970bbc5e9f7f9ff119c1","ssdeep":"192:VJJamJamtrBXDrthuBfOXbVDY3mru0zAcPLAz59UV4r2ROWWzkxWtjMBAakOQRGG:3JamJpHzrDuhMVM2lzAsLy9/P","tlshash":"4302cb94c9166104733ba3bad7f20229ea379087ef53085db3d6e9852b7141c7a67ee0","first_seen":"2026-09-20T10:15:32.300819Z","last_seen":"2026-09-20T10:40:55.146844Z","times_seen":2,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/242/wox00RBckMzbN80OIT7e7i7vVaO4iE-metaMy5KUEc=-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.704Z","timestamp":1789900779704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/242/wox00RBckMzbN80OIT7e7i7vVaO4iE-metaMy5KUEc=-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352129f656c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"98e1c-63a4e360bf026\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Sat, 19 Jul 2025 20:37:28 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vfg1xvBgjrWw%2BTuvYn38xn4A21rNX%2BCm7%2FCtntIb%2FPO%2BcTHV3rTpNWCrGdMmQJxOesS%2F3YfvDqM%2B9mnFI91aNGxU5L0be8Deyk9r%2BWsErlZZfzBtxHDfqJFLER5dpU5vWw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 626204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":626204,"size_decoded":626966,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1367, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"09dc22cb43c5969fd2ac5c363847c612","sha1":"33b0a339a13d94ced36bd2426f0ab9184d02db3a","sha256":"260a05e8dab2ea732d66a59e6a85b40694a887d8e1d2d3242ca5f5ceee13ead8","sha512":"e5645edc5214fcc86b4f38332277335aa8eb9962352b7b92ca569f23b4c80482a5be668c7ef9591e66b1b4f8dd417ac8ecdc58fd8c6e6aece90e6adac1339b98","ssdeep":"12288:2lX5EfVK/j9Ff+7gcdotIHsWHMByyltuhYCYNEKOq8iVEsvlM3:2lXPJFf+LoGsxyyltcTq8inm3","tlshash":"2dd42356dc9eca7e75e36080f2578038ac18075ef0ae57106b35ab8fa7b7080ce4665f","first_seen":"2026-09-20T10:15:32.279834Z","last_seen":"2026-09-20T10:40:55.147449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/267/TtYJSK8CTQnKNzVDazEkChzPfNu2TK-metaQ2hhdEdQVCBJbWFnZSAyMSBsaXMgMjAyNSwgMTFfNDZfMTIucG5n-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.707Z","timestamp":1789900779707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/267/TtYJSK8CTQnKNzVDazEkChzPfNu2TK-metaQ2hhdEdQVCBJbWFnZSAyMSBsaXMgMjAyNSwgMTFfNDZfMTIucG5n-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352139f956c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"34ab2-6441949ca080e\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Fri, 21 Nov 2025 11:41:03 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ALbFH4KHsixLbklsSoFnA2JTxzgWXBg6Cuf3sN%2BrzAfRi6DyEgbaFkpIUZ4n4ht0v%2FXTpd78zAicIo2hWjinmJpGwsTL4n9pMtt9vzIwrXEVRdLTkIgfJk%2B%2BZCyJNrzwmg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 215730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":215730,"size_decoded":216484,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1536x1024, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f445e0302552a701a7663b88f20650b","sha1":"02ed2e05d43c9a95e85f865dfd6fca4b87f23909","sha256":"6dd4c0001e9f1cb210f0707ebda724c41e7d6ad99d3ac7e4a65ff2627f7383ba","sha512":"4134bb20a8705abe28b38bb04c560202b610fa9e94e8ab593a17579118461b3b84fff1d3873d29dc970cbb8777081140acce16bb356306ef1dfdc3ff844c87da","ssdeep":"6144:9C9oT61m1fVJ5k7l2QWNvoGszOuWKiFxeDZgPH4WJtx:9C9lA1fVJO2JQGsz5CSwH1","tlshash":"212423a659011ca5cf8127def9a58020965ff8888c7b156a17389db231ccc5e38f9f6f","first_seen":"2026-09-20T10:15:32.272013Z","last_seen":"2026-09-20T10:40:55.147993Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/53/AlnX3M4zevzdid1D3FBs34GwmhJ6vH-metaemFtZWtfbGViYV9tb29kcGhvdG9fZnVsbHJlc19AazM1cGhvdG9fMDQyLmpwZw==-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.715Z","timestamp":1789900779715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/53/AlnX3M4zevzdid1D3FBs34GwmhJ6vH-metaemFtZWtfbGViYV9tb29kcGhvdG9fZnVsbHJlc19AazM1cGhvdG9fMDQyLmpwZw==-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e035213a0056c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"a69fa-62b7103adcb28\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Sat, 11 Jan 2025 16:50:53 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VREIPrcntR3eakInsKJcakKKocBKjHA2p1%2BoJVGymYt3LaQBsaSdU0AAhRNGTUjfg754IkHF0TtSRRyKubRIMs6jZ3jtWpsjpFKUeVp9BqnM%2BWuNyKZ%2BeYG4%2FrX6EpsX1w%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 682490\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":682490,"size_decoded":683244,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1280, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6271e8ab6b690ed710a7c0e577f4bf08","sha1":"b5306c587bbc1c86dcb676becb58cb8e0a62b3f0","sha256":"d09d31006b8802a628afaef2a3580863c8a8adc18a62b00b9b4d3adbcbe46ff0","sha512":"7d3943f5e1719f1cca4588cbb5d526e3ebc9cd12ac0ef44a368c038d6bab196a9af7d65de9ec3ed89cf454ee8c329599069a4ab7e5fc89fe155e0d2e801b5df2","ssdeep":"12288:h/gt4VF0RvQ6LGUJdtK7ANwEk57c6AVwcJINSrBd0viklMy713pr2QI:h/NV2Q6LJXnC1cKSrQaklMMy","tlshash":"5fe433a611cb5af28c78373d4e61ba07f60e1676193229a0f84c4f1394a50ff63a7b65","first_seen":"2026-09-20T10:15:32.322623Z","last_seen":"2026-09-20T10:40:55.148541Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/jquery-3.5.1.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.724Z","timestamp":1789900779724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/js/jquery-3.5.1.min.js HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2XYiUW8RGY5zLRpJlWK9x%2BlGxstf5PQp27K5%2FguCYmLzD9gjxNKKh3noIPj1%2BMe%2FRsWCpp548vwABgCMW4loc6oYSo%2FgSZkoAdCloVXto1jUW4y7Jxd5Lta9ZpQ3MRyqHw%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a3e035214a0956c4-OSL\r\ncf-cache-status: HIT\r\netag: W/\"15d83-5fa2b937a4ced\"\r\nage: 1519\r\ncache-control: max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:48 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89475,"size_decoded":33733,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"12b69d0ae6c6f0c42942ae6da2896e84","sha1":"d2cc8d43ce1c854b1172e42b1209502ad563db83","sha256":"6150a35c0f486c46cadf0e230e2aa159c7c23ecfbb5611b64ee3f25fcbff341f","sha512":"a55f55d56899ab440ef0cae17b28d5cc8f5b9766d1e9bc1a8ac6b89376924b476c1ab0c325497eb5d44af41f4ebf8eea236d87a36902244b8a3eca54994b8711","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakV:AYh8eip3huuf6IidlrvakdtQ47GKl","tlshash":"e893f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-10-15T04:22:25.173186Z","times_seen":17987,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/prefixfree.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.729Z","timestamp":1789900779729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/js/prefixfree.min.js HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HMfTgJ367tmOS5hrG%2FZx%2F4fE1f9idsheAvuFpUvBaNHOuw%2FzHl36LB7MEE6fkHGXmw0AH74ZWL9QS1MVTB4aSAm6jHPdYMPz0fZU3ZagTblAt%2BOTD42N%2BH9wbDK0EV%2F%2Fgw%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a3e035215a0d56c4-OSL\r\ncf-cache-status: HIT\r\netag: W/\"1700-5fa2b9375b90a\"\r\nage: 1519\r\ncache-control: max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:48 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5888,"size_decoded":3256,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5888), with no line terminators","md5":"887cae650070152a6f1397c3597a75ab","sha1":"ec2fe968b65cc738b4fc317657af32d2a1f5e71b","sha256":"9ca4c3f8e6bfef8e40e24c8a9584f0eee4017fdae799304ce9410558fe47a65e","sha512":"fab4608e7dc37bfd1ce458fd6075394834a16d42d7c15ea61cb73b480311f4a2f07263c6b8f349f7aafedd52ea731ad435b2197e75cff3cc831545c2f992f4ff","ssdeep":"96:kYXzuAbJ1r3SHFi3EshYMbfWQzFJzjiWuBSurAu7VMSxD7zYaifPN:kOzuAPaiJhYMb+QLfBUSjmlePN","tlshash":"e2c1a539711cfa26139260b141af390bb176cc15f52a8a70f219dc597c7c79a00abfbb","first_seen":"2023-03-10T03:17:26Z","last_seen":"2026-10-14T15:44:55.090068Z","times_seen":82,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/57/rSf8ZgV5pXgvfEVV3dSoft9AsUpqj5-metaVMWCbyBvZmVydHkgUHJvZml0cm9vbSg1KS5wbmc=-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.711Z","timestamp":1789900779711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/57/rSf8ZgV5pXgvfEVV3dSoft9AsUpqj5-metaVMWCbyBvZmVydHkgUHJvZml0cm9vbSg1KS5wbmc=-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352139fc56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"70172-61f4efb0f04e2\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Sat, 10 Aug 2024 07:12:20 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivwTEiqA16gx48HD5ejEKTV0bH0QRuXn9%2BiXFB1JPf7JuRo%2BMz1Zx7wkNHaMkAmZXootDPWBTvvD9NzYGq%2F2B02vlF2MpgiwFaZOtCWJUKFwcVt2AdSsJz%2FNNK8X9f9s1Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 459122\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459122,"size_decoded":459876,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1640x924, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"328b2651cf568c99feb4e809ddf770c5","sha1":"50fb481fcc896cd707471a90b01155df29a40991","sha256":"164408d1fe2f2bc3b27ac63962a02d3616f068af211e952abde96b0468deeeb8","sha512":"6232e22fdd0d4ccbd6be93389f799d0ef63d41cc21e467295d2696850d492e0b312a193aa72feb0e191ba92e253acfb2baf81dfbdbfbfaa8dac1b6e7a8204887","ssdeep":"12288:evogJHbtFi1T+Wu+xyPDrC+oRlv4njre/slQB:ctbtFoqVrCvYne+QB","tlshash":"86a423172433400bd57c34147e8a035b3e6a4fa3eee6c7680c816981ed6f9dab5d52e7","first_seen":"2026-09-20T10:15:32.293201Z","last_seen":"2026-09-20T10:40:55.150279Z","times_seen":2,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/64/l5C2bpQteX07oUR1MzB84IF5nzTIQr-metaUHJvamVrdCBiZXogbmF6d3kgKDE5KS5wbmc=-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.712Z","timestamp":1789900779712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/64/l5C2bpQteX07oUR1MzB84IF5nzTIQr-metaUHJvamVrdCBiZXogbmF6d3kgKDE5KS5wbmc=-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352139fd56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"1ce04-65a49362a228e\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Sun, 30 Aug 2026 20:05:48 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPFDV9i5CDqPEoISWPY5o01joXEtkQ2prrkVSFAxdSmt3DkhTcNU0zgClwvM08Ye0graD4OmAlYVrq%2FVngNjRrgEsWuPf6OqO7RuXV9MNqKdKy1N5CTFPX4A%2FFMFbd7DiA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 118276\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118276,"size_decoded":119026,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1772x827, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3cca6f31f121d3b130664b8cc4d349d0","sha1":"d83d66adbe0b6f78921eb1f4ef719e22431d94fa","sha256":"46048308c8e904e278ff6b5c5b2ace06e88d3e4050256de90636fbdf756cee52","sha512":"997e19fdee530bafe43cbcd8928e1d8572e9f4652203f8113448a22c247f22f1d24e6893b5b3a747e2d1f70bbde2cab5f6d10d0afe972ec9c5852d4bf2c7e52f","ssdeep":"3072:FqTYDayNXTqR2K/bn7NgToQWi++CLgzBbe4R4JnF:yyNXTAdb+wi+gJaF","tlshash":"ccc3129600624c4d31a86347b66bf42743d5bf2ef2d720b0661e7cf729c1889ffa8625","first_seen":"2026-09-20T10:15:32.281895Z","last_seen":"2026-09-20T10:40:55.151231Z","times_seen":2,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-VWN2VV5Z7B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.656Z","timestamp":1789900779656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/js?id=G-VWN2VV5Z7B HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\nexpires: Sun, 20 Sep 2026 10:39:39 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175366\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":523506,"size_decoded":175970,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"2a85c5067ed34c56696849957ddad758","sha1":"48a2fdbd0320094522597805826968cdf9577b54","sha256":"70d5ec24a4743885c30a90c92cb56b7f986518bd778c587f83a1dd78cd4bedb8","sha512":"4ba40c4688f0dd378817320c176d88502b01b286a4194c24dd132c6ee6a985492f59636c98b82b2dcd4d89122974040c2f9216f6bb043a503b4134d5fc3753bf","ssdeep":"6144:dKI1rBQ5PN1gbcn76+4bcc6MbBEAF33GBAmrc1od45znljf:v29AbqxAx1oK5Z","tlshash":"eeb408ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","first_seen":"2026-09-20T10:15:32.289761Z","last_seen":"2026-09-20T10:40:55.151761Z","times_seen":2,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":39,"receive":67,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/conan.js?1789900779","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.739Z","timestamp":1789900779739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/js/conan.js?1789900779 HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=38A9n1sYQ2sWrDxzhaBifkBoRWc4y9Kz%2FOtN6qZdwmFok9GsiQANKeyMrg9M6BpZr3pHvC%2FOEy0mGuRag0QhCrwekeIMWHC1x0%2BmxFnozwjN9tOMJq1q4IrjruQRcEbg9Q%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a3e035216a1256c4-OSL\r\ncf-cache-status: MISS\r\netag: W/\"456b-61cc3819cc7c0\"\r\ncache-control: max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Mon, 20 Sep 2027 10:39:39 GMT\r\nlast-modified: Mon, 08 Jul 2024 21:57:59 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17771,"size_decoded":5197,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f653141abf806cf656e8ef67c1de5c81","sha1":"43e83c87ccd45d25aeab935a07922fe3c6393eec","sha256":"f4b6bc2717ee772efe5c558e3930d7dd8ee553a6c6e87446579c2a6a1cbc64fe","sha512":"2ff88f9c393ae6e1f0c879c6e3845c2c4e5d99918a5f08268ed85383b22876b2564c968e5d24d0850566c8ac7fcf8cbc47417befae55fa387b7693c61057abad","ssdeep":"384:bSTt7typH4SN9+GeiSv82cMU+M3MME86D:bSTkN9+GeiSv82jU+M3zE86D","tlshash":"0682320976b2002254bf343e8bff82452675901bd20ecd247d5c9ea84f90a7d76f27ea","first_seen":"2026-09-20T10:15:32.23056Z","last_seen":"2026-09-20T10:40:55.152301Z","times_seen":2,"resource_available":true,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/favicon.ico","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.368Z","timestamp":1789900780368,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D; _ga_VWN2VV5Z7B=GS2.1.s1789900780$o1$g0$t1789900780$j60$l0$h0; _ga=GA1.1.716333366.1789900780\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\npriority: u=6,i=?0\r\ncf-ray: a3e035255a5556c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1518\r\ncache-control: max-age=31536000\r\netag: \"0-5f950ce340b38\"\r\nexpires: Mon, 20 Sep 2027 10:14:21 GMT\r\nlast-modified: Fri, 14 Apr 2023 19:25:35 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vjd3u1SOt9kdrLZzwVvmA6VcMhP%2BL5RgJAVyRupK6%2Bp9eQ1mX3GHQK9Op2s8Btr3L9WoYX9kT3cIzRm7MDFM44iNu5%2FxKRyWHLyiH2joYeetu0xwOnVu88nl%2BTO3dSW12A%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":762,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.premiumhotel.pl/core/widget.js?app=zamekleba.premiumhotel.pl\u0026lang=pl\u0026defaultModule=booking\u0026defaultContext=KONTEKST","fqdn":"widgets.premiumhotel.pl","domain":"premiumhotel.pl","tld":"pl"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.659Z","timestamp":1789900779659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"html-builder.betasi.pl","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Thu, 17 Sep 2026 02:45:34 GMT","end":"Wed, 16 Dec 2026 03:44:08 GMT"},"fingerprint":{"sha1":"D3:4C:E7:6B:13:6D:22:10:69:62:7D:F5:32:1A:44:AB:F4:4D:ED:8C","sha256":"A3:A9:33:A8:C4:7C:48:DF:62:C7:44:88:4C:4E:3E:D4:B1:45:E9:BD:D1:ED:D5:6F:7B:17:83:4D:EA:49:C3:3A"}}},"request":{"raw":"GET /core/widget.js?app=zamekleba.premiumhotel.pl\u0026lang=pl\u0026defaultModule=booking\u0026defaultContext=KONTEKST HTTP/1.1\r\nHost: widgets.premiumhotel.pl\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: no-cache\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"8ad2025be78a6f9f661d4934b829fd40dd8fcef33ad00a524f44901969065e1d-br\"\r\nlast-modified: Tue, 24 Mar 2026 03:10:08 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1789900780.805114,VS0,VE48\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8658,"size_decoded":3286,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3508)","md5":"6806fd331bf0e3e0f35aa848a6c0a343","sha1":"d4f3b18bc9363fa82036c560490e21d469ce0bab","sha256":"85abba3b0e2b7e8f8645ae4150dd1e65a2de530d9c6548b61e099006176704b0","sha512":"88d83bae0a4ead95a473cbff85487ee23485f9ac92770a92161239c21ae8f65d0132bc9d15140049482f64e7ebda7c109d0b1bcbd10fde1696875ae079e0a2c6","ssdeep":"192:r8y2jsFTF3GRyJiNxL+6vEC3bjP1auqXbeyaSVhL8pH:r33FTF9m+6vECLjHqXbeyPV58pH","tlshash":"1502daa9f4a3959453f811de26b69361b2785007b1048899b0dc8c6bff2cd5a45f3ff8","first_seen":"2026-09-20T10:15:32.249259Z","last_seen":"2026-09-20T10:40:55.154908Z","times_seen":2,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":94,"connect":12,"send":0,"wait":60,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/spalogo.png","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.698Z","timestamp":1789900779698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/spalogo.png HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3e0352129f056c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"3a74-5fa2b943f81e4\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:26:01 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nVEC%2BfZyqOZqXEezBKovkK24sS%2F8YbjwYfF6XGz0AkpPQC4VqW7vC0cbI8HciDS%2BPa%2Bcz6yAld%2FHth4yUoc4hBiajkFD0RziQ%2B46ziR5zMct%2BvgYq3sPGW5VHIdBpNMKNg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14964\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14964,"size_decoded":15721,"mime_type":"image/png","magic":"PNG image data, 265 x 363, 8-bit/color RGBA, non-interlaced","md5":"e08ba7403d756ee3717e765e77533bb9","sha1":"73513a12cc3aabecd986fe996b4a8aa7114671bd","sha256":"54a6cfb085b595bce70040d8e44fa8e67720687306ad65ae03ce73c803731ddd","sha512":"6522e662bc3debe857d57b53c1be4efb7ec9e1ddbf0edc559150342b3bbf73af6c2d0efb037de3fddc166da2e28d20b3cb8c59e85bf78b0fceb3ea427903c249","ssdeep":"384:TSbYUuyTOKAxS+LMfSQdZKdPYhptZbdHCaUBLfbS:TSbluuALwffUPypbdi75O","tlshash":"2e62cf017ed60b2e37c7cec311f3652905b6cee2da6557ac6145c498d827cb559620dc","first_seen":"2026-09-20T10:15:32.290674Z","last_seen":"2026-09-20T10:40:55.155449Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"open.upperbooking.com/zamekleba/Booking.js?locale=pl","fqdn":"open.upperbooking.com","domain":"upperbooking.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.736Z","timestamp":1789900779736,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /zamekleba/Booking.js?locale=pl HTTP/1.1\r\nHost: open.upperbooking.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=4\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=938401041.1789900780\u0026dt=Zamek%20%C5%81eba%20%E2%80%93%20butikowy%20obiekt%20nad%20morzem%20%7C%20SPA%2C%20restauracja%2C%20widok%20na%20Ba%C5%82tyk\u0026en=page_view\u0026dl=https%3A%2F%2Fzamekleba.live%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1791123434.1789900780\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He69g1v866539866za200zd866539866xeaxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118131808~118897920~118897930~120385422~120469145~120469153~120847433\u0026tft=1789900780427\u0026tfd=2552\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.430Z","timestamp":1789900780430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /ccm/collect?rcb=4\u0026frm=0\u0026apvc=1\u0026ae=g\u0026auid=938401041.1789900780\u0026dt=Zamek%20%C5%81eba%20%E2%80%93%20butikowy%20obiekt%20nad%20morzem%20%7C%20SPA%2C%20restauracja%2C%20widok%20na%20Ba%C5%82tyk\u0026en=page_view\u0026dl=https%3A%2F%2Fzamekleba.live%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1791123434.1789900780\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He69g1v866539866za200zd866539866xeaxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938469~118131808~118897920~118897930~120385422~120469145~120469153~120847433\u0026tft=1789900780427\u0026tfd=2552\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zamekleba.live/\r\nOrigin: https://zamekleba.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\npragma: no-cache\r\ndate: Sun, 20 Sep 2026 10:39:41 GMT\r\ncontent-type: text/plain\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://zamekleba.live\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":543,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":3,"connect":30,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/Canvallax.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.731Z","timestamp":1789900779731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/js/Canvallax.min.js HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P9MuApTGzWEMVGKl27TTSswBr4drzCAwYi8UcI45Ud7KGBFVbN%2Fy6Mqx2GIrD2OtGnVf0%2FymyQ63NmQeS1HqNoQ0tnFjww7y2fGzmZkSiuLbDQT7iFgPmQ5PI0Us6aBGkA%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a3e035215a0e56c4-OSL\r\ncf-cache-status: HIT\r\netag: W/\"2c66-5fa2b93738688\"\r\nage: 1519\r\ncache-control: max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:47 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11366,"size_decoded":5471,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11272)","md5":"cc59456a94a57dcddbbc259309b8f70c","sha1":"85ff00c01c07013d57218d28e3c91e798bace0cf","sha256":"ea79bea047f2197bb089f33b9cd8e01c0d7fc5b0d643e516d175afd895b60449","sha512":"597ea1a33273726fdae28d6a253d65021d51c605ee70ef553674bf370c7f2eb43c8593f450c8fbe4b538616ad260e7fbcdded054d185cd13561c82d3c08c62e7","ssdeep":"192:Y8d7YWtYtfps30Kj84RGvDDaR2Z25HOIoTxQGMQ53Rsr+DvoV:Y8d73tMp8pj84RGHaR2Z25HOIoT6TQ5s","tlshash":"5832a6cdb2d2746683932966407f750eb33768585d0e8508b238a0e7ac75f8a127ff79","first_seen":"2026-09-20T10:15:32.30499Z","last_seen":"2026-09-20T10:40:55.156151Z","times_seen":2,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-10905183754\u0026cx=c\u0026gtm=4e69g1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.392Z","timestamp":1789900780392,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtag/destination?id=AW-10905183754\u0026cx=c\u0026gtm=4e69g1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\nexpires: Sun, 20 Sep 2026 10:39:40 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 151573\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":435737,"size_decoded":152562,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5033)","md5":"cc45748732e1b0ac161f088cad8b0f5a","sha1":"d39f606d7441f31426c7580f29ea68346d006bc4","sha256":"b6086202c6ad62db2c40f9a66a51e95b6f72573704985ffa41191883832da841","sha512":"a6c08ad93ee217b3b239397651ba2ad167bd21f8937579e1b795847171f23d47a1dce705bf3757ba3d5c530522814a1f34f607b743e139461a759bbde5d2c3ee","ssdeep":"6144:KI1rBbPP1gbcjM7X+3Kbcc6MbBEAF33GRqLrcagcOf:592btoDqEagP","tlshash":"ed942acd73d6746283a3f674903f018bb27a69a2b84cc899f289d8d42d3465a5173f7c","first_seen":"2026-09-20T10:15:32.266082Z","last_seen":"2026-09-20T10:40:55.156674Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/12/7sFScINjV87VtLx3sF0eivkqQYAJIgNtgfZ5uQjm.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.696Z","timestamp":1789900779696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/12/7sFScINjV87VtLx3sF0eivkqQYAJIgNtgfZ5uQjm.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352119ef56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"25c7c-5fa3b079c97c7\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Wed, 26 Apr 2023 10:52:01 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t9x8%2BHCPUfd6HrFKYc8mYgjTm16U1UOLzgGVc0cTso8PfqXkVKTgCfJ9e8PhJEpk17tUnKkshfxP9hCAkhbwcN%2FAVoZsq8hrqTa4%2BeFHIC%2BQu1Yz7l5BnXimBQG7wPfIqw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 154748\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":154748,"size_decoded":155502,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x1800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d7b457253f965d7574cbfeb1b4e2e2f2","sha1":"7083deda546fce0f4ee863dbb31ac90ceb2eae81","sha256":"c41863933a5126bc76af85b08a82dedb555c42ccd97317df60bb7789e77bd03a","sha512":"028d609b36de916d5a5a63baa65c0d1529a00dff7333288c31fd84bc919a0951ba25f8d9da12fd8b31f024e5e8ead52e963146178f6a83c1bfa5cc104766b24f","ssdeep":"3072:mzhYJKneueeM/5RSy6FWPMTJjIaeSl4sjN9Ou3SgZUO+BUdBFiPG1:qhneu4MNjIbSl4sjLOsSgZCBUd/EI","tlshash":"44e32224ed09de546ccbad84b4245246fe2c7f963e30b8fdda907254f724634a9e3076","first_seen":"2026-09-20T10:15:32.25196Z","last_seen":"2026-09-20T10:40:55.157237Z","times_seen":2,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/baguetteBox.min.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.732Z","timestamp":1789900779732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/js/baguetteBox.min.js HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LMkGltFLM1m%2FtIbEXnmDclFa8V%2Fp8Sj2jGmzMLow1U0pXr6P0EiMkSDo4wdes4CKiTXVweVyKxzKMHBSSLViny0im6f1gXVZb6cMsHSOn%2Bf6CC3SNOt2KK%2BN0UP93Zdy8A%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a3e035215a0f56c4-OSL\r\ncf-cache-status: HIT\r\netag: W/\"2569-5fa2b93727ce7\"\r\nage: 1519\r\ncache-control: max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:47 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9577,"size_decoded":4427,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (9462)","md5":"add865daffd8b6e10264279f48d8ac50","sha1":"300d6a58c385a454ac7f6b271e210ab59f54796c","sha256":"50b415d35552f4b088d9e3e92ec9a46be5b499ac05a44034aedc677b3523e00e","sha512":"ecacd2b78009f5b2dc8570919659f26140e37e13b620511649af9ae7fde43c641bafeb30453a2b1d07f20030214a55470acd5ba45741d78e3b651cc5ca2897b2","ssdeep":"192:uSfaBAmpbVFVAMuQ6Ss4xdnHy4AH93Ej7tSM4cEuuF8mVg9CNK:uSSJpzWML6S5xdnHy4AH93iEcEH/5NK","tlshash":"3b12f6fd320232748583256dd9efd18ff1351126aa060414e129d9a43cb4eee537bfba","first_seen":"2023-03-08T04:31:18Z","last_seen":"2026-10-13T04:56:13.344968Z","times_seen":929,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/css/main.css?1789900779","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.456Z","timestamp":1789900779456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/css/main.css?1789900779 HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0YLaXl3uUbcYZUZtySuFDE7LXShYhQuq4Cnj9IN5m1TcWX9AqG%2BwydlULyEpgaJD9zitLCYUhqRSpTdjk4i4jvwusaId2Wy1H1WCBAv3RQK7mdfVtKPrzty4YDvEN6tKQg%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3e0351f99d156c4-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"10350-61213622c1a40-gzip\"\r\nexpires: Mon, 20 Sep 2027 10:39:39 GMT\r\nlast-modified: Fri, 23 Feb 2024 21:38:41 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66384,"size_decoded":12708,"mime_type":"text/css","magic":"ASCII text, with CRLF, CR, LF line terminators","md5":"4d09e46d08603b8611900bbff9904b20","sha1":"280904b76dceba29fa8fe84cd9c6e699f5d70fab","sha256":"4b1e908fb915dfad60bb770688afc180f9e3dcc0592b549ab6223cdea44b0fd1","sha512":"359506dcb1f8c5f88d0d5ed23a137243b9cfa3c2e94a0b2509859e11df29d995bd5c2056476691e5c8247903901422ea34c3837fcc0b0e4065b254f9ea2275bb","ssdeep":"768:FHXaw99YMP10hYsCpoc6iYtBtOHGupKNvQ:F3aw99fP1EYXock7uX","tlshash":"7f53839467f244152c7ea0f5a68ff188b22fd0c5de1ecd9abad52028df843f05c92b59","first_seen":"2026-09-20T10:15:32.292016Z","last_seen":"2026-09-20T10:40:55.158507Z","times_seen":2,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/logo-full-white.svg","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.688Z","timestamp":1789900779688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/logo-full-white.svg HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=5,i\r\ncf-ray: a3e0352119e956c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\ncontent-encoding: gzip\r\netag: \"2b0c-5fa2b94163f44-gzip\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:58 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPV6Coymp0UtNM6zOGmVtNZpCKjZ9VkvOlkmKyEFFUOWaLk%2BR3PmZe%2FGFCe5dCOxIOijVQpATWiZRMB%2FUOdqGJY1hKF9ydzNamd4MzjpGRVmgDQb%2Fg9FFbaTer2%2FTWas9g%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4599\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11020,"size_decoded":5407,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e71ba2cd15aa6aa1ebaf8c614f8cdc8d","sha1":"f3de1bdbcd4be279e32a4316c6a3b87395ec84e0","sha256":"6a064543135e7954a70b835af97ceaa1e6f48269c7c0226728bb9df6bf235043","sha512":"fc8333ba7fd07959dc9e5fc84da7cc9880a40189a555e063d86c3b195399bbb3602b79726b51e8c16e3bcde2802d904dfd11b5d15370023ad6aa8e3d2b0f58e9","ssdeep":"192:hQNZnbZqOIFjitxyOI8923BkzOwWh23gzvznCcsNSoyL2TcmSWs+2FCmtu+EwXC:hQXwFExtIX3BCtz+rCc4SolOp7S","tlshash":"7d3272668b71866893d917c0cde118413fdb849b72b9d3dc8b56fab2f873db080a1c61","first_seen":"2026-09-20T10:15:32.228659Z","last_seen":"2026-09-20T10:40:55.15973Z","times_seen":2,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/282/Kkh7jm2hYPIsIqJaIoTFiV8Nz8uJxM-metaMjAyNTA4MDYtRFNDRjM3MjQuanBn-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.701Z","timestamp":1789900779701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/282/Kkh7jm2hYPIsIqJaIoTFiV8Nz8uJxM-metaMjAyNTA4MDYtRFNDRjM3MjQuanBn-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352129f456c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"4d732-657bc40988102\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Wed, 29 Jul 2026 09:05:09 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e7dhVlOAgur9mzutsVbxh%2BxiBgyYPmcNWFEFVozIb5Uh14nGays4PQN%2FUANXGpXTewJ4YjKTo%2FgrXfKz67vKPbv9TR7w%2BxS1%2B%2BR86aEM324C%2FY29bn0FzSP4ZMjVBFCczg%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 317234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317234,"size_decoded":317994,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x2880, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b7a4435c604d457aafaef6aedea9268e","sha1":"200c8b1f880c32592a878bc8058040e79c96d324","sha256":"2a614c928259e8b7cd1fd29cb6a46718b910f477e6cea87f5779b681e478ac0c","sha512":"3ba8039722b2358c544f3f4f2125f475618e4a2226cb562a533aa3315a212ac9b2d97ce567a854d296111d2ff962b217e1a0bed240b0bfe4a6bce3dbca46198e","ssdeep":"6144:+fMMg1aXqiXHu+ivceeETYyTJUG1pI18GJHAvsBVCWEyB27E:kvg1aXxXHkPTYcJFM18lvsBEWEyBj","tlshash":"6d64232fb7192d7d0e2d998e7580430d690632ca134dda8440259acf7d89aff7d285fe","first_seen":"2026-09-20T10:15:32.270583Z","last_seen":"2026-09-20T10:40:55.160344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/133/BAbAK6gVgE5yvWzQzxuhyBRcGlVRtG-metaMzMuanBn-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.708Z","timestamp":1789900779708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/133/BAbAK6gVgE5yvWzQzxuhyBRcGlVRtG-metaMzMuanBn-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352139fa56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"8bc1e-6289785f88a1c\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Fri, 06 Dec 2024 10:31:53 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FnBg7ryaWQo35DVLGGfPT7hT8zEKDQNKFxKyQcmW219SfVzD6nC1bH451UIYurVnBPcK%2Fd%2BIkQ2giCtPcbsukPBF2Ypww%2BwnLpctlRNsWjEQCSBirkvx7nj50NPPM2bn7Q%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 572446\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":572446,"size_decoded":573200,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1094, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"03d40ae8bbdd008d89655418c3cbca22","sha1":"f84aaa27ec2427c8cc32e2920a96b4df000ba4f0","sha256":"99c7053a218588f0043935c6cdd9b918bf55b7b6f12d7bdb1c76d581144b8998","sha512":"d95d40fe4b140953b1df630d97f5c59f92aeebfcef688f7b2dba3e0a30345670e759b4a9cf26dd61022804babb08800884819a1854cf1c5ca6458e62b8e8efd2","ssdeep":"12288:6bgIlibmOvQukJfU6erzjVNw1clsPJgeYS1NOvbnAnWNJ:LIECcQlUnrHW9ynhJ","tlshash":"eec423938a87b0da3a1d10ce4cb9c971fd17b9607b28168496d423cb81fff8a0f79615","first_seen":"2026-09-20T10:15:32.254866Z","last_seen":"2026-09-20T10:40:55.160982Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/js/jquery.bxslider.js","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.725Z","timestamp":1789900779725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/js/jquery.bxslider.js HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YRY5jViB9MUWUFywBJ3VQyxLJ3xITTlaax%2BURO9p%2Fs%2FcSdbRwdV5P8zcAaCJ%2FccXaD0Ic2JyET%2Fmhk%2F7gQFv6Nsv1Z3UsPNQv5gYVHK%2BxTUKh42ZxKnPd1oXG4l4ZsOESA%3D%3D\"}]}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a3e035214a0a56c4-OSL\r\ncf-cache-status: HIT\r\netag: W/\"107e0-5fa2b9372daa8\"\r\nage: 1519\r\ncache-control: max-age=31536000\r\npriority: u=3,i=?0\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:47 GMT\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67552,"size_decoded":17270,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"70f3a8484c7bc490f4476a59108ed9f1","sha1":"325918bfd07ebf1f6c6627d224f597bafa8b0fdb","sha256":"d9a3e8f06cc8581fd6eeb011535e3fe287f9d38d22be1ec1f9fd9bf804adf62a","sha512":"9e8dbf283b025921aed0b57259577085af39f7114e9f52bca0b3c88b63ba83122fe5f43bd382f6a508791fc5f83e94c4ce3183e7cfcced363075ff0b59e4902b","ssdeep":"768:Gd4mA6iMGQR0sB7U5is2DKNa+YM2H/+W68HbZMH4wlR3Ew:iJA6JGQRnB7XKNKM2HhHHbZMH4wlR3Ew","tlshash":"6663520561f122761a23317dab8edd40d2fb82478529e5a4f9fd470cdf8166402fbbea","first_seen":"2023-03-07T23:45:50Z","last_seen":"2026-10-14T10:22:50.850818Z","times_seen":715,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/mzebley/dynamowaves/dist/dynamowaves.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.737Z","timestamp":1789900779737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /gh/mzebley/dynamowaves/dist/dynamowaves.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zamekleba.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.2.1\r\nx-jsd-version-type: version\r\netag: W/\"312b-m+rpycNu2iyD19AHw9jUtJF++7k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 6774\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\nx-served-by: cache-fra-etou8220131-FRA, cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 4178\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12587,"size_decoded":4952,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12586)","md5":"a560de5813b460fc666a5a74e6893470","sha1":"9beae9c9c36eda2c83d7d007c3d8d4b4917efbb9","sha256":"b4e9d25962a8a84b4bf5d38b9bcaa31230a57037bd63a8644ccf396ea049dc40","sha512":"95519f3b3716822c8cd1744f785465c7220d2caa37502eba109f45e5c10f072124ec018eb97411a89c0159ab2ca10e084527dc8aa38f09d06866a9e139e6eca9","ssdeep":"384:n8O/uUXenhrYbbTZzYy2gGcrmlZyDAkkGFSx8z7mw5J4g36f4+W3:n8O/uUXenhrYHTZYyLrmlZyDAkpFS6X5","tlshash":"1c427756b1b0a8368a5202e2902607163b3e217a2202407d777cbcdf9c67d4f76f77b9","first_seen":"2026-09-20T10:15:32.278196Z","last_seen":"2026-09-20T10:40:55.162186Z","times_seen":2,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":6,"connect":12,"send":0,"wait":12,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-V9BKLMKDT0\u0026cid=716333366.1789900780\u0026gtm=45je69g1v873734650z8866539866za20gzb866539866zd866539866xf1\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~120213116~120385423~120469145~120469153\u0026z=910652901","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.730Z","timestamp":1789900780730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:07:53 GMT","end":"Fri, 27 Nov 2026 08:07:52 GMT"},"fingerprint":{"sha1":"97:2F:A9:50:A0:A8:2C:4F:6E:C0:9D:21:4D:02:79:64:C0:F0:62:D4","sha256":"C8:54:87:97:69:D0:A5:F0:5F:98:26:CA:B6:C9:20:2A:B1:47:90:D7:D6:A1:A0:78:D4:F4:33:1C:E5:12:10:3C"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-V9BKLMKDT0\u0026cid=716333366.1789900780\u0026gtm=45je69g1v873734650z8866539866za20gzb866539866zd866539866xf1\u0026rcb=1\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=115616986~115938466~115938468~118897920~118897930~120213116~120385423~120469145~120469153\u0026z=910652901 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":578,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-10-15T04:37:29.124816Z","times_seen":1109286,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":4,"connect":14,"send":0,"wait":42,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/245/05RstM8dWi9ghBHmpdGj44d4ZQ6Jlw-metaMjAyNTA1MjZfS1NfWkFNRUtfTEVCQV9fMDM1NzMuanBn-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.714Z","timestamp":1789900779714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/245/05RstM8dWi9ghBHmpdGj44d4ZQ6Jlw-metaMjAyNTA1MjZfS1NfWkFNRUtfTEVCQV9fMDM1NzMuanBn-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352139ff56c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"6c9e0-648bea1562729\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Mon, 19 Jan 2026 14:37:28 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YbmKGo8lDwpBUR8i8D7OAHe92S%2FpvOmtx4t07YOuTquB6HS%2BAK44rnSbIyYoAGE4IqdpZUFDrp50SpmhgcWlCkA%2Bf987O6%2F2o%2BpQ3rRayd2jlpSOGr3vZuHehhj7QkSvw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 444896\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":444896,"size_decoded":445652,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5348a7a12d28abf725c782781d73a064","sha1":"a21bf1a38c43616737768d412dc19cdffad20f26","sha256":"18120a41d6b34fbcec8f97f76df326df21c90b91dc0ca21077bda80964e9348f","sha512":"f97ed92c5e73b2e99ea95a3853a4a9e6dfedf6540d923d59cb8b14cd61fea23c23f37128f3f04701125088e660081b91392407769f1bb3bc66ee3f6d4c7e0403","ssdeep":"12288:kDcNDHsxawxrM+VyBK4AzphV3sLKUUVFtuFWqKi:kDcNDMxbMGKK4AzF8LKMFWqj","tlshash":"f09423632429bfa448ccdce625d86d95c8be769e3f0c1044dba7b21861250f75e399bc","first_seen":"2026-09-20T10:15:32.285558Z","last_seen":"2026-09-20T10:40:55.166952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-NJCD66B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.119Z","timestamp":1789900780119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:47 GMT","end":"Fri, 27 Nov 2026 08:04:46 GMT"},"fingerprint":{"sha1":"A8:7D:85:D0:70:29:F0:BA:D0:9E:95:03:C3:BE:58:8B:F1:10:A9:7C","sha256":"21:1D:48:CD:78:8D:E2:B1:1E:91:43:B5:47:5F:37:F6:D1:54:A6:B1:41:15:4E:3F:FD:5C:28:86:5F:0C:F8:43"}}},"request":{"raw":"GET /gtm.js?id=GTM-NJCD66B HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 20 Sep 2026 10:39:40 GMT\r\nexpires: Sun, 20 Sep 2026 10:39:40 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 20 Sep 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 167170\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":487128,"size_decoded":167800,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5838)","md5":"a72ee10ecd4f0f9b4229d173555464cb","sha1":"f894616b3cd67c1fe4b9d138eba51d6c37977e4c","sha256":"a5ee2d64705916e793af49118d0cbcd8afe963b1134cc227156d44b709926eb2","sha512":"5524c9ecdee5e5920dd97a9f1ea7330f61e057b3c5712abd54b72b9980e3146dabbd025024b6ee89959a46438e09a9a3a766d9e5c6f1a81953f4fbbcefd56650","ssdeep":"6144:rdu6PpI1rB/Ph1gbcjM7X+3KbIc6MbBEAF33GRGhrcXcz/PLDG+f:wtcbtojGqXcLW+","tlshash":"11a42acdb3d674228392f674903f018bb67a69a2b84cc895f289dcd42e3465a5173f7c","first_seen":"2026-09-20T10:15:32.288362Z","last_seen":"2026-09-20T10:40:55.167584Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=12\u0026frm=0\u0026apvc=0\u0026ae=g\u0026auid=938401041.1789900780\u0026dt=Zamek%20%C5%81eba%20%E2%80%93%20butikowy%20obiekt%20nad%20morzem%20%7C%20SPA%2C%20restauracja%2C%20widok%20na%20Ba%C5%82tyk\u0026tid=AW-10905183754\u0026dl=https%3A%2F%2Fzamekleba.live%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1791123434.1789900780\u0026navt=n\u0026npa=1\u0026_tu=CA\u0026gtm=45be69g1v9197074178z8866539866za20gzb866539866zd866539866xeaxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616985~115938466~115938468~118131808~118897920~118897930~120213116~120385423~120412528~120469145~120469153~120847433\u0026tft=1789900780625\u0026tfd=2751\u0026tids=AW-10905183754\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:40.628Z","timestamp":1789900780628,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /ccm/collect?rcb=12\u0026frm=0\u0026apvc=0\u0026ae=g\u0026auid=938401041.1789900780\u0026dt=Zamek%20%C5%81eba%20%E2%80%93%20butikowy%20obiekt%20nad%20morzem%20%7C%20SPA%2C%20restauracja%2C%20widok%20na%20Ba%C5%82tyk\u0026tid=AW-10905183754\u0026dl=https%3A%2F%2Fzamekleba.live%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=1791123434.1789900780\u0026navt=n\u0026npa=1\u0026_tu=CA\u0026gtm=45be69g1v9197074178z8866539866za20gzb866539866zd866539866xeaxf1\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115616985~115938466~115938468~118131808~118897920~118897930~120213116~120385423~120412528~120469145~120469153~120847433\u0026tft=1789900780625\u0026tfd=2751\u0026tids=AW-10905183754\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zamekleba.live/\r\nOrigin: https://zamekleba.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 20 Sep 2026 10:39:41 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://zamekleba.live\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":543,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/storage/sites/114/ehp32ZLh8c9eGxlSEreNvCMCMbb9Ir-metaNWJkOTZkMDkzN2RjYl9vX29yaWdpbmFsLmpwZw==-.webp","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.706Z","timestamp":1789900779706,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /storage/sites/114/ehp32ZLh8c9eGxlSEreNvCMCMbb9Ir-metaNWJkOTZkMDkzN2RjYl9vX29yaWdpbmFsLmpwZw==-.webp HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3e0352129f856c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"4a140-61f3f3471e0a7\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Fri, 09 Aug 2024 12:23:03 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fzmPqLt9zLek0gOKe1Z%2BxTku93nx3YPIDIF%2FHW1zqgFrUQZFttQEPieIcmDfvYF4It0%2FHNjBqi7vgDfBl967zg5DqYORxZfEYT2CrpP%2FIS7ttYXXLa4lSrUyCqAibYCfrA%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 303424\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303424,"size_decoded":304178,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x1003, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d6fab9e63ef352f98fa556f950e01379","sha1":"1f7c2f935bc2c3b9cd90fbf7d0937d6b5153eb01","sha256":"f8d252975270cfd3aa84d3dd650582f2224d6cb57ac70ec3065a980c4af16333","sha512":"877ec3ef03df29aebe9f46c7f7949d28050e5c60c42bff4ead06d077c30988975b1f186623469e5a52500cf790d210e5c4164d5cbdba793069bd5851b8151034","ssdeep":"6144:7Rz+/6J6GB96D25aLqGR4LoVQk2FAbIfI8fNv9:7Rz+/6J6GB96zKMQybIffv","tlshash":"4d542316f42cee4d25b8618cf2dddfd380a299c80f6a19d66113af41d33a5613af618e","first_seen":"2026-09-20T10:15:32.225732Z","last_seen":"2026-09-20T10:40:55.168306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zamekleba.live/front/images/template/instagramfont.png","fqdn":"zamekleba.live","domain":"zamekleba.live","tld":"live"},"ip":{"addr":"172.67.139.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zamekleba.live/","date":"2026-09-20T10:39:39.719Z","timestamp":1789900779719,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zamekleba.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 06 Sep 2026 17:22:52 GMT","end":"Sat, 05 Dec 2026 18:22:31 GMT"},"fingerprint":{"sha1":"12:B1:D2:A1:8F:0C:69:5B:51:AE:80:C5:83:23:AC:22:B4:F3:09:23","sha256":"BF:F7:36:72:E1:C5:67:B7:4B:F4:19:5F:48:D8:97:0B:A6:5D:74:54:92:8D:57:8D:88:59:69:38:D9:63:5F:17"}}},"request":{"raw":"GET /front/images/template/instagramfont.png HTTP/1.1\r\nHost: zamekleba.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zamekleba.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6InI5UWFJNlJUZHNVMytORTRZUjVGMkE9PSIsInZhbHVlIjoiaDZJeU94SUcvVEpVaFc0Q2dvalUvWU1jdjlDVUNXKzRRSEVMOXE2bWpSa1I1b3ZLMDIrY2ViR2hwei9zRXJLSHlDK3VHQmIyZys2Q0lzdG50amFrYkF2TXhjdnBlVXFFOW1LTytZVk02M3RJbzBGdThJUFVGWVpoR2dLVU91THAiLCJtYWMiOiIxNTE5ZTYxZTg3ZTlhMzNkZmYzOTNkMTViMmQxMzk0ZWIwOGYzYzcxOTVmYmNhNmQ0ODc2Y2FkMzQxOWQzMDlhIiwidGFnIjoiIn0%3D; zamek_leba_session=eyJpdiI6Ilc1RStqcFVOLzFJcDI5aFBHSnBFd2c9PSIsInZhbHVlIjoiVDYzVTMybmt2ZkRIZi92OFBydDljNThjc2FaNjlVVHdCbitxaUd4NVgyYUF5S051ZkdyQmhVbnNwWU0zVFcySzJHRldJczhYc3VnUzNhQXJOcU1oSklpeERHTmZOZkxsS2NlS1JPYWpLTHljcjNjQkJ4ZTBnRm1OVkRrZkEweUkiLCJtYWMiOiI5YjJmYTFlNjMzNmY5MWJiYzUxZmFmNDQ5ZmJjZWIwZDUxMmE1YzUwZTY5YTUwZjY0ZmQzNTA3ZTQ0ZDkyODlkIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sun, 20 Sep 2026 10:39:39 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a3e035214a0456c4-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1519\r\ncache-control: max-age=31536000\r\netag: \"1764-5fa2b94018e55\"\r\nexpires: Mon, 20 Sep 2027 10:14:20 GMT\r\nlast-modified: Tue, 25 Apr 2023 16:25:57 GMT\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sl4H7RJdvm0YZ3OGAiaAdthed0sNXlSslSd0VJgVg6p7oOQl2L5m9nAWZl8dyMtHwuYut9rNvoDM1iVLlENe1aPi9S%2F%2FgW8onWoGKjyTbTaLBpBmgeUJSSR2LOMBKHYqAw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5988\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5988,"size_decoded":6734,"mime_type":"image/png","magic":"PNG image data, 235 x 67, 8-bit/color RGBA, non-interlaced","md5":"e1d9f53080d45db154926e2ea91e7f5f","sha1":"be5da2455f6d3dcf4085a41b17223403badae79c","sha256":"2ef7f25037f3fa898cd790a8a1605c47167f554c61b98484c749f516b86057d2","sha512":"7d1e1dea8e4f06b4415c744dc2426175e8593910eaaa4990c77d794ec151a664789c3056cb599045644eeb8fb5f0abf47cde3516a8caedd01e52b6cfcc0da407","ssdeep":"96:mxwo7F529s2qZ81D0lxg613rIa0t4hYheSwktZt23zLJKUm94yvz8HmbL3VDOriN:mxV7Fc6I0iurJYUSwktZIh4ori4M","tlshash":"25c16c8df25fcc99ad8be0e601be06e00f12d1f1d5b4b29270ce145139b256dcd55aed","first_seen":"2026-09-20T10:15:32.298864Z","last_seen":"2026-09-20T10:40:55.168945Z","times_seen":2,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zamekleba.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zamekleba.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}