{"report_id":"f1e7f1cc-f48b-47ec-87b2-94826e5cd0a1","version":0,"status":"done","tags":[],"date":"2026-09-19T22:34:18Z","url":{"schema":"http","addr":"zavsehvsera.com/","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zavsehvsera.com/","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"title":"CEDA - Home","dom":{"size":395994,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2041)","md5":"6bd4f515bba338ecc4ca29e8cd627064","sha1":"98f8473aae9bbb5a8a84de27b37c9f71fda55988","sha256":"75861a965384d56493b1ca0b45a8bf8c1017edf4f26549c54c601f6c89e2df47","sha512":"901aea602dc8361b995fc97e90c81fbbc871d4fa0e3b20d456ce27e1fa6d116c865bb312f13381e15abc83f19aafb7db99e9f7357b42f32b351289b48ec961cb","ssdeep":"3072:A/xaiIgsJSOVCiBa2zdxWTDLZv2+io+60IROitOmxGqPzrEl5pFDo+iY+8Hd8fJd:Kxf7luu","tlshash":"17843112e3b1513efd27966a26b8969c62797c82d810abe5f55f20708fd3eff1093064","dom_hash":"domhash3145895b6690bd3b921b10a231ccabac","first_seen":"2026-07-17T04:28:40.476584Z","last_seen":"2026-09-19T22:34:23.558331Z","times_seen":3,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zavsehvsera.com/","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T22:34:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zavsehvsera.com","ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-07-15","domain_rank":0,"first_seen":"2026-09-19T22:07:40.596481Z","last_seen":"2026-09-19T22:07:40.596481Z","alert_count":295,"request_count":59,"received_data":17073707,"sent_data":31409,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/site.css","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.243Z","timestamp":1789857225243,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/site.css HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRNU%2FoN5PQ%2Fg9RB9%2BbRQGZoELkKQVcMhkHcnuTEeyhn%2BoEQFEHU9OsEvW5r9D83bIq1eVIy12ezzBYIa0XoeUDbp8MXIzXekYPGsK2A4hQmDz8e6Fe16%2BcONqTA0naer94c%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6824ab17-189b\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 602886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9cff50b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6299,"size_decoded":2076,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"6d9603e529e5ac8dc1b9512a7728f97d","sha1":"d677cc2ce5e6414d8848904ac46de0b37f023a4a","sha256":"c4a6491050bf86d5bbf8725fd5e9aea9941f1ca02427718654b92578b7188949","sha512":"907384c098f81210793ace8aeb59ba18a78e16e99bd4913547fc7437f77ec44f94c82f568afc59d956c284fa1924fcf4d87080de79af2bc7dbc5ba11f146818f","ssdeep":"96:or0/Zdnp/NW+m8/gUL3L6TKzxrwjDI8oCF6U70C:RDgYFKHBP","tlshash":"d3d15458eb959da21133dfba33ed95e9fbe810a34d011368b78532104fbd6f71811ea4","first_seen":"2025-06-21T16:04:07.324467Z","last_seen":"2026-09-19T22:34:23.566253Z","times_seen":10,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/ceda-logo.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.265Z","timestamp":1789857225265,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/ceda-logo.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-3db8\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dj4BZGJ0VbuhDZgG%2BwffKdVTM7B4z%2BdHbBHuCZhc43R%2FkLcVPS6uPColbAUt39%2BcLQNWcX2BfJIARkT6x1cB9V76GJ8Kn0BZ0VUHIeDQNjJElmUWLCj6cPy4KHyPbx2zMC0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9effc0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15800,"size_decoded":16576,"mime_type":"image/png","magic":"PNG image data, 512 x 151, 8-bit/color RGBA, non-interlaced","md5":"74239d051c14ae4b2e4fab177701c7b0","sha1":"eba50ca34a32a46761eaa12696b81ac21a893150","sha256":"ebecd5dd269b94f245e27bddcd06f283e07e084fb7185a9d0212ea0423379636","sha512":"364d645af73482e9549f83e3b48dc341b4a277efe63e582c84cd3758421839912cd46b6691663335b63360c6b4d54a9a4d70aa4a40655a9169ee7f71102e2921","ssdeep":"384:lsni5glGbB+zYuMyo35rtV2TWMlPEBAI/0B2:Si5++uMlV2dPoAI/9","tlshash":"1d62bf4c5377d763e517c4602dfc499ade2342844aa0e427fedfcdd6a8e9274e0054b5","first_seen":"2025-06-21T16:04:07.328699Z","last_seen":"2026-09-19T22:34:23.567061Z","times_seen":10,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Jaclyn-Symes-MP.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.286Z","timestamp":1789857225286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Jaclyn-Symes-MP.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-468e\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Riuklc%2FtErj9ZuEp5kLmcRz8JK0SsXwENYRFVBZGOknsoWrLaN7lf1NCoa0PAvBK6xuLnEMQATV%2BUjqPW3TNP37j%2Brg5WEx9TY%2BRN%2Bsl42k5CQknxpOvr%2BgoNAwpqjCdi30%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca08070b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18062\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18062,"size_decoded":18842,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 950x534, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7985247de910a62d0d281391ba14209f","sha1":"c36359b934bebb3ad07a9c71466cd000e051fed7","sha256":"498827f14f7c9c662e82dfd8852ee5bfb025a0ce909bc8278164bf729a344021","sha512":"69a066c12131c6facbaee4e893836ba7ee576121d0c5d0f068850071bdf6e8b73713c687a5c65847743fdc813b721159784b45e153774d1d1ff68087c9e7dbf6","ssdeep":"384:IHA9FeRmQ8l3ecg3zI4NsOXlURhZjxSBZeLtE:6k1cJMydlUXnSBZeu","tlshash":"2482e1e7660d0bda63f1a8f611a4812fc1cc1a2aeede4d0165620959dbd74c1e50e5cf","first_seen":"2026-03-04T16:56:08.883477Z","last_seen":"2026-09-19T22:34:23.568522Z","times_seen":7,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/our-story-icon.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.288Z","timestamp":1789857225288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/our-story-icon.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-db4\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNBvYqzz%2Fif%2B%2FCYb8htj8RSRAWpeDdPGj%2F9qGzgGf8GtsQNGQ4reYNkCWF5zBKab%2B5SGYwCwDcw0N9tB8i2eHarFHdAkfFsH0HLuhydVgGOHRRVsvucK6zMcOftaKdQcASo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca08090b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3508\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3508,"size_decoded":4284,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"c2bf48ef2216d0dbc496198a34a31a93","sha1":"b9c97f3bb3e2dce0160b50f5176113e37c04d84b","sha256":"6016c6db5cb5a8ce646db802160f27e641c1d5212792b026090a4575b995c952","sha512":"ea04bb8245f51641aaa537da1db1ecf0395dc582575a3f85ea34015f1d23763c32f1fd4d8ad3a9951b5f1fc25a84aca9719edb7df762205239cdb75b70f462e5","ssdeep":"","tlshash":"a3714cf37350c278fc1cdb7d19761ab1a7151ec27a1e7c65efa028125766e6ecc84054","first_seen":"2026-03-04T16:56:08.859439Z","last_seen":"2026-09-19T22:34:23.57067Z","times_seen":7,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/our-people-icon.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.290Z","timestamp":1789857225290,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/our-people-icon.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-1142\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2B49eit9t%2BwuvG2vU2TO6L6NgYYXIQULmBwHS8cQZjxs0uLyV73bBFzDuZT9%2FH5xIFVawPaQ7%2B4FIzBfiwJquzIq26DEeyaYX8c3fZ6yH%2FbwVDCgkjMj3lqfHH%2FX6mAQTvM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca180c0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4418,"size_decoded":5197,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"2fd5fa5d0197023c357b098a88c2ed69","sha1":"06106fcec69dcf0d4c829bb8b9fd5ebb28ae4327","sha256":"2adc37a1e4558c84e0ad06fb67c80b4bc7ec733e91e7dd0db66bb43dae87d14f","sha512":"3d790204ce924f146d9868c0f9dec7bf6c4eb944d121567bf1522209b8aea6b7f2c8899d48fc49771775eee3d9f4659ae324253910a15c5b57b319553ae096b6","ssdeep":"96:5SzbojO23FUUlxYXtyRGbFRz/wpPSvd60e7uD/leAXxus:5SzbojO2VlxYXYkbLIPSvdsI/leAP","tlshash":"60918c1f9a28236ece081219fac6639d3275d4219ab0489f8f451c4fa23dd2f3ed571b","first_seen":"2026-03-04T16:56:08.860905Z","last_seen":"2026-09-19T22:34:23.572568Z","times_seen":7,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/CEDA_Progress2050_Slider6.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.280Z","timestamp":1789857225280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/CEDA_Progress2050_Slider6.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-57263\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i0eZ8J5uZGm8qvSO5DVE8OH6gHqVJtV8o2y7kGigJqHdNpI%2F48MT3rG9I%2BXGK%2BsVjakBRFR%2BQtXR6tr5h9985kkbBCEKq9IOUes7bTadeUDdXtkXagpiGRlFY3mKqlrH5d8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca08020b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 356963\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":356963,"size_decoded":357742,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3360x1260, components 3","md5":"6e05a45407c66128fd302aa93b52add4","sha1":"1b2c8de4b6188941665b7c2d17e8a9c4b36675e1","sha256":"f1f0de38b1b2d2e90a25c322be7d1f3caa0fae08021f2fad3d865ffe9cf87738","sha512":"69dad548995db0179819b719fadebf1231821688de73a7fbde965b94bf1eb3cc29cad6c7563c8bb5dbc644ed3eeeaf353111f25dc4a120495ce1acb39386ef90","ssdeep":"6144:59vmso0Nffx7EyusrLwKVyfasZ+m5r6Arzf/tjUi+fJM0tQW3Sx8tz2:zmso0Nh7E2jVoasZNf1YJfJM9W3v0","tlshash":"467423075b017e41d604733980970296b2fbadde3953ee72dea88783eb5ab1fa81111d","first_seen":"2026-03-04T16:56:08.902056Z","last_seen":"2026-09-19T22:34:23.573649Z","times_seen":7,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Arup.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.293Z","timestamp":1789857225293,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Arup.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-2c671\"\r\nexpires: Mon, 28 Sep 2026 07:41:02 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 139962\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nSFQW2SJFUFW42nqFRO8b4LLQk6H0dUbkqu5HmTG1vzI%2B4M7JHw88Z529KvfnqflBmBI4402c%2Fq9A8toNu6tmcpI%2FrGuEdn6jKKxmUl1wbYw2OTAeoryRshXAHhIwLN0hTk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca180e0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 181873\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":181873,"size_decoded":182650,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=532, bps=0, PhotometricInterpretation=RGB, description=Arup, orientation=upper-left, width=2000], progressive, precision 8, 2000x532, components 3","md5":"60d7284f7a4a59b01b4afbae5248857f","sha1":"a5086aa1bdc092d1096949fb052061001d63f781","sha256":"4b764e340a91885ad511c2df242c6e5ee4ccd73099b4724e8edc312f258b80a9","sha512":"c1a7c6541855950f724679ffba481b5bcece3d00ac94c4bf6d74258ca122feb834e21d475e8e593d733b0181d49d218a8aa3a9b119bd1ac5df98ccd6d0534b42","ssdeep":"3072:rvPHDvwcWKHqQ5+1wxkbVAJ13SWcpNrBsYowkcPjQ:rvPHkcXx41CIVU13kpNriuU","tlshash":"0804122aa7a86f56edcac63c05685c018537df651a1ba98e7cccf9863fb1319461c383","first_seen":"2026-03-04T16:56:08.893647Z","last_seen":"2026-09-19T22:34:23.574528Z","times_seen":6,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/ghd.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.303Z","timestamp":1789857225303,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/ghd.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-815f\"\r\nexpires: Mon, 28 Sep 2026 07:41:02 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 139962\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dS0AXoeMQuCXzMar6xFsrB7DCEkK8ncgH%2FyKhDfE%2FxhPDws3p9LtXV71tDou0wWAkZfRBNWE4ehlhpVmOx%2FP8JBUoaNubUCVqu0IsLTp5T5X%2FB0Uw2EujnLOmO9O9kqT%2FO8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca28160b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33119,"size_decoded":33897,"mime_type":"image/png","magic":"PNG image data, 600 x 333, 8-bit/color RGBA, non-interlaced","md5":"d6be3df1008145807319920fa7f4b492","sha1":"1b6870d2d2449754431a97724d8be18f480a64dd","sha256":"3ce01fc2ed1a3ec436100801db392df70a83ac0a27d1839b0a46483b5107fe85","sha512":"328e5da9d9206537cf7986148be3d839e24dccbc1501ccde8f2363d5f5b3e5c25bade02226ee6568b4513fb1e6d2579458b63fe485cee60a28c9eab995b47986","ssdeep":"768:Gj/06zKKuv+4BUGh+WFTMNt77z9E3pJSQEg4KF2kQZIv+ep:e/0DKunh+qmtS37SQEg4OQZI9p","tlshash":"55e2e0a42db5c195c27ba83024489de3b53781238fe4faf42dd9486c76d0c255ad4ebd","first_seen":"2026-03-04T16:56:08.877531Z","last_seen":"2026-09-19T22:34:23.575165Z","times_seen":6,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/WFH-Travel_Cover-photo-01.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.285Z","timestamp":1789857225285,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/WFH-Travel_Cover-photo-01.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-37f7bd\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6ys%2FjDWB01aPSlMpcp2REAd3cpzch18wbNW64F%2B%2FMZDa6rcXb%2BXNtBpgXVqtSGPAeNZqcw2Y6PEE9LcxW7bI9uu3WlM5VoYTssZ7IT4QXoBx8IeHBFkE9xEnAU8rknxacj4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca08060b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3667901\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3667901,"size_decoded":3668682,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 2480x1929, components 4","md5":"74d8183b94edeb05e4a52d1f08dcde4b","sha1":"8fe510cc71e3d2321e8dc60b9a2597f6796387f1","sha256":"dd1b2c8d7f2cfeabb83679b2a91f058f78b620a5f4a92d38f5626229938d85b2","sha512":"c819e3ae928242d1e3aabcca4e2dd006599762e6f374eb14e7e441c754c1d64059657d9e1aec3f8c3e639c2582fe7e7b3f630bff1b8aae642d7b95be22614ca8","ssdeep":"24576:P1yN87yzJaWvMnfQrmOOfydnNiONJHBucxSW+:P1o8qJaomfQrbOyFNxJHHQW+","tlshash":"8b25122e51e38cd5cb41a73119d5ed3f89e4ce06aca1da1172fd7d5d33faa80aa43128","first_seen":"2026-03-04T16:56:08.852926Z","last_seen":"2026-09-19T22:34:23.576043Z","times_seen":7,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":323,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/our-values-icon.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.289Z","timestamp":1789857225289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/our-values-icon.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-18f2\"\r\nexpires: Mon, 28 Sep 2026 07:41:02 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 139962\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LPvKdU4xJsA%2Fo0npXiQUVf0nOYdnk1dRtTCjQMLER05BAs1eP%2FRuUp4vp7A2sLzP6mAmBPkIBgJ%2F88u2FWeYEBRBJJmMX8BgJvRddnuBSjOQjPFvgwt5ilAFXYvrzcv0KQ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca080b0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6386\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6386,"size_decoded":7159,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"4f1790aaf95e98fdd778bb23505f397f","sha1":"508287b76e777fad46cd6e9fe9eb0f6aa0378331","sha256":"f3b7ce730700732db89368dfba247aebc0a2bdd3f4b1ad5701c3789531639ae5","sha512":"f3a451f3a6b9077e0a9b4431f733d3b828a46796156bcb87b1e66b21bf6e9aa00529b242893779b69695010c7d1d50253ebed64a83146fae4125434a228267a3","ssdeep":"96:5SYiR41fBJKEJJCjCg0OpKc0UmLB7kGVOD0z91un6EhCtsyf4MWrkeiub:5StuBnyrmLpl00Zon6EhPkeh","tlshash":"57d19ed5f31cecaccf1dfaa6b29c5042e99b08e23025095b07e568658536b3b00f2957","first_seen":"2026-03-04T16:56:08.830795Z","last_seen":"2026-09-19T22:34:23.577387Z","times_seen":7,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/WA-Department-of-JTSI.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.311Z","timestamp":1789857225311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/WA-Department-of-JTSI.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-a00b\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qx8qDZmzagYZ8EG%2F93x5TO7I8Mnw1ScpvLQ8V2xuumiV87n3%2BDHG7tV%2F95tOY6nAF3NQ3PIJHToKKlt2OOJOmRvXPy8QnsTeMDP3BN%2B2R1h29bfjIGTq3Ku2xm4Va1YAMmw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca381e0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40971\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40971,"size_decoded":41748,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 570x183, components 3","md5":"059c039fdd24b276b0e73e3f7e3d5e9f","sha1":"6d5fd8def969719a98333decc5f9c0b917355158","sha256":"a3ebc3d80477a4fe6e8050941ba905523c520ab8b84203708c6f096ab0c1fd70","sha512":"9b96a9ea2571219e194fb44e563cee7b4c4a3391770b38de58aaa50fd83d550885f6d4ee61d415f59f56c50353d9da4a898c72b30b7051e1de2078263bb44152","ssdeep":"768:T/FJRP1rwzU6hvjnC+KxqVkLtftDAePaPaaiVyXtR6cYsYpDQJI:T/jRP1rh6xjsqVkJfZAeiPastTdyL","tlshash":"e203f208e6c3114bc65773791386b203be67a713a17dc98d1ce8ad08c6027b7a5d688f","first_seen":"2026-03-04T16:56:08.887381Z","last_seen":"2026-09-19T22:34:23.577958Z","times_seen":6,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/9280e44e42e6cb2a31a00f8fba5be76382ea744d.woff","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.745Z","timestamp":1789857225745,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/9280e44e42e6cb2a31a00f8fba5be76382ea744d.woff HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/dist.styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XodhutC0WE%2F2aa%2F0J471oA%2F6oYXJ2Du5kE8nxkWwLeb5xNqicy9FhIPo2U5Q8wKfE7mxp5ubMKmeGrcBuUlsIIXf3TRNYOXBCtSMVyB%2BkhDTtd8xCp5SLH4it6s7NJH49%2F0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc0dcce89e0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7184,"size_decoded":7943,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"f31155ac03ab8703115b054977f2b9ae","sha1":"f8b284d06199362fd33d234246859e2b8e1f4235","sha256":"46c8f99315a0cd898be5845e439fe7da9f40f0f14dfc62bf4b4c561b0e01010d","sha512":"60af98bf7354eda2bb1363fb2992f08638292c5dff7a83c9fb79819e3daba3fe93a211fb7dcd831eec10f1d16e2df1fb6a01fc64b9942ba3057d6861b35045ff","ssdeep":"192:Vj9jhjO1K/OaaUl8PzHzcR81B89H7vlCeNA:x//F7qAH7vlCeG","tlshash":"f3e1b863f9f925be1097c272316a77197de49013eaa608a576edc1721f8df84ee03244","first_seen":"2026-09-19T22:34:23.578697Z","last_seen":"2026-09-19T22:34:23.578697Z","times_seen":1,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/pre-footer-dots.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.673Z","timestamp":1789857225673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/pre-footer-dots.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/dist.styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-1fc8d\"\r\nexpires: Tue, 22 Sep 2026 23:05:41 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602883\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8oJ4diYzvTs2lbltMKLtnoI6wxZNLze%2FLwV%2FHRpR1WA%2FiCe3wtlgPw7yzqbwd5IqA85PPzgNUMUY9SFyiKbeAk%2BAgQ0mZPfbGXlTUC7nRN%2B0maE0KYgfVvIORTOoGOXNB54%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dcc78920b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 130189\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130189,"size_decoded":130970,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x250, components 3","md5":"f4726e06f4fcd249b71541e70083a10d","sha1":"6a3376e8d2944d1211834c5ed04d4e930d5bc7e4","sha256":"b244f1800c0fee35d1d0a12d3bf8d92e4c3523d08749a890ead7a038cf0b6435","sha512":"3cd3753e12dec7dc7c618ca1f8a3f8d3858a97664f8e76c3b247b5d677a8a5f9f0bf2ae981c316068ec77c904f5001877ebade855e0c6157dbf8473c3cfb577d","ssdeep":"3072:y1Sstmx6VOhhKCHKf9kw+dQMP5ewDE6ZqUD2Rc:USstm5hhKCHcTEzPQSD2S","tlshash":"6dd30225f7c243288b5b07abab6e3e975b7a41dd04ccc81e0252dce4c06cf6b29d919d","first_seen":"2026-03-04T16:56:08.899223Z","last_seen":"2026-09-19T22:34:23.580007Z","times_seen":7,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/CEDA_Progress2050_Slider2.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.270Z","timestamp":1789857225270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/CEDA_Progress2050_Slider2.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-4d9bc\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2FyB106rJWZzlrihwMMmbW2M3jyqKgDpJfWtE18KdvcMIFQzRLNjuzSrm2l5%2FpU7QGy0tzkyuGDuSTtPE5MqHMkwvImk3QJ9AC%2BRgeErK5WqDSCRNi%2Bl9TwpHMqLEpIOgh8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9fffe0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 317884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":317884,"size_decoded":318663,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3360x1260, components 3","md5":"f9bfde9066dd0122474bbe4c71391c33","sha1":"67c16af83354030449add908d66a86bad7c47118","sha256":"c2c10f10fc4fa0cae428611ef77ff690ee133fa06a76951a389b5c0389f2d701","sha512":"0613bc65fb540edd7bf1ffa629a13b1cd39341b8fba32881f06e1c56124c77071396af4bb4480e02be1f8aba056632d5f6d8808029dc7607a6855ad11820b54f","ssdeep":"6144:GwWpMiMvaYu7qupu4fQv3Tx9YoqDpP9hbARliY8Uj5EuCQ0qhnDZBQEjxq/Xq:C9iNuw44Pd9nqDpVhh2EuCqhDWa","tlshash":"3a642393ee68dc60d03d3f7ffc8d9b03884b5ed64c66a36b871a460a377868159d8b11","first_seen":"2026-03-04T16:56:08.871438Z","last_seen":"2026-09-19T22:34:23.580734Z","times_seen":7,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/CEDA_Progress2050_Slider3.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.272Z","timestamp":1789857225272,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/CEDA_Progress2050_Slider3.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-7f084\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jz3c%2Blyl7nyJSTTJFiNMmkHfh8Jo7WoYCHd0a7%2Bgh4nY8%2FLc2BuUpHApSLyz2ZHuMCxHs2XmFgFZoq3lV%2B9Y%2F0UyBBmj9swTAS%2BENm2AXtqcKs1z5AplVXqnIBDtFLBYZr8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9ffff0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 520324\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":520324,"size_decoded":521107,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3360x1260, components 3","md5":"c15fbe5dc180a86c98de60f66fead3dd","sha1":"adfdf77a4538804c0ccb70a16da16de291d840ca","sha256":"558eba503ab7a01ee20d38ce5aff639cbaf98f0aafcfa154a511198d3ce40d67","sha512":"08c6f194e59ee49f2ec3191fdaa76d254bd4c1f3d0abc71f0f63362864225b271bc8b80b4324d48c2fef2c843da98751eb0e84003eeed219a80a8f0b6d191ad4","ssdeep":"12288:CCaCEtXq1kit2PmPKc+acK1AR70XHGJ19A72m6Dq7XriC:BzEtXwJt2PmPKc+oKRCmbal62DrZ","tlshash":"6fb4239884f77e2db52f656a01103b1101b9a5701eefaf9e1a0f9f79721c684980b4be","first_seen":"2026-03-04T16:56:08.900923Z","last_seen":"2026-09-19T22:34:23.581509Z","times_seen":7,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":142,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/member-benefits-bg-image.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.287Z","timestamp":1789857225287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/member-benefits-bg-image.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-3a4f1\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZlqo6WgvvciM6sMSDrwFHl8wEyUeNnoW3ooTkHHQgGjgzFKl0iHHonaWsbvA8zQujTokYykwYe48aLfMQaNgXs%2FP%2BpOtdlq234zvCEZVB61MslehDk9wouh4830LyFyS6M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca08080b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 238833\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238833,"size_decoded":239608,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x300, components 3","md5":"6940e160b84eb8b246f6611a3638d8e9","sha1":"35619ee97ceb51c178c0b5f64fefa64868fe1841","sha256":"ad4ce8817f4e929f309530037bffee9da9d528bfe7dff48097e9c69936a89682","sha512":"0cf996a2aa3311bf6e871dbfc5dff045a49a5365aa5b40fdc3bb6d415ba9672694cc9de3b0dd389f3e8fd491ac36359edb37cdffcdef547add69ff9ddc56e2e9","ssdeep":"6144:tk2WEM4utaFJHF54xQ2cUd/VA480u49Giu0yJy:tZWFtaFD52XN8f496c","tlshash":"3e3423b498ad52f850c02673b666d0bf16f4a26fd0d5e8cc7a24c6b5f70da81f40b21e","first_seen":"2026-03-04T16:56:08.828605Z","last_seen":"2026-09-19T22:34:23.58216Z","times_seen":7,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Siemens.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.310Z","timestamp":1789857225310,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Siemens.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-5fd1\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hOHzz6JcdKkGVqpg67DIy5UWX2IRFZ9el%2F9FzaLEjiuqGbk6jGWhaksXpBoEOo%2FHQExvAAbQw0dxOuXrmIwx1G5R5kcMhfH%2FxSq2ufOn7vgd%2BnyWr%2Fr%2FyoXev0j4x%2Bv%2Fxug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca381c0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 24529\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24529,"size_decoded":25313,"mime_type":"image/png","magic":"PNG image data, 2500 x 601, 8-bit/color RGBA, non-interlaced","md5":"2e3fb10db7f05eb53b63c1732370b6fa","sha1":"21f146adfc9f2e0d6b482244b053040f828eb5fe","sha256":"85098c1db77bbfb6c222ecb02ba58b2c9571f7058ed0caa6ca6ea0d61abd3c5d","sha512":"c8582278c8d328ae411aee1d15bb1ac7d1a604df11c7c08ff0574dc5603e8a8be03b2a6be77d953984aafc7eb0dcfe68b1f2360467468317c530ea0657069bcc","ssdeep":"384:iTA8xzlPVDhw00H6c7l52Y2clfQ0zzFBA3chc32K8igOaufGIWKT4L5e:i1zFnhcp8+tFBOcuGKHaufGOsL5e","tlshash":"5cb2be3f6f55bd2aedaa17f414462cd12bb02664aac4aa4f0176b2da4dc508938073de","first_seen":"2026-03-04T16:56:08.858128Z","last_seen":"2026-09-19T22:34:23.582803Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/splide.min.css","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.246Z","timestamp":1789857225246,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/splide.min.css HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ndZ1cRz1tUe1%2FBIEsdcZGvEF4WDEdD9%2FDXB2HL9yyVBWOW0dSpV1MGdaLzxK7MlF4MpcN7ZEdIyJ%2BnGcwjBLxKqNzq5LIPKAGvqQLqEGxc%2B7d34zS8xYLG2%2B7OTrk0Vtjuw%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6824ab17-173d\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 602887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9cff70b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5949,"size_decoded":2011,"mime_type":"text/css","magic":"ASCII text, with very long lines (5949), with no line terminators","md5":"c7cc465b8b8ed0c655122d7553dac6c4","sha1":"d38ccc40cea96f89ef3626a3715ce7c2334bf065","sha256":"b01d4eda85e7e726925b54fff76ab698653ce880e16748f561af1e4affba41f3","sha512":"84638db971c11c793c5cd869f2b151b2bb1a974d9ffe049f047cfb064a5f9080392e82f7e28cb0af797457fcc1b746f6fdc16d70f4c90e6695a499a6a5a23775","ssdeep":"48:rHRi+HPn4stlcUM4iaPbJYRowVTUilVGgB5S8ye0qR:rHWsS4ninVTUqHLP0qR","tlshash":"07c1cc1ed5c82f0d101aae7329acca5fe0cc837246970275d6ff526c464886a5bec9df","first_seen":"2023-04-20T14:03:34Z","last_seen":"2026-10-13T13:59:44.701767Z","times_seen":658,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/dist.styles.css","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.247Z","timestamp":1789857225247,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/dist.styles.css HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ECpOJUl5qAdBectEsa7bm5Jl1j13y3ARSU7b2IlutnOcH1P51Jbu1P5Fx8dvEwpwY3fdo3GDQukVI3eL%2B7%2B8l%2Bbwn8LqPCclZ0tSvsGFpW8c5xUDeYagYBNOzA1Zmf5LNa4%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6824ab17-3270d\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 602887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9cff80b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206605,"size_decoded":32731,"mime_type":"text/css","magic":"ASCII text, with very long lines (65510), with CRLF line terminators","md5":"9ba316eb9ef095266bf4f3def65213ec","sha1":"0625a97706556c4fcddc5ffea88d867d43d003db","sha256":"bdb6ae7824a11a070c48aac01593c2bf6ecbbbeee07f8c437102c69d1ac82457","sha512":"04d2091cb443ba381e1b210a9e43f805af41743ea0cab3592f5f15eb88b401cd2e378f09e463b85b7691cb685c38f27ce16e04c86d549d7056f8c65d58d07055","ssdeep":"3072:abrpPzbcpRHtwTC5eTA5rGYm5VrZF30smtXFRhM0ugdB4Dp3Uwi6KMsUWxt/7uJz:abrpLbcpLGYm5wdB4Dp3Uwi6K/JQ5","tlshash":"e3149756b742103aa527c1b9f190bbbc622a90c1df131aeae5437b24c7c57d71ae338d","first_seen":"2026-03-04T16:56:08.826079Z","last_seen":"2026-09-19T22:34:23.584213Z","times_seen":7,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/custom.admin.css","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.249Z","timestamp":1789857225249,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/custom.admin.css HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ffarxn9gFCQBHHa0PUqilLv3kj%2Bq9Pu97cZD4AP45%2BQ48qXXTh3M6bVJe2koRD4DcNY9xMDWvah0U7AgYf%2BlbJAthpo9BsSBLrOC9sczVNkBrsm6cOcrkrUEALceCkn4LLw%3D\"}]}\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6824ab17-316\"\r\nage: 602887\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc0dc9dff90b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":790,"size_decoded":1076,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0be6d9ec63a94bed99f8c6596ef320f3","sha1":"e5156e4efc6423a341765c7e0367848805ca2673","sha256":"8f4bed3a8d29857e2410a6285803e429cebd49df7a3bc1b31929983701dc4081","sha512":"44e5a6cd36a6db6cb22326e5f3dfe59b59db5b647414f3b7d017f3f3a04c4fa02db0ffe7323df566126a946bdc303be01db41300ca9201f1030c07625e978d96","ssdeep":"","tlshash":"7a016dfd0854425060390e0bcf5ae21aff1684b7a7a258c4bd81f7009b6a461cfb0e54","first_seen":"2025-06-21T16:04:07.313887Z","last_seen":"2026-09-19T22:34:23.585039Z","times_seen":10,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Flinders_University.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.301Z","timestamp":1789857225301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Flinders_University.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-1417d\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tv2g%2BKp%2BULClMkPdBKfbFsC3r6GcmgraJzLfIY5MumTC7sJr04bx9KEOwTq3GLnEqxD3d0jBZ5RcaPOR4jgzuQTMclr9sEEImP%2F%2B6gZEN1EgiuDudkA7tmhVJxIdJMIhMLY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca28140b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 82301\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82301,"size_decoded":83078,"mime_type":"image/png","magic":"PNG image data, 3985 x 1168, 8-bit/color RGBA, interlaced","md5":"fa52245fa40d1999d60965066ea262c1","sha1":"9f0c173656e031fa25ad8fb25f73e4d4681d7e4c","sha256":"3174e091a1ad5907bb39f659d2391f6d2b24f30d7a6b0d9683be1680086c7eab","sha512":"decddcdcc8a8f355d83771be6b676978f69f41ab83e3545c7a9d61f94a414c2382193de35d2758aea75531433ce27437cc9d90d3578810745d049e6a1f82b25c","ssdeep":"1536:D7gtbQb+A6V10vpccPHP6u3/6khAxa5wE5fYF1bfCnujai8E:gQbF6wpHPHim6k2xkwGfK1jeu/d","tlshash":"f48302b48c23d98cc91597fc361d8a75272a0c0828181f770bbcd819efa778479a7f5a","first_seen":"2026-03-04T16:56:08.873943Z","last_seen":"2026-09-19T22:34:23.585725Z","times_seen":6,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/NAIC_stacked_rgb.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.306Z","timestamp":1789857225306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/NAIC_stacked_rgb.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-bbf3\"\r\nexpires: Mon, 28 Sep 2026 07:41:02 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 139962\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=blg1nv4TKQEki8K7N%2FmhvM0PwyjtfnowZGJdH%2BMD9okMzMZ5VISFRLWesIKV%2F5shg%2FMvGZRRLnjhvGDh1D3%2FiUZ1Bf7BXTntEKcs%2FyZCszsVemPHrAzmvtE%2BcYraoMQKbZs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca28190b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 48115\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48115,"size_decoded":48897,"mime_type":"image/png","magic":"PNG image data, 956 x 420, 8-bit/color RGBA, non-interlaced","md5":"3f71a4d9259c11b8698bbc9504e0b840","sha1":"97c5a9faf5a35cef40d0dd36b59b334f27a52a00","sha256":"1ca49f909ef3c9663319ad13d9f1e4d6e3c4db0d2732e3283fce874f52645188","sha512":"2015ad3cef4b44ac1a32ee1a48402ef627e673bacae023a68fc929bd5a3f58e5b9de3676d6fde2541cd387abc2c1fa5849da81cb2ed8c2b7f0d9ab7300a0bcaa","ssdeep":"768:WGszjV7PS75Fg3YV9P3Dz6mlWT+3ii3XV/QUzhsL/GUMgdV97lJBGgYryYLiMeP4:W/jVA5uIV9Dzh2uV/Qi2/75n7lqnrDm4","tlshash":"6923f15049bffa705cbb9e758c127f1f2d47b0125ac1190ae7c92758a6cbe9d2809f0a","first_seen":"2026-03-04T16:56:08.833035Z","last_seen":"2026-09-19T22:34:23.586376Z","times_seen":6,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/f903e4850ec8035f60e851a7307b2aca1c2aa861.woff2","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.680Z","timestamp":1789857225680,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/f903e4850ec8035f60e851a7307b2aca1c2aa861.woff2 HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/dist.styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OlgCrvtByZAkURJJcxwVQoiVIEniS5zBYZR5xHvwyPyQUI%2Bs%2FLbOwDKptcYNQ%2FIhQoCdL0dclt9nxeaAiJDImnS4vI%2BtVz3zNbbeqS1AmvtHm%2FYg3lnR0oY%2FvIhmmOdY4Cc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc0dcc88960b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7184,"size_decoded":7945,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"0f88f315c13589348642511045145806","sha1":"1cc80a7b836cd6ead43d81517ca941f47d824e31","sha256":"4b3bbc368c950675d1ca6f6808325195661661073189b2342175a4677a9d3874","sha512":"2e52bb820f395ef5aa66cc3e046451c5855ceedadfddbc11df93b3abe24668417e8b550001cf98cdca23dfc7e31be1826397c3e838391e8ef769f01befc484fc","ssdeep":"192:Vj9jhjO1K/OaaUl8PzvzcR81B89j7vlCeNA:x//FnqAj7vlCeG","tlshash":"57e1c863f9f925bf1097c27231aa77197de49013eaa608a576edc1720f8df85ee03244","first_seen":"2026-09-19T22:34:23.587132Z","last_seen":"2026-09-19T22:34:23.587132Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/CEDA_Progress2050_Slider5.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.279Z","timestamp":1789857225279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/CEDA_Progress2050_Slider5.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-5bdcc\"\r\nexpires: Mon, 28 Sep 2026 07:41:02 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 139962\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MSxkibZo6e8We4JfdopvTRdwYdJr4G8mj1b3yVUgmbhP04I82R7PduJe02b4%2BJfmMoGkCZTiKJLUBGIiLcEfht4GvAri4FfDMeIuRLxt1dLY4Yn6UlDzl5YEXjRmpRExf8k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9f8010b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 376268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":376268,"size_decoded":377041,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3360x1260, components 3","md5":"f0c261c2a88f9f22fd178b573f5a9ee5","sha1":"b350811e0ffaaad9778227818b3f9b4d9f2a8732","sha256":"1fd8c38e05f2a9fd8d6f03abd8ad197343a85e351a9072151e8f0c490a571a21","sha512":"d2cb87625bda4c689fcf279759dafb4e749513d37d6eaaf8ed23d1a3fb4107b88330cd8e9835e0e02066e8d8b158f58d6d0a7f6461fc7d38f27bcd2de83dfc0b","ssdeep":"6144:1yJP3feTfUYMFKUU2g/ha7VU12kbDdjObC+hNuE1f9iC0ER+u:fUBdzgkVU12kbJ6hNuE1f9j0Ecu","tlshash":"658423f01f1a4365f97e32b6e706339b83b2ea9c5482bf6c1ab5d29324783191504df6","first_seen":"2026-03-04T16:56:08.892559Z","last_seen":"2026-09-19T22:34:23.588241Z","times_seen":7,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":124,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/AdobeStock_220718673.jpeg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.283Z","timestamp":1789857225283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/AdobeStock_220718673.jpeg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-52b1a2\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34NiKFHEp6%2BuoYBT%2FxwCnJaiuzbF7FtLVUw%2BESwlqqbXSdvTzyoc%2B1FyKlsIrF7F%2FWaZkxD02ZtvcPw2Q6EeDuK%2BCqdPZQSnH4IPcGS59UX3ZzWPYnsBqaUbeEFUxS6cKKo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca08040b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5419426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5419426,"size_decoded":5420211,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, description=Top down aerial view of urban houses and streets in a residential area of a Welsh town], baseline, precision 8, 3992x2242, components 3","md5":"83ad6a2abb75ea56cb3d325bab0cf2f0","sha1":"b03ea6fff77e88fe3a4ce53cda667c4df0406fcd","sha256":"98fcc32a16a6d0579b9948f10b6f100d9009d03443aacc9da00057a9af650536","sha512":"db26c104bd5d37df70ea1af541aed66de5162714dd6788eb330944bfd8dba1b7ee84982e90827104d19873670a0f8af782d1f76c80b268c0c44683c63f86779a","ssdeep":"24576:Dk8OcpOakU0VFFn0vTGXNdz2I407SVVQ01rA2Y:Dzt0XmvGdzK0eVPAx","tlshash":"73253357b6202929f9889e704ffee55256b37e128de2405f35ac86166f30348eac11ff","first_seen":"2026-03-04T16:56:08.882276Z","last_seen":"2026-09-19T22:34:23.589001Z","times_seen":7,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":410,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Dual-CMYK-BLK.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.300Z","timestamp":1789857225300,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Dual-CMYK-BLK.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-13061\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BwKx0CsScpYI0imwG4PboPMN4qoLru9ZA1ZOANBll3B9tnAiRc9hIBH9UgXCP1LE9GAVVymXvwqxsO0dA8N1PC2J4SAqZf%2Fj%2F5NIs23O005fr2Gg8btyNumZAp6U3AVVF0w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca28130b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 77921\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":77921,"size_decoded":78694,"mime_type":"image/png","magic":"PNG image data, 1736 x 980, 8-bit/color RGBA, non-interlaced","md5":"2b10e2c43df937989487878b086d2842","sha1":"c79be1204738a63f810cc1f4d9d34bde856a05d7","sha256":"4e4c6cc86fb241f68b8b5183353d4f1b90852541c9e9fa378a86daf89b48e7c5","sha512":"d80a0f0103f5260770658cf9bcfcccf50e7c70d70af0374ad5ad29a36d12776abed3dc7b038f5a46b71ca76b23ddd9d1d5e7cd0d1d76ae043d6a483c0572532b","ssdeep":"1536:rkjsd0uuulrCvd5ZnH11Ncqow4GNmeyIM9qywJxcgrSqkBp39wIn8ArTC2fBqGXM:4sd0us1XH1I3w4teyIMqRJxqqo39wIXK","tlshash":"1773f1b0414be91add2969323d832f9c6b2147494c04f31f4fb99f11bd97afd1ae062a","first_seen":"2026-03-04T16:56:08.895185Z","last_seen":"2026-09-19T22:34:23.589711Z","times_seen":6,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/charity-tick.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.316Z","timestamp":1789857225316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/charity-tick.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-8180\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AawbWu90D%2BeJdEgQ%2Fcgd5eDnbldXTcWPnzJCotC9NCsSNzzFEVLwN9US%2Bpc0fHVNP%2BKk%2B1GrW5Ccqije%2B7p1lEriwQe6Ya7Fq%2BEEpzNc8EpFMGJALMzcecJdMtmxc2FHP58%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca48230b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 33152\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33152,"size_decoded":33934,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"0eba972e6629a8e6a39b437a2b89aa75","sha1":"4397c4b4447d0ccf6999449da20b1de2ecdc7008","sha256":"398e428024389a49af1fe2c89acab7c6261d6914bc9b7bffa691194c0fc375d4","sha512":"422d06aede230b39267042e71fb1028dca6ccb89ec84c20cfbe4b3b0395cd252cadd83b2390982369e083e74f8f634a92c63e2e84f145762b6e678bad130a6ca","ssdeep":"768:n4+bRNqlYr6SWt0eL1ew3e9d+3/AUxSAusZ5zfQN:n4WBr6ftNL0P8oUoAusZFoN","tlshash":"12e2f10bb3293932aadf424234d1d7783fe054d6ca275844bd1949d7fb248c91f88966","first_seen":"2025-06-21T16:04:07.28523Z","last_seen":"2026-09-19T22:34:23.590431Z","times_seen":10,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/ee59d5d9ffd9ae634a9f1d03d0e89bef788ac282.woff","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.738Z","timestamp":1789857225738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/ee59d5d9ffd9ae634a9f1d03d0e89bef788ac282.woff HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/dist.styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwYUD3s3M5Oe8NG%2FZ0fOLgoJDCA8jB%2Bhb9r8VKIG14RVAbrofBBq4vwOnDDHvV%2Bi8KAhmUPuB3uynNjcmErBljsd%2Bku0horNQ6P8l3HUFDA%2FVLqMdVjhOg7a6DA0NbuoJtk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc0dccd89d0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7184,"size_decoded":7943,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"8d0ffe4d77d12b6ece345126690e706d","sha1":"e109230d3f504c590adce9bc0024b33f2a941e37","sha256":"f4ed339b77940ffa48b40e469b78bcec5751d55e0314730475453a757901cc35","sha512":"7ad4ab3719a9761b13ac87a5afdbd91ebd891217051adb3961cd92223fa49377cb7171439ac1ebaef9d1103b355f4bb772af82df369d2195ee6827f26e899254","ssdeep":"192:Vj9jhjO1K/OaaUl8PzxzcR81B89t7vlCeNA:x//FdqAt7vlCeG","tlshash":"c0e1b863f9f925be1097c272316a77193de49013daa608a576edc1721f8df84ee03244","first_seen":"2026-09-19T22:34:23.591057Z","last_seen":"2026-09-19T22:34:23.591057Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/CEDA_Progress2050_Slider4.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.277Z","timestamp":1789857225277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/CEDA_Progress2050_Slider4.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-a602e\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vcAqG0AhJO71%2Fre1rqNb3gyEPemKihUxl4zlihtXmDbHlDl6yANHEVVZTSwtf4wC48%2B4C4HSeFvgoSWzc0xJ%2BWbotRn87Tmez0P1idCA3IaOBGlOvfSIm8UP2YWTpnWt67Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9f8000b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 679982\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":679982,"size_decoded":680759,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3361x1260, components 3","md5":"2eebe989dbe9e8c1b8bb43c70af18e84","sha1":"e810a65b8eddbc417daab921c16f04db9ab017a8","sha256":"97de0da504b8788b3a5dd6bf6351374561d356363444a0ed8d4caa8f526bd94e","sha512":"39a3aca07614d5c0ee2e46517c4805d3cbf4742ce76db5725aa21ec345e151b7562f35acd822813139e1371e5d3dbd283d65b3bb7345b87029ef99f93b8cdfdc","ssdeep":"12288:eDWLWSJmOOwPLo+Kw8qvAuMhEk6naGKa0oRRTX8IG:eyLlU+x82AP6nDNDLX8IG","tlshash":"27e4234ae17a853df940d632b560b99615a8e0dd3ecdb7780d5bbc4cba333cc5aa5c01","first_seen":"2026-03-04T16:56:08.849315Z","last_seen":"2026-09-19T22:34:23.592234Z","times_seen":7,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/KPMG.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.304Z","timestamp":1789857225304,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/KPMG.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-2eb6f\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x28D6DiqwQ4D8tACCB0D7y54aL5L3mTDVkGaA%2B7T3zs%2B4icgV1DWVBZ9PFUv%2FhsmNPOp59cDOzSF4ck8KsKWwxXrePT7Bj%2B3VwcOnv92CpAYaxjs4h%2FKjnGdNTWSg9Z8Wkw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca28170b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 191343\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191343,"size_decoded":192123,"mime_type":"image/png","magic":"PNG image data, 3760 x 1520, 8-bit/color RGBA, non-interlaced","md5":"3ddd98c7dedf1f3617e261b784969a2c","sha1":"93bab4f7b9c9d442fac07822186c3f098d8bcc7e","sha256":"fcc9cb5c34f82edd1e01d14a012f7a0684cfe88ebf84f6069a354f048ac093af","sha512":"01ecb5640377bcc1c0740420f7b291c433a30f86a35caec0ae3dc188f97d61d07a91d1779eb46d0205882d537e1a79982535d749709b7e9c4cb5aab9432e862d","ssdeep":"3072:Rm51XX168Ya58KF7v1o8X4e3kjfGlkvRwuxDLKRRmm/gXLxffb7bSm8FxvQc7ylo:SBll184d1X4eUijGdfb7b3mvQya7Kuep","tlshash":"071402c3bc9a5624fc085471666b0b3877953b7cf3d60bfdb219962188b158fb9131ac","first_seen":"2026-03-04T16:56:08.88633Z","last_seen":"2026-09-19T22:34:23.592887Z","times_seen":6,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/5932253fbb6df708d91347c96aa07ef9086c5837.woff2","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.678Z","timestamp":1789857225678,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/5932253fbb6df708d91347c96aa07ef9086c5837.woff2 HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/dist.styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6824ab17-6ac8\"\r\nexpires: Tue, 29 Sep 2026 22:07:06 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1599\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fv%2BGqPI0rP%2BLwIU1Zm6mHHcr0zBHFdyAcijylp38KWr%2Fa4tHYIsk8vhrsV2H6%2BIUpA%2FqEDZ8BCJjjer535yrTJPkyha1oVBR7F3do%2FCf9DVv0NcpJLrlss4w%2F2g2%2B4ThNUI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dcc78950b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27336\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27336,"size_decoded":28122,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27336, version 1.0","md5":"25d02334e4acf44b0bdce65451359dec","sha1":"5932253fbb6df708d91347c96aa07ef9086c5837","sha256":"ecb528c358c77b7b2026a40aca8d8765fa7c8bec9de1c75175a09fa1a4934c2b","sha512":"c1f763235bcd36585f82d4fc1008b5368a18efb196ff0f74301682017f80d61c00fcf8ecee652d621dbb7707582c8da3e9ca8673b5721871afa73a034c7d3965","ssdeep":"768:HDmetfuLp/m2h1aoqsLJxdZgQ/Evm5Qb4:VtG9/maQCLJxzgQ/Evm04","tlshash":"7ac2e008c67b9672e009de921a5e312d13bd380bc53b7761e95e9e6e1c470b9a1cac7c","first_seen":"2026-03-04T16:56:08.898125Z","last_seen":"2026-09-19T22:34:23.593545Z","times_seen":7,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/systemPageComponents.min.css","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.253Z","timestamp":1789857225253,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/systemPageComponents.min.css HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FaYv%2F0pmnuQHCID3gpSu1unVc18fx%2FfyP2C8E%2FovVMll0efYXiybWd6wZwS22cL85kFv6aAzuAmP3blDx4uPoSKBtN1kzF3nk9IwYym4zhSxfjyja4YgUfsvkcynd8yFCpk%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6824ab17-2006\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 602887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9dffb0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8198,"size_decoded":2621,"mime_type":"text/css","magic":"ASCII text, with very long lines (8039), with CRLF line terminators","md5":"269dc510ad6a975ba378791eddedd036","sha1":"a1597deb20b51f5f9492c609c910c83a8045dc18","sha256":"40d80a904882613dbdd56665b9dfbc844352e8eceaa7595a0aa612207e780ee0","sha512":"4b52f046dd9638a77fb61dced2841adac517f4cd73624ecd83c58487a9aa86256f70aed938ccb7fb9f6292ca6de429e08602cd784ad4be78e54aa874bfef2190","ssdeep":"96:7FUcVa1+6qZnB0ceuIdmG7KBJmUc24BMd:za86sTeummG+yy","tlshash":"2a022d33b991301cffa7c4254a69efd875239753ce7346aac49fb413c03e5980161baa","first_seen":"2024-09-19T22:11:55.300888Z","last_seen":"2026-10-09T04:39:26.344316Z","times_seen":318,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/3044-CEDA101.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.284Z","timestamp":1789857225284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/3044-CEDA101.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-233476\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BHa%2Fs5w8w6y%2BF%2FEwX7tudgK6IPwn%2FNeUgBTFV%2FZScNdl%2BXVbh168UWyNbiP%2B69eUh3m4NU4Ym4F9dVkuPWBI%2F2216ENNdWAiNfJBa5GGTcQ%2BBPVldwl3Wqqb9emfqVfyEhM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca08050b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2307190\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2307190,"size_decoded":2307981,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=Canon, model=Canon EOS R3, xresolution=154, yresolution=162, resolutionunit=2, software=Adobe Photoshop Lightroom Classic 13.3 (Macintosh), datetime=2024:06:07 06:46:01], baseline, precision 8, 6000x4000, components 3","md5":"0f6f90cac406a35fde6e5ed840df2849","sha1":"b7823081979e8b1c19c1412c3c532d8f531c68c3","sha256":"f061f2c38d1b893851364bf58a5a6f46686bc2402a06cb77c058d66b7328f0e6","sha512":"1dba6b28e9ef575665e83eb5c8be02558e7ded8f5327567ede83fa7fdd8a12452f5726bd00add189001264309917479ddb4d25a87814b2e1b50c899db1e526d5","ssdeep":"24576:/rMXT7dUUxx/S892jPYe7HiOZnqtLhhwFxRH+a0U:YXT7dUBK2rY4CO8tLzwFxRea0U","tlshash":"d02523747a3629b5c61218bf4282ed0eaf311296d8d20da17cad1d172f479c32fcbda5","first_seen":"2026-03-04T16:56:08.851342Z","last_seen":"2026-09-19T22:34:23.59524Z","times_seen":6,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/amazon.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.292Z","timestamp":1789857225292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/amazon.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-c532\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNVVJCuVoMeePxtm9B8OahbRONHVgqhOV0%2FCOUuDkbGQSlGvTjVCEaOYQeJtv7TbfFgG3OJdxlP9K07E%2F1BduYqdivty5hbGxmx6ZSf5H%2BfClxp3UV9fFBfAgwP8bu2PBJg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca180d0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 50482\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50482,"size_decoded":51256,"mime_type":"image/png","magic":"PNG image data, 1022 x 663, 8-bit/color RGBA, non-interlaced","md5":"7ee3ac668617c085c38749210ac531aa","sha1":"a36a75093938d95549c1d54c9b57391ed9109b09","sha256":"f492cd6002d60a63be47ad2fc887c8b90ed85a6f5731d4ef7ec546313cf20271","sha512":"ce1dda28c43a5fd58e56fbfc9eccf49349c7bca8903fdb6cda1435e69fe24996695dcd3a832e14b199f944adb2b8bfb3bed48c3904a1193613fda166544ab977","ssdeep":"768:89V3OTAKlin5r+APIVpZyEJOGwf9t8ynSbso1wq/g2rzpfRhrelUIwp8F0SrX+w3:89V3OTni5ziWHi1wq/9fRhr5xCy83","tlshash":"a333f1b6d417de81cc3ed4263ffe6a5a519a002059c216f2e3b3c91ee1936afd8106cc","first_seen":"2026-03-04T16:56:08.872682Z","last_seen":"2026-09-19T22:34:23.595962Z","times_seen":6,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Westpac.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.312Z","timestamp":1789857225312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Westpac.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-17f98\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgWF3ko%2FGmyvDuW%2FY%2BFqpeJWRvAcUdLih3WuloC2xulyqD4GgM2%2FNowMn0%2BmzK3xBB3RRbNrW1MbU6vMSp7QHR2lKqONOzeElkPZPLiumckcjqw%2F%2Fu9%2FbZpzBrgipb8EmBQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca381f0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98200\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98200,"size_decoded":98985,"mime_type":"image/png","magic":"PNG image data, 3840 x 2160, 8-bit/color RGBA, non-interlaced","md5":"b456b1e5e9cf77e2b2cdad4f78e54a7c","sha1":"e2555d85bccee91473c97a7d03e2bd617859447c","sha256":"7e987ebca06a7fa465f4f51bfe5fe2e7b9dafc9920f702725d6766b757c33b95","sha512":"9e688490112ce82a6e1ebcc8f6d4f61ee8f59a72cc1f51fa46a2648d8d241aa96bf09c12e47cb942d00246ada95948b5cb09e6703ea6df08b183c4f2b070d3e6","ssdeep":"1536:Bw6JNLgOpLpmFeiVdVcfdiFRnBN3gwEUosc4XUFSpnNje4AwUObR+rwY2bXvc5:aACOpAFacrnBpBosnGQNXOOUrx2bm","tlshash":"cba38ce1503f4db4ee8d103751de275dba241b53528bc30a97e9b2f5aa1bae0dd810cb","first_seen":"2026-03-04T16:56:08.879878Z","last_seen":"2026-09-19T22:34:23.596656Z","times_seen":6,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/2448a955a6843c9dc097668bf9456e66024fac7c.woff2","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.682Z","timestamp":1789857225682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/2448a955a6843c9dc097668bf9456e66024fac7c.woff2 HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/dist.styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KuELBc537EblOcR%2BrLHgZpDO6EbDktWUiyBjHON8SbQXC2nwC72TsBFfHisPk34PRAYQKrL1JtkkR38k%2FZu2zU6TexhrbvDotOCAXipCWwdecZc03m6i7UqNLvaJT5ZJx1M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc0dcc88970b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7184,"size_decoded":7937,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"79e6134b560bf38f4f5ce91185ae249c","sha1":"a7ee76726f8304868e8451ff0c5342f7c677885b","sha256":"7710d72899cee22dfc6a3c6247b0b185d0f7f8ef62e2532ad8ff6cb41c7a741e","sha512":"032310b3c580ada1897123754d89fac3dfa4c0e716e61fe4db6d771941d0b102f02bef71e06acd89eb6083602cf402f1645af21c2661fff2b54c3dc65c22b0ad","ssdeep":"192:Vj9jhjO1K/OaaUl8PzSzcR81B89S7vlCeNA:x//FUqAS7vlCeG","tlshash":"04e1b863f9f925bf1097c272316a77197de49013eaa608a576edc1721f8df84ee03244","first_seen":"2026-09-19T22:34:23.597446Z","last_seen":"2026-09-19T22:34:23.597446Z","times_seen":1,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/ClaytonUtz.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.297Z","timestamp":1789857225297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/ClaytonUtz.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-21278\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyba1npNQ6Ei9mvXWXgt93LftECGV3EjA7JI65AO35LAy6pVVhBPUxxGEtbHnYP0MuseWhDyn6ok5uZIfiLMVhR85NAy6WJ%2Bc4cgHUCSLDmNVFxu60u%2FjIxoZ13oaZ7%2BdRU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca18100b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 135800\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135800,"size_decoded":136576,"mime_type":"image/png","magic":"PNG image data, 6139 x 1449, 8-bit/color RGBA, non-interlaced","md5":"3e22bb169ec1c4445f18af00a1289805","sha1":"5b93c78c73d5f262ad334b8f30a9203fd4adb56b","sha256":"16e67ab05524c38c1c28d36890e86ec5ff5073b9fb0f3dc27a5e7473404b7cfd","sha512":"55a68483197e73c80a09989c1d073f59c434d1ad40349c7d261443d7c1d382f5aeed537bda714cd1c7bfb2174804419f8df9d7c08f05b212ada964df66483504","ssdeep":"3072:FAljhfQNEo2IB4vp0raApiL7jK7z5gekU1:uXAf+SuAp8C72er1","tlshash":"9cd3bf5628e1e881ec6c1afc7265ef81a397e67549921e5ed371408e0c22cee95cbf48","first_seen":"2026-03-04T16:56:08.856349Z","last_seen":"2026-09-19T22:34:23.598612Z","times_seen":6,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Microsoft.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.305Z","timestamp":1789857225305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Microsoft.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-b22b\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VS%2Fkn2oGPD0CN9bNY77B5l7gG%2BgrUAwknc8TTVVUudMT9FvuH0sETXHspncJK2TzlCizZYz0LDhI3vHPmCxlR8FL9ak81ogT2aQLP%2BDtb8S2NPfhoJppG6HFL8MLs5mS3Uc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca28180b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 45611\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":45611,"size_decoded":46385,"mime_type":"image/png","magic":"PNG image data, 2096 x 771, 8-bit/color RGBA, non-interlaced","md5":"88b7a1e815770e8fa3db20a0c781cb48","sha1":"50c8899a7f3a028edf4449fde82f3e5ad1df382a","sha256":"ebcf7b827976392c5c2a5e7f37cd1328045f84ff373b7db7c9966a3cf0ecd795","sha512":"961940fb9ea858b9338b892875d09f971d620f1d40addca27d45fdb120569630d6d1c8bf64f8ab7c2b0917bb1977b4ad45d37575207737c59a0474a1bd8d81aa","ssdeep":"768:5wtY7/TUS/tgT1IKAzlol6U3GyNIVD9f25dh7YAstS4:577/TU6O1d8e6nCIVD9f2VYAsM4","tlshash":"8823addad4335d80f879e6b90bef5f367b5847de28437bab0fe490a65c013a5894108e","first_seen":"2026-03-04T16:56:08.890298Z","last_seen":"2026-09-19T22:34:23.59928Z","times_seen":6,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/css2.css","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.482Z","timestamp":1789857225482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/css2.css HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/dist.styles.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1DH75Ik45oR%2BxgtrfnfURhoYcZHlUjIbu%2FobdCudh4mwWGtHsE72RAw11KUivT7jTpER1rSGOwd2o5TWfOBJbPOthdQsnpQHY%2Fjflh9ikULQ1V%2BWKCzC5S1Qk0S2PWXphl4%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6824ab17-1a48\"\r\nexpires: Tue, 22 Sep 2026 23:05:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 602886\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dcb48280b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6728,"size_decoded":1391,"mime_type":"text/css","magic":"ASCII text","md5":"6b1297584ffdbd64c6acab30676cb44f","sha1":"c39379202456465d2dd6fe882b981e1191692c29","sha256":"9e59c007d65b0bfbfcd2cded28ccaa96dc6a618dc170b048cbca8caf1042d60a","sha512":"e2e08051d20bf2ecf176199c4240771631482e80caece8acecd5bedde36a0a0ed1d2edf12c9bc5b743164c26e32e639bd4d79ec53af0cb28fc82849fd9c202fd","ssdeep":"192:FxVlyqqfH9xolTLqmH+xvlMkqFH0xBlWuqjH+:HvqomtFrb","tlshash":"c3d1bc80145b6200e6972cc927cf3f269d4da252b495c9383ffe1868bdeec655362b2d","first_seen":"2026-03-04T16:56:08.868961Z","last_seen":"2026-09-19T22:34:23.600246Z","times_seen":7,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.675Z","timestamp":1789857225675,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqx0EWR1JQWThUmyZyEVwT%2Fhc8ZToMs9nyJXX%2B5Alj%2FspL8%2BmhyFkYSrWmOWD9lad9QJGHU8RuGhHrhxdrMOl4JJVxlUpn86DnfO45idCdrwNNOvlpW0NjR9jaw0frBL2%2Bo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc0dcc78930b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7184,"size_decoded":7943,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"499287c58922b7cc5c9a7ec7ed090e44","sha1":"61d1617833a6ea17ea949be2e67cd8889c715174","sha256":"060874227fe743a9b1476a7d6a43b7819f1913e07924e9c3fcb7169004790a64","sha512":"5e8e720a7a4f7e9428f35ef3b3bfed5ab679ff82a47cfe583f0fef446e7ed72397e4ec0c4124883bc86cb8b51cd880e2b98b88baa931ef3699434a1bc32b0bbd","ssdeep":"192:Vj9jhjO1K/OaaUl8PzfzcR81B89j7vlCeNA:x//FnqAj7vlCeG","tlshash":"9fe1b863f9f925be1097c272316a77193de49013daa608a576edc1721f8ef85ee03244","first_seen":"2026-09-19T22:34:23.600791Z","last_seen":"2026-09-19T22:34:23.600791Z","times_seen":1,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Aurecon.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.295Z","timestamp":1789857225295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Aurecon.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-fa2b\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f7qZbEfcK5OOOiKH1kqWH3k3ZHFYEUtXZjYvUrIdfPxfHWOj1S6wjBiNVSF5p%2FJut4DtDyMre1mWprzaAshSMtbu%2BoEnzCHnJhm%2B8zMNTrQysy%2Bt7xVqaLXnTbU9M9GiT7Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca180f0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 64043\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64043,"size_decoded":64820,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1181x261, components 3","md5":"fee930240e9c65c7e5604a1a5e9be821","sha1":"a16237cec2f65d3e5c9ff562f7fc9248024cef89","sha256":"9e639cd856511ab281a48ef76c0c46704e506e47148d55cbe7bb461e9b757668","sha512":"29036614158c33398052647271895456628015d7d303ba9942a66a75cd81badbd8dbeb6e6395ff9d120097def36e15f3c3c4496505e36baebb8a04c408ce2781","ssdeep":"1536:n7u8rwPkFGsq19b2aw6CexTfrbcTYKc9Yr:ny8r9VK9b2a3ZHcTYpA","tlshash":"9d53e175df6914a9d25862b008c3dc229c138b2aff9de84bb1dd5c12df962c23c5b165","first_seen":"2026-03-04T16:56:08.854752Z","last_seen":"2026-09-19T22:34:23.601877Z","times_seen":6,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/CSIRO.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.298Z","timestamp":1789857225298,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/CSIRO.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-c8ad\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDgioKSu9uATE7k39Slf3yzpXjn50B3fCsxr7X8xWpibBup%2B0N9qJVzqn3vP6gvZ5L1hwZ97f2clWFN6jkwS67kiXUiJ7BCpgVZDVqRJNA94rJkj4yQBKYHJTPIZirhHyXc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca18110b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 51373\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51373,"size_decoded":52143,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"c458b1685c2496b430a8c7d71776247f","sha1":"8ecd3633fdb717f9e9eb8afc55d83eee87c4f7e8","sha256":"b355212e40f7571dde24fd3606c20388f88ac918450594416c67add99f563de7","sha512":"1678c4c783cedc22353f8f0d62e8ed5dd651adcf7876b61c02828bda7b3a5d5b46699961055954c3d277161b6bb1bfa76ef93a4817538e6b4f18c804d37dff01","ssdeep":"1536:yMYtuaut+puC7MKd1sYwPocSGWNuRBRE/SwK:yMeGl+d1EFkurRE/w","tlshash":"9b33f2259d068cebc8bb8a7346da1a0791761af502f113ce07f550fefa29f46d50f291","first_seen":"2026-03-04T16:56:08.903336Z","last_seen":"2026-09-19T22:34:23.602776Z","times_seen":6,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/gilbert_and_tobin.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.302Z","timestamp":1789857225302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/gilbert_and_tobin.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-38f7\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XbNJ0mnHcZJPR2624JGu3L%2FiEcT6Z7Lu31Jfx%2BeFQT17kb7rAu6Ouu7kMy41fTe7p0EEnkSVH4pVIGsr4fPuy7rAlvuaxsdPPnlX%2Br4YQg3dpZEde4Gxkh7nO6L5XVecCe0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca28150b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14583\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14583,"size_decoded":15357,"mime_type":"image/png","magic":"PNG image data, 1194 x 391, 8-bit/color RGBA, non-interlaced","md5":"cbfe872e0cc212d561dd93d51895e30a","sha1":"82f0da42a4939fd3841b2abd8ac540508a7fe49b","sha256":"2a10e90d823c5fccfd34f1666def4690d64f3bf72415508727efcfb637de2be3","sha512":"ff828cebf999d0db3ea1266fe8901a5b2af4205a80c9fca116b4a7e468caf8eb85d9e9b6578871880f4d1330a6f196692442ce74d19f106bf38f19673189929b","ssdeep":"384:NGkUeCa8WjTLr0jkWBZ3Xi3kVV3cDKXq9GH/+EIulDo+y6q:4Nw8W8jkWHSUP3+JGHmEI/V","tlshash":"7562d0933e1b5cdcc6999efef8d8a05b686242c3c01e57867438b8a1d987de9069434b","first_seen":"2026-03-04T16:56:08.840327Z","last_seen":"2026-09-19T22:34:23.603431Z","times_seen":6,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/favicon-16x16.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.779Z","timestamp":1789857225779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/favicon-16x16.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lLngAFFjA4GpHrsArgsQLPng4qwCZIudmHI4OoNMLAB9UHAh51yABVpYVvdpDL0hdcDh7fO5cdWSPx%2FhgR1%2B%2BBgWcbEwjfIO285pigusWNHXtXpB9bsXOa4o8hQiWfn7NuM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: a3dc0dcd28a00b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7184,"size_decoded":7939,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"3d7242dffb592f5f061d163130576203","sha1":"30571619a4dba162b0655d3e3677b0d1d653a0eb","sha256":"3d29f6cbe7bad513efc9f6335918c8d584ba51f88336c837c8240c1d89adeabc","sha512":"200129a039c185790fc07e0d16f2c8e99cf93ed55760dc6d5267ffde5e11629e5935794e1416665fa857cbb13e97af99e9e7f7ae1fc57430f948a795bb404f8f","ssdeep":"192:Vj9jhjO1K/OaaUl8PzEzcR81B89A7vlCeNA:x//FeqAA7vlCeG","tlshash":"22e1a762f9f925be1097c272316a7b193de49013daa608a576edc1721f8df84ee07244","first_seen":"2026-09-19T22:34:23.604058Z","last_seen":"2026-09-19T22:34:23.604058Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T22:33:44.869Z","timestamp":1789857224869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0Qw6Fh2hPWJYCMuD1qWLh7L6AGCrCrXmeWx5wLczRB3HDsBq%2FTDplnUNqNk5DV9VsUhzbUFxEicO9VEuhCIc9xP6d14SbVx0cP7yq4GNgiklbnwoVeZb%2FL1Xnb9O1WreHc%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 19 Sep 2026 22:33:44 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3dc0dc7afc80b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":399174,"size_decoded":43463,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (2041), with CRLF line terminators","md5":"233a7c7339cf5a950782501a4b48c716","sha1":"651d2a4628a42ce9b9d4a83d6983c1db5499fa79","sha256":"f990570c533fdce642cef626e620daa25041d3d829e6a33eb7c6bf87dca8bd0e","sha512":"f44c7e021dc58521048b202459fd9c22bbcd84f873f913b45256bede2106dcf5a4453048a66001295c9a45de75621033edd0dec2f139dbe990df17573f5d5059","ssdeep":"3072:SjEilvFUL103N0TtOyQfs2a8cw+iM+o1nmFTCl3WdLo+sHIiyGqo+iQ+5G+DIo3G:c180","tlshash":"ba844312e3a1513aec37977aa6b9d69ce9756c82d800a7e5b45f20710bf3efe0013974","first_seen":"2026-03-04T16:56:08.86442Z","last_seen":"2026-09-19T22:34:23.605415Z","times_seen":6,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":10,"connect":18,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/shutterstock_160644944-2048x1365.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.281Z","timestamp":1789857225281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/shutterstock_160644944-2048x1365.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-3a23a\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EI9hcPyHKHN1TK3Ta%2B8iGs03towqrvKpYYwTRMhEH6n6lItEMnNpEWDMVuZcopL11aqiCzJeA0DsV38OmQt22wbU%2FfWlbw6rYWpTrETi4JYFwLZAjJG7Shyu6TqXJuJQqck%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca08030b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 238138\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238138,"size_decoded":238913,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 2048x1365, components 3","md5":"2e4412fbb533d3fed21aae23364c0ebe","sha1":"2d7422f32f69d87bf7b91ed09634e0377567c107","sha256":"2a1a848edb04f34a059587bff726d925414deaaa8186d70c56b4706319fec34a","sha512":"5457c4d906f96ac232dfc0a441a809c508951b9399c0727a43c3b58afdc7d802586b5d06f676e50be078076a8d13cbc13448ae7815d6668a62392fce233e447b","ssdeep":"6144:jzOjlMdVdtPqVR7PV89ICJ1NAR74oq1MnKBOnl6Kpi70Gn/:yOdtP2RrWW74oDKBOsKpS0U/","tlshash":"8d3423f866e53d37e3c4ce760b83603d35185a349a8f6fa87e23f383955616089d5b06","first_seen":"2026-03-04T16:56:08.897009Z","last_seen":"2026-09-19T22:34:23.605985Z","times_seen":7,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/deloitte.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.299Z","timestamp":1789857225299,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/deloitte.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-d7e5\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkumOt%2FPMi8gUkt64G2SVYYs%2Fe%2FiebH7PMJeN2ULX46kWdJheXTBM2OE2OXJp6uSiNg%2BlIgTIHvtCrTafF5A9DPZyupVJ4690VYXRqg4wSVA3%2FGc1APZUEFDlUHn8qnlU2Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca18120b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55269\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55269,"size_decoded":56047,"mime_type":"image/png","magic":"PNG image data, 3284 x 912, 8-bit/color RGBA, non-interlaced","md5":"1db8eda9889f0519856a1959d2628a06","sha1":"891a30de81744a4b67db45c5568a19fd929729f2","sha256":"bb5b1d5ffcadf63bc300f59a6cb8bf4e59bebf9d9a5b6d6ddd2b9fc8fd7609eb","sha512":"4ef9d62d6547ee108462e83d4da2d45e0912025ef6755a750a431ade218929f1a0d0fba3ae166c9efcbfdf3cda725e99d092391c65ad44655e5754748c9b578e","ssdeep":"1536:yQthgh5/wr5dqHDI4yjT4iCNI9gj8DJnHeP:7LtyCj79m8QP","tlshash":"b4438e566c36c3cff9f550b5cf7b1f6debb20b9ee0501aea9265b04918843abe04d244","first_seen":"2026-03-04T16:56:08.866464Z","last_seen":"2026-09-19T22:34:23.607048Z","times_seen":6,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/logo-chevron.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.315Z","timestamp":1789857225315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/logo-chevron.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-1701\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2yuV4JwWzI8JIjB6GTmuA70HOh8rvgY5KVWNfM2WQBuVmEqn%2Bcr7QCSKybd6ginGkGyshE3v6MRh%2FJ%2BEmXOgLkPde2DLojzboMVUhyiVibj107ARfPQMURUlr1SlPH62uNk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca38210b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5889\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5889,"size_decoded":6662,"mime_type":"image/png","magic":"PNG image data, 240 x 297, 8-bit/color RGBA, non-interlaced","md5":"e1e2043351462b6b9dd7f6611e2e5e2b","sha1":"106b76ab64a50028236b24aeea4b7f5987452b4a","sha256":"752904d3af52562c7bfb330de6b00a4414c6288a9380e00dc7bde61f60f3b635","sha512":"f3a9c0d812c4fb5820a86fe27102de368013063311fed9c98c2df64cf8fba506c2eca722970e81bba1421e1235179bc626b4b0302fa3b01c9b0407748a7abc24","ssdeep":"96:wegwTNMj1RFc0v8oSP1eDZDAoLT/z4w/Wz9KYNTrun8RWS2CJb7MF:weg8M5JzVLTcw/WzrhrERCJPMF","tlshash":"dcc19f7f50c3ba1c28238df3455992d64d6bdda80bfe24e56c388c491b52fca0a5f547","first_seen":"2026-03-04T16:56:08.878705Z","last_seen":"2026-09-19T22:34:23.608288Z","times_seen":7,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.685Z","timestamp":1789857225685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Is1IOF4N2nR7Z6%2FlrdND4hSogz%2BGgX8BzDPcYd%2BClKiZK3DgMA9Vbg8VjqQrwWbKTEypRw3iUQ0YHjrFHk7hNHaBAVs5RKzce2Lc9khIux7rhnMxBCFWCotlC9MRaaU2ijI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc0dcc889a0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7184,"size_decoded":7939,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"299b7241bd7edea18fce5c763fbb18a5","sha1":"ae04ac48364508380a76407e96c245c797eb9102","sha256":"190b24525a5c1726bcda1da01a2336e9b27d0c59839de9fdebb5470e08ecfa3d","sha512":"812e9b34bd452981f0044df02f67713b3ae2a5e4a9bd958580e2fea2952ead9408e5884041af7bf5611e6095753c0500506e3bad69c45e5acec4872f0f1ffca9","ssdeep":"192:Vj9jhjO1K/OaaUl8Pz0zcR81B8907vlCeNA:x//FiqA07vlCeG","tlshash":"37e1b863f9f925bf1097c272306a77197de49013eaa608a576edc1720f8df84ee03244","first_seen":"2026-09-19T22:34:23.609151Z","last_seen":"2026-09-19T22:34:23.609151Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/custom.css","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.252Z","timestamp":1789857225252,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/custom.css HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yizUYl7oHiETRmnR65s8P8gy3xXrRicdQum173o2ExU3yKpK1q9PnmeKJgvm9Zuevh7nP%2BWetG9C9APle3HxubuLFhmnW5%2FFnV%2BCTdxlwhktOeJWyoCx%2BtWW78qSr9qMHI4%3D\"}]}\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6824ab17-b5c\"\r\nage: 602887\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc0dc9dffa0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":1609,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"62c0f3ecd940c374a7cc240cd962a9c3","sha1":"8b80b9db43e4b6a680d413aa107c85cc1e0e11f3","sha256":"8e260d6576c943c668db19f7d02c0f319a2c111c53a19f4010979a17065b219a","sha512":"d0988cb48a78847e8aef105c27409a061fb00439273372a54623f757086cd3c7a8b9f3a4f2a43f508a028bd1a9e0e82cee519343f8241ddb2f9c23bf6a004270","ssdeep":"","tlshash":"3651d219df0108525237e3a0a7958a7ee726025347070a78f6cf266a9ff81986d63edc","first_seen":"2026-03-04T16:56:08.847581Z","last_seen":"2026-09-19T22:34:23.610348Z","times_seen":7,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Plenary.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.309Z","timestamp":1789857225309,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Plenary.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-5704\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2ANthHY4w0PMCGowol6Zrwsb%2FH1N7DSkf4Z6HyuNCJX0QB%2BKLG9U9SYE%2FHD5vNjcBS1P2%2BCx%2BU39nlo73cNnnNMI%2F%2BP%2BenALl%2BlNI5Jk1IbgETq7%2FfO0rbrV%2BLaLFMSQnJk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca281b0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22276\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22276,"size_decoded":23066,"mime_type":"image/png","magic":"PNG image data, 1105 x 235, 8-bit/color RGBA, non-interlaced","md5":"ff7a047ce1bf6471c3948edede9ddbb1","sha1":"912889673f08b16a91a72558120494f00d259e50","sha256":"6e309f2271f54eb12ecd7240d4e23fd162970cbc6dea34ca677b149ece796216","sha512":"0aa2e8a176e173c4c676900b0bf9e4f71b2b0ba10940a18fa0ec3a68bff55b542c35cb6c870cab2efa1e8f5d7d346efcb13fac755a6e7c343966e005f735fd07","ssdeep":"384:A6nvCIjwjl+lan7saXc1ThSUCteUorENa7VpaXA7AlC+mmsXqNHJT:A6q8an7saX2TatVAR6Cr9aT","tlshash":"70a2af4bfd63d8400f4c66a8fee48057b9e717c098e65033abdaca1a8a754ac9dc95c1","first_seen":"2026-03-04T16:56:08.867769Z","last_seen":"2026-09-19T22:34:23.611186Z","times_seen":6,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.677Z","timestamp":1789857225677,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 429 \r\nretry-after: 10\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5EGi7FBHbcIoJTWa%2BEUkrz8MGQ0RoxEGnJEeRnIUuuMzW7dbjnwSNiYL9IJw2Kqke4k766XcoSNqLGITxuKBaNmgKf0EqILQq%2FKV5zD%2Fg7JhAhQZn%2FfP8OLUGJHCanMYOcI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: a3dc0dcc78940b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7184,"size_decoded":7941,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (507)","md5":"2680eeb76ab96e8733a9b584ceb0960a","sha1":"9c93103a5710f0e687874b9e5e7f8bd8e0a3fcf9","sha256":"02c36eaa741bcd7447545f01990e2c88785908d7b1db85672e0b951ae9c7a511","sha512":"b7623d640b02df08573274e2ef4a34a88a1448228388db49ab12ec4646db8a03e92b62cd1fe58ce00e836176afed801fa3ab631741f330637481c1eb87f7394c","ssdeep":"192:Vj9jhjO1K/OaaUl8PzUzcR81B89E7vlCeNA:x//FyqAE7vlCeG","tlshash":"39e1b863f9f925be1097c272316a77193de49013daa708a576edc1721f8df85ee03244","first_seen":"2026-09-19T22:34:23.612431Z","last_seen":"2026-09-19T22:34:23.612431Z","times_seen":1,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/bootstrap.css","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.239Z","timestamp":1789857225239,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/bootstrap.css HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jMiGhD4vl%2FOxq%2BP6u7853Bvjp3RyWG%2FVMT6bxYC3FqZ0sZ%2Bi2ATE4G60HkYfDifRxNfdSXGJmIt0Xeq6sQAdHXSRbmLfocbklscfNQMwz5y06%2FlLMrzUkxum7MRTPB6Q1eM%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6824ab17-3690e\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 602887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9cff40b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":223502,"size_decoded":26145,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"66d29b8d5992f526286d1b70b1045b91","sha1":"62b0884c3cb69e5237ddcbb62592eeb0c7a10fb2","sha256":"e490e686e1c4474603c55818f8cfb1819fc9c2a9f0cd4bdbee6cc3d1eaed5a41","sha512":"d91698a84b11a9b5c38db0d29feef89fa32599f4c84aa55a3205aaaf543f91b4e86070f50ad6bd422b8d8f3088a3d4c7c96900096c8aa04b999fbaf309cd6620","ssdeep":"1536:Jem0VIrBE/wPFJjXiINLkcLHLg2LS6fYLr73LA7HbSVTlA+B33QPjqPEVTM26P7z:Jp0/6QHbMj+c6P7qu6FFPU","tlshash":"e524006ee982144749339b78ebe36abeff5a0063c201c579bdde63558fb41904862f4c","first_seen":"2026-03-04T16:56:08.845618Z","last_seen":"2026-09-19T22:34:23.613688Z","times_seen":7,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/CEDA_Progress2050_Slider1.jpg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.269Z","timestamp":1789857225269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/CEDA_Progress2050_Slider1.jpg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-61f22\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602887\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2y7FfnZtsF5Pmx%2B42mJr9pSN5iBfgXmE2JPhA8uu2XX%2F2pNz6u3O7i2ifk%2BbaDoYMB2vSSQo170obaCRgGLZoCrCURi4hTW%2FhEQQGb%2B6%2Bk8C7vsrqoX2IE9NlOAQJGT588Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9fffd0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 401186\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":401186,"size_decoded":401969,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3360x1260, components 3","md5":"2813dd5d0b44b3d6c585126b96dfc4d5","sha1":"d1937c29d6f22883ef3874cfd44e1b08ee908a21","sha256":"8476e0422277370a2e61b05aaf9b960ef07863b4c43494bf12237c78fe7ebe95","sha512":"ff26c779342e866625d62c42a32bc898b64d2f5b3988778769f3fb36a0b13a2a7f127b1aeb8f09110d9e65a31999f59d901319ee3b5eb47a5ffe89a3973303fa","ssdeep":"12288:fx8gDMVe4iue2TdodWm0d1FkYgbdVQg4C5r:mOMVe4ieZodpKnkYgILu","tlshash":"a6842334e62b87e6eea2387bc4447dbc5b417ce094e8025b117ebf48c1586ee5cad90d","first_seen":"2026-03-04T16:56:08.88095Z","last_seen":"2026-09-19T22:34:23.614518Z","times_seen":7,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/Nous.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.308Z","timestamp":1789857225308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/Nous.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-58ee\"\r\nexpires: Mon, 28 Sep 2026 07:41:02 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 139962\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F3XSbEUIoFIh3zX7P2veJE%2BIK5he6LUUta5hDL1dM5PYb6vtS9VIhjvaNHZYr%2B%2BWPXexSx2W1GoyTlN%2BJH6rz8HZruHGKuIbIbNk3B%2FFYqIt2eFC6Q6K7rQcpzPabAF5sw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca281a0b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 22766\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22766,"size_decoded":23546,"mime_type":"image/png","magic":"PNG image data, 800 x 219, 8-bit/color RGBA, non-interlaced","md5":"d874fa326c3277734e50e7a15bc57831","sha1":"36ab9078d61ac2b4dbc22b87507e400fda19fb15","sha256":"e2fc9285ef3e306c54ea68fbe0528f8c41a0ab25421651b207c3d8b531eb1da8","sha512":"2910855b788bc212082fd94f385e48c8a19c127e2a49fb020413c89f8c9525305c831acb341744f4d0de9d98698e3638ca3c82f8c1e806c417383fc9d5c7b9da","ssdeep":"384:nnK7jTE1pxvcsondL3sDBRa5d4BMeCKXwp+TI5VTnGK5lVjjKMgqghCEPpDuJfEt:nMQ1pxEsNDy5dUs5VT1VjjKMsCEPpDyM","tlshash":"c5a2d16cb4c38c5840cb5339ddd547fb381880b98484d4493997f8a1befd7ea8ab9789","first_seen":"2026-03-04T16:56:08.843499Z","last_seen":"2026-09-19T22:34:23.615534Z","times_seen":6,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/wsp.png","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.313Z","timestamp":1789857225313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/wsp.png HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i\r\netag: \"6824ab17-5c6c\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 602886\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yS5OTsIvzSbHAqyARCGaYqsz2osm0wkj2HVQcTpItP8kkM2Qq4JMi8Vs5GfPbw5BtUF%2BAwdtRCILbe0hK%2BfQ%2FTX4Mc4ptlolY4y6qwEYj5ZGNkQlOil7EQPkPLy6I7eY8HQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dca38200b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23660,"size_decoded":24434,"mime_type":"image/png","magic":"PNG image data, 1781 x 848, 8-bit/color RGBA, non-interlaced","md5":"0db7940a8a6ed009dbb6f28eca82ff8d","sha1":"cd304b057eea20bd71a84ea83bcf094cf27f4542","sha256":"e4d5b5d655cdb72ddee8b597ee710a0e7dc911dfc3d11a5bc827b58c9a1c55ed","sha512":"131ce90152ae667876f44ec5887ccac4f49501fd3847ef499757732c204c582e54fd5a80029ecc623891608ab4734e44515f57fac385f49a08c28db016cfc3c6","ssdeep":"384:CoNNbju4IRkSUaTBp7ZZXHFEeJGnOIiNrC4dZqY7qVTRw4uGh3iSe4nNd65Vf8:hbj0mM7ZZ3FE8GOIGO4/qYuLiqhLnH6o","tlshash":"bdb24b64b6287789eb87b0b0615289b14b4b1fd473e32e66cf3421554e67e04affac42","first_seen":"2023-08-14T20:29:00Z","last_seen":"2026-09-19T22:34:23.616275Z","times_seen":10,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/bf8781cd7cea331380ad2d652896a4ab6541d88f.woff2","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.683Z","timestamp":1789857225683,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/bf8781cd7cea331380ad2d652896a4ab6541d88f.woff2 HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/lander/blocker-of-pain/dist.styles.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=3,i=?0\r\netag: \"6824ab17-6bb8\"\r\nexpires: Tue, 29 Sep 2026 22:07:06 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1599\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D9wDP2TzuW%2BjTuKv5lFaYGLVqp0lvK7XW8IjmqLI9%2BDyiNRj36efeQHosBpMR5MPyHL5AMUUc3Wj6XKaWQbmM3W4iXuCPFYTHFteGm7rgelyrZZCoh9jRUqC3S9aooyWEdk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dcc88980b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 27576\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27576,"size_decoded":28350,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27576, version 1.0","md5":"919135cca81ecbcc4eaa9297658dc0da","sha1":"bf8781cd7cea331380ad2d652896a4ab6541d88f","sha256":"6f294715883b044d25590f46d264e30ce9beb2f9116d47efddba32448debd029","sha512":"569eae363c28a1668c0481e6336d95f396605abd521eaaad0b9b81f7810064216d865cf454bcd096a5fc21084b6230dbdcfc018c62fdad7412fded7ec3de4395","ssdeep":"768:ugkrrz+/RCrWO9njmgxcEXK8wiOQaJx1WLVnNcT3DX+FthV5:uxr/+UT9P7XtirUNC3DX+FTn","tlshash":"21c2e1c2a5a0be339951db3fb0d6105b7e271ad1035953828894e3ab917cd46bbd47cc","first_seen":"2026-03-04T16:56:08.889192Z","last_seen":"2026-09-19T22:34:23.617101Z","times_seen":7,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/cedaComponents.css","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.244Z","timestamp":1789857225244,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/cedaComponents.css HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6c2B3dTlERV0PTO%2Fqg9WzKbD0WlVbDyBn%2BJLX2JIEEVGrpNt1LEaa7hkUcDmaA%2BbKSY8tNJWUogRRHx8dBm5E9Xs0gWms64Aqv6jndUTuGpJS1PlOLeBxEgaMkJ2sQcCsJA%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6824ab17-6c8a\"\r\nexpires: Tue, 22 Sep 2026 23:05:38 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 602887\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dc0dc9cff60b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27786,"size_decoded":5131,"mime_type":"text/css","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"4a5c46c15e9f7c6d0faf08908b01b48e","sha1":"30f29fe53a687dc963ce6bb3fac2210d50542a74","sha256":"886bbad7d83969384d836e6501e6e45319e8b0cbfb523ed9c681b5bdf7a14b04","sha512":"de14f37c09e8545bb0b3b40d9fb5f69b3b64951a1d4aa8a05a209c046e882ce3203dbf104271067440c69115ecfdb520df5fd8f0d2c63ae4150f1e3f667ed0d4","ssdeep":"192:NQszOWtNNSq8GIw6AB0ZhemUxPpsf1E2ra6gv+hddGYfJf/EmrZmQrnU8qH:KsiqhIXAE1prVLhUmrcQrnBS","tlshash":"c7c2dd99dac2200a1537f7b6ebb75564ef6200a3874285a97decb055cf704eb0252efc","first_seen":"2026-03-04T16:56:08.837398Z","last_seen":"2026-09-19T22:34:23.617968Z","times_seen":7,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zavsehvsera.com/lander/blocker-of-pain/dist.icons.svg","fqdn":"zavsehvsera.com","domain":"zavsehvsera.com","tld":"com"},"ip":{"addr":"104.21.6.131","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://zavsehvsera.com/","date":"2026-09-19T22:33:45.317Z","timestamp":1789857225317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zavsehvsera.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 12 Sep 2026 21:54:07 GMT","end":"Fri, 11 Dec 2026 22:52:51 GMT"},"fingerprint":{"sha1":"F2:8E:2A:55:E2:91:D4:0D:03:15:0D:F8:77:F1:6B:B1:48:A1:32:2C","sha256":"ED:3A:C7:DF:AC:5C:7C:D4:A5:D0:E0:4D:8C:6A:B2:98:DA:B3:2F:FF:11:71:06:73:86:C2:DC:CA:90:CA:5A:25"}}},"request":{"raw":"GET /lander/blocker-of-pain/dist.icons.svg HTTP/1.1\r\nHost: zavsehvsera.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zavsehvsera.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:33:45 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0%2FwRxceYG7oZHMK1YdIE9wgAm%2FS7CjE6nmbLzvrAREbnUifRJXyhXlf05pOiSMQ5byz9qJ48ttO%2FOqk%2B9LeMRDd1aU5FXr5GJdlbaGqbjAelzLI5xn%2F7bq51buAGj66glk%3D\"}]}\r\nlast-modified: Wed, 14 May 2025 14:39:19 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 22 Sep 2026 23:05:39 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6824ab17-55c9\"\r\nage: 602885\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dc0dca48240b31-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21961,"size_decoded":7960,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3bd1c3229ee4a49ae842f92ed2db0cc7","sha1":"657263105daa2338c4998fd6d1ac8a6612fa5769","sha256":"6c06b3adda174384342fdfc8b1c2164d215902ec9b25da0e7c1da9341276f1c4","sha512":"dc57ff58314ca70292d739bbc41f593fdff06f51e2facf8f80478cc98fbb4d2316b3680d496b29089baf106951d1a73bdfab1566d95635593f5d34d4cbdb3151","ssdeep":"384:rLwPzAYx9JscwAQ1FuD9hoCIVptXjadE3tq3D99uUfRZ6R:rLKjS71cD9ctzwEQWUk","tlshash":"41a298e51374a9cc4e86ce7cef6bb6c4206f70deb3f582a831298f4c61876a5f514a50","first_seen":"2024-07-09T09:27:48Z","last_seen":"2026-09-19T22:34:23.618696Z","times_seen":10,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-19","alert":"Phishing Block","trigger":"zavsehvsera.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"zavsehvsera.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}