Report - zerion.cc/

Report Overview

Visited public
2023-08-27 22:55:03
Tags
URL
zerion.cc/
Finishing URL
zerion.cc/
IP / ASN
172.67.139.204
#13335 CLOUDFLARENET
Title
Zerion.cc - filmy i seriale online za darmo

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ocsp.pki.goog	175	2016-06-13	2018-07-01 08:43:07	2023-08-26 18:12:02	1.7 kB	3.5 kB	142.250.74.131
inklinkor.com	unknown	2022-04-01	2022-04-01 13:44:00	2023-08-27 12:59:48	418 B	1.2 kB	172.67.211.29
continentalaileendepict.com	unknown	2023-08-21	2023-08-23 04:28:55	2023-08-27 15:06:57	489 B	467 B	173.233.137.52
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-08-27 00:58:27	451 B	5.2 kB	142.250.74.74
addresseepaper.com	18169	2021-11-01	2021-11-01 22:11:31	2023-08-27 03:38:29	397 B	0 B	0.0.0.0
zerion.cc	unknown	2020-01-22	2020-01-28 11:38:46	2023-08-13 08:18:07	16 kB	553 kB	172.67.139.204
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-08-26 23:35:14	1.0 kB	29 kB	216.58.207.227
basicwhenpear.com	unknown	2023-07-23	2023-07-23 04:00:53	2023-08-13 08:18:13	432 B	18 kB	192.243.59.20
ocsp.r2m01.amazontrust.com	unknown	2007-05-11	2022-10-12 22:43:53	2023-08-27 05:10:13	340 B	942 B	143.204.48.16
professionalswebcheck.com	unknown	2022-04-01	2022-04-02 00:47:29	2023-08-27 14:59:01	424 B	416 B	3.72.183.229
static.cloudflareinsights.com	1294	2019-08-30	2019-09-24 16:34:56	2023-08-27 05:19:36	486 B	20 kB	104.16.56.101

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-08-27 22:54:36	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-08-27 22:54:36	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-08-27	medium	basicwhenpear.com	Sinkholed
2023-08-27	medium	continentalaileendepict.com	Sinkholed
2023-08-27	medium	addresseepaper.com	Sinkholed

ThreatFox

No alerts detected

JavaScript (6)

	URL	From	Size	First Seen	Last Seen
	zerion.cc/	ScriptElement	691 B	2024-08-21	2024-08-21
Pretty URL zerion.cc/ IP 172.67.139.204 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2024-08-21 07:57 Last Seen2024-08-21 07:57 Times Seen1 Hash 5a80bd1532c7f177f17b67926716401b 092b4bb79acf878e01558b080f6ecea6b9aaf4d3 49d48c56c64b50e76c2406c388c4390ad5c243146f469b919f52c75c5bd61082 Loading...

	unknown	EventHandler	47 B	2023-04-11	2025-05-22
Pretty Introduced by eventHandler Embedded in HTML false Observations First Seen2023-04-11 00:43 Last Seen2025-05-22 10:33 Times Seen1283 Hash 8e97e26f6649ae53ee5c226d080c1b6f a6629873663a59457f804cf75d6cad5074f125b2 9cd1315fc74685fddc7bb9e52cc5b6d7461b4f5f804d26a832983995ffe5f8d8 Loading...

	zerion.cc/assets/js/main.js?v=2.16.0	ScriptElement	33 kB	2024-08-21	2024-08-21
Pretty URL zerion.cc/assets/js/main.js?v=2.16.0 IP 172.67.139.204 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-21 07:57 Last Seen2024-08-21 07:57 Times Seen1 Hash d280d542453023470fee27bff7484d2d 2ed5c861dffb052b576324dd7637986443d49e63 af1f3d60acc4f66a0ba0d1f79d888085b0f96e1e658683c06f79d40e48d3f50b Loading...

	zerion.cc/assets/js/swiper.9.0.1.min.js	ScriptElement	135 kB	2023-03-13	2025-05-17
Pretty URL zerion.cc/assets/js/swiper.9.0.1.min.js IP 172.67.139.204 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 14:57 Last Seen2025-05-17 19:02 Times Seen7 Hash e856f612b4b05632adeb15de9300e1d2 450e17b487b4622efd2a89792b9aca2d9e04ab09 69aea4595ac4efa99c91bc0cf46c62b7e259b9a1c1e17b54a80228384e224e80 Loading...

	static.cloudflareinsights.com/beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854	ScriptElement	20 kB	2023-07-20	2025-05-19
Pretty URL static.cloudflareinsights.com/beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854 IP 104.16.56.101 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-07-20 20:39 Last Seen2025-05-19 08:12 Times Seen7611 Hash efeb2542712dce8a2c51cf68396e4a05 ac9ce350c598644c7b7f6186aaf0368eb077d396 c235f21017bcc11fcaa31d7dfd9855aaebcbf5f6d7ee9bf9f2e98a910907c391 Loading...

	basicwhenpear.com/5d/f8/f9/5df8f962a3fcdc4791bda1f08207cd83.js	ScriptElement	40 kB	2023-08-28	2023-08-28
Pretty URL basicwhenpear.com/5d/f8/f9/5df8f962a3fcdc4791bda1f08207cd83.js IP 192.243.59.20 ASN #39572 DataWeb Global Group B.V. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-08-28 00:55 Last Seen2023-08-28 00:55 Times Seen1 Hash 8727b752a4c98ea9c463f8b7876d6c06 be224379902f08b054d8c925a22e4f0d84c1b9bd 84f0656a4b56f445817648a38ed74e2dbdd67693ccf201fb2301980195a59240 Loading...

HTTP Transactions (46)

URL IP Response Size

zerion.cc/assets/img/logo.png

172.67.139.204

200 OK

955 B

URL GET HTTP/3
zerion.cc/assets/img/logo.png
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
PNG image data, 96 x 26, 8-bit colormap, non-interlaced\012- data
Size
955 B (955 bytes)
Hash
53c0bc61d0caa6e5b53f98f91a00a07f
6a5423543df64d38e017f824c614c3e1ddd2a1fb
814f1dcc6f468b5463dfd583953392ec02a254911f2ae17ee2b2b8018a9b1874

HTTP Headers

GET /assets/img/logo.png HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/png
content-length: 955
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:25:56 GMT
etag: W/"3bb-18707c7f181"
cf-cache-status: HIT
age: 2263624
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uDo4zjsrPZ5D8nJkT8uAQkrr3%2BYwvHnzbNc2pb95LOUKC3KbyuA0BD7qlddz8Va%2Fob3Ym1LxcqzNBYO9BitiTYZvVgUdXI6lYw91GN%2FyqeKtkMVNdi%2Bq%2FIu2WWI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f37918fab4-OSL
alt-svc: h3=":443"; ma=86400

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0f98634f04a08f651bd38c7430a1264f
8cbc2e42c071e1a4c0d3df3ad9fd1aed474bbb40
e1f8d695582012778e79ce2ef271e29e94ae00863ec19efb01c8bfd8224a7ed2

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Aug 2023 22:54:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

zerion.cc/uploads/thumbs/tvY2hYGwv.jpg

172.67.139.204

200 OK

8.3 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/tvY2hYGwv.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3\012- data
Size
8.3 kB (8331 bytes)
Hash
31668a11cb6fe3847709e40780f33ad1
f1473dca9d7dca44a5ba6a40c189e8315660d49c
8131cfddf7d859c181c377008a41b58b3ce94d1fab62365073141e06bd725b76

HTTP Headers

GET /uploads/thumbs/tvY2hYGwv.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 8331
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Fri, 31 Jan 2020 13:23:30 GMT
etag: W/"208b-16ffbc55050"
cf-cache-status: HIT
age: 480730
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zlIlBf3sysnUBTwrNFuX9HBHOlBp6DopwmIAN5KXVb8nycaDDLEgrUkS95yc5oRLqIA3tTCeYzrwqbAQKljl6hEwqrXr%2FKAHgow7UfY%2F%2FJFnywGpFGoea7IjwMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f44963fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/ijQwl0Ku9g_b.jpg

172.67.139.204

200 OK

12 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/ijQwl0Ku9g_b.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3\012- data
Size
12 kB (11786 bytes)
Hash
a0a8f08fd59bd98d7ad2225d9e4dee84
5e338e0c6ffd6f9ea7940914fbf7a80bf8c1dc80
908263b3d40efad4e3524be68b7d944073d46993b7ee299bfb9b92fef3ac9c4e

HTTP Headers

GET /uploads/thumbs/ijQwl0Ku9g_b.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 11786
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:51:14 GMT
etag: W/"2e0a-18707df1a90"
cf-cache-status: HIT
age: 480730
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zgDcwKxpr5hVIcxmtYPf1RR636lG7K2AVCViQnyGvsTxtwpQv%2B%2F6%2B8W3xveqdJSNTK5YGhbWMrjBhXPODPVbExILJKzVNYX7fAJqF6Cr9mDKT4JJODHFr0J%2BA0I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f44962fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/22ixKTK1SVZS.jpg

172.67.139.204

200 OK

11 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/22ixKTK1SVZS.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3\012- data
Size
11 kB (11335 bytes)
Hash
2e9d41c3e375bee3e41fcae8812109dd
bf9087ef39d2911edfdc0ce82b7def317915faa8
f3fdd3c7092853eb9e0df75e106439dce3d70b14efa7315a5e8008bd5c78e6b2

HTTP Headers

GET /uploads/thumbs/22ixKTK1SVZS.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 11335
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 23 Aug 2023 14:30:56 GMT
etag: W/"2c47-18a22ce3f89"
cf-cache-status: HIT
age: 372242
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pdapcdUGR21l%2FYHK3H%2F2lS9KamfRmB5jicoQBc1O%2BeSGcQNPBafiahCh9RJEpGy2vC2sAU2yS%2FwUFil8VJuH2Yrt6TTY2idOMMZydOoqY82vz9O9vbm8SNWq4Ro%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f44964fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/0oiToKn9_J.jpg

172.67.139.204

200 OK

11 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/0oiToKn9_J.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3\012- data
Size
11 kB (11341 bytes)
Hash
0e90cf8da0524b857390ad0fd17f1fe1
5d82cb63c00c82151eb33983b9242d427e0bffbf
55aea96e902f4f245da8331d61d2cd0cab0a0e294e53431c7849b7778e3f5c0a

HTTP Headers

GET /uploads/thumbs/0oiToKn9_J.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 11341
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Thu, 18 Jun 2020 01:16:40 GMT
etag: W/"2c4d-172c4ffd4c0"
cf-cache-status: HIT
age: 37070
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ikrUtQn5N5GTQvR%2BaSulCiKMgvmlUOVsny2g1VMIGtBthzNUkRv5qQiyvcLu7vQZIJP8XxQA%2F9%2BJWXWGQEWGrlqfF18Unypb8zVTgtr%2B%2F8VxRsKz9l1w47pxyXM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f44967fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/hprXJrgqUup6.jpg

172.67.139.204

200 OK

10 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/hprXJrgqUup6.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3\012- data
Size
10 kB (10174 bytes)
Hash
bfef5f142226f4d56652ff45e49525f0
5130949ae4e2405ca7602d7d277fd9e149ea336b
9ed8590ae35a5c8bf22a6309d432430d66f82382ac09cc1b82804a9e5849ea01

HTTP Headers

GET /uploads/thumbs/hprXJrgqUup6.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 10174
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Tue, 26 Jul 2022 04:20:21 GMT
etag: W/"27be-18238bbff88"
cf-cache-status: HIT
age: 69348
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bLN3D4YYXCiqn2BJ77nHxilIsD11A%2BZDWQ%2F%2BLihBs5%2FjJ1M1SUjq6TtdWSBf19YxCB0nMJcxXscic3yBaMeBkMahrjxEreAshH5ppzD4i7GZxL2v3n95WKI%2BIFY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f4496bfab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/EUEoaMUCRM6B.jpg

172.67.139.204

200 OK

11 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/EUEoaMUCRM6B.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3\012- data
Size
11 kB (11140 bytes)
Hash
7ec146ee5d15011ee60423f744250bb9
138d46a6b5cbbdfbddf7312d182e173fd0f138e3
d4b947ba9c0ed4b184b9e289201c7c0371a1d1c8076296ca9330c996696e52a3

HTTP Headers

GET /uploads/thumbs/EUEoaMUCRM6B.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 11140
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Thu, 18 Feb 2021 10:40:24 GMT
etag: W/"2b84-177b4b9fdc0"
cf-cache-status: HIT
age: 178394
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gmlcHfDJ9OdR0T3ymkdjuEd38%2BHJ%2BGhqI2b2NycTFVeSEA4bDG%2FB1545QHJzMkMmiBx2OM4%2B2KLYuumAA6g%2BrTR2iq%2FSqTFS%2FwxliMcRDji4mQcbAdNt%2BkycrxY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f4496afab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/5TGNBMYYiKsC.jpg

172.67.139.204

200 OK

7.8 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/5TGNBMYYiKsC.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
7.8 kB (7792 bytes)
Hash
579aa69922414ec2a2027ebdb670d580
c40d161a258cde4e0b80c65fb7821043cd0599d3
9cc9ad7002a55cbf1fc885959cd47d0a21a49c5f308ecb5e28cc4ac2d7df83b1

HTTP Headers

GET /uploads/thumbs/5TGNBMYYiKsC.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 7792
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 20:33:01 GMT
etag: W/"1e70-18a38b32cf5"
cf-cache-status: HIT
age: 4846
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aw6t0kPs7i5pVgdnYPjpdCDgj4wgpSdmAvjIFk58JJ4ZSu%2F07ReCeIBTyM4KlWGcN69cIFmlKFmn%2BE87G%2BLgLB%2FXRhH%2BgSw0%2BVGftyy%2FntY0xrMeMN1OZk74I1o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f45970fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/Zx6FvsOPlrz4.jpg

172.67.139.204

200 OK

9.3 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/Zx6FvsOPlrz4.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
9.3 kB (9316 bytes)
Hash
16e298d2c8c507c1827fc95426fbbb87
bf74eb59a9e789257916aeeda8afa5feb11a12c3
83792c3fee873d1f326a253a5f0d0d840d853170e4bae4d6c0e786f7e7998492

HTTP Headers

GET /uploads/thumbs/Zx6FvsOPlrz4.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 9316
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 20:37:42 GMT
etag: W/"2464-18a38b77973"
cf-cache-status: HIT
age: 5108
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=00MrZhlOOVomn0qRqxpGt8nPUACLpFJHYzJhQ5aCsZZ5dVWUCygx3Ck%2FkXFi72sg5hpN3VgvBK9%2FkMxsGpBoVB%2ByC9ahUlKR54AZaToEKnc%2FzpJyo7RXvhEH6LU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f45973fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/ex4Jnt2haMrz.jpg

172.67.139.204

200 OK

11 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/ex4Jnt2haMrz.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
11 kB (11217 bytes)
Hash
2a3707a0050208e6b7af1c641ca213fa
a3b4fa1a73fc412f19b92c9a1f8e5589544f4149
b4801b0d351f19630993efe74f74c44e51f4853326bf01c7e26c5c2d9cc69fcd

HTTP Headers

GET /uploads/thumbs/ex4Jnt2haMrz.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 11217
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 20:41:29 GMT
etag: W/"2bd1-18a38baef21"
cf-cache-status: HIT
age: 5108
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a9cSghCbK1TreAZQGsTDzT1FLPGywVinaJu6wnKovsX%2BHZVX4Q69Nzi4hzf%2B3oh5P7ilgsHJcSc%2FC9ifgUpW0xktT8oqoVVxhSBBxnp235HUdJk3aVUuIY0rEj4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f45978fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/NMVWQel66Py9.jpg

172.67.139.204

200 OK

11 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/NMVWQel66Py9.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
11 kB (10837 bytes)
Hash
1c7ebcbcdbc691dc6ab5027dad08eff6
8b0de26af9bf083e010cf4be8f557222063f353c
bf0e23497277fd2afc8c1a508fef1933501b796298809c182ed688709ca8360f

HTTP Headers

GET /uploads/thumbs/NMVWQel66Py9.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 10837
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 20:43:04 GMT
etag: W/"2a55-18a38bc6009"
cf-cache-status: HIT
age: 5108
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S92NhUwpc8PKKz9TG8PrRR5UoF01bKBBjsvJckJTY5KTLFGgAgx4Lmb4XoQ7FXHiSTj%2F3bsnTKQwfGUEvNLCz61e1ltpMas4VlM5wDhwM9P2tPkb%2Bdo6hofuFO8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f46979fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/h7V4pH2SbJvd.jpg

172.67.139.204

200 OK

9.4 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/h7V4pH2SbJvd.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
9.4 kB (9397 bytes)
Hash
f4e3543f8cea165c08a37bc30687cac6
6decbc59bd432038271e508f7b53fd8bdf3843e1
fd45675209cad602fcb38324fd498e4ec17ed0e3c047433b72eb77e882637831

HTTP Headers

GET /uploads/thumbs/h7V4pH2SbJvd.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 9397
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 20:39:26 GMT
etag: W/"24b5-18a38b90e28"
cf-cache-status: HIT
age: 5108
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IvOHThhcC1KJJbCWY4mWp2kIwx%2ByM2oPpp5lHR6qU6depH8H37nJR2fD1AqhRLg1LFpzWLPekX1OitTzF9NUs%2BtVGOytHWwaQgVsrYdTpUqIcM1XAZB2dPpK0Lk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f4998cfab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/L3btUiGoY6W8.jpg

172.67.139.204

200 OK

10 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/L3btUiGoY6W8.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
10 kB (10002 bytes)
Hash
2a325d247a238c50f606acf10c005794
f1dad45986ffc4143fa4b77fa2aa7b14ea20a126
3377bb018427995ca7033c504080a4d9dc52cc28a62dee253b745de137063170

HTTP Headers

GET /uploads/thumbs/L3btUiGoY6W8.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 10002
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 20:47:13 GMT
etag: W/"2712-18a38c02f27"
cf-cache-status: HIT
age: 5108
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fNKNIsEDKVHFpiVdgiTRAUM8vxaeLMMcSj7lpbWYmOvs2EQO7kar6hYip9PhLbqe%2Bznacwi2EnTDGTeZ7u2veATl6lsPBzC1qFxkd0g1cYLoJL%2BZ9QBhch6KcNg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f4998efab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/phlThZ8rMiYV.jpg

172.67.139.204

200 OK

9.2 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/phlThZ8rMiYV.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
9.2 kB (9249 bytes)
Hash
e70b64a5d344814319d9e84aad321e75
db9c74c3e26465c6a3c8efe6243e962bb6a5af70
e2fb991a73871bb5c8582e193ad3e9842ee7de8a6ef97acdd00d9e4e7b0300fc

HTTP Headers

GET /uploads/thumbs/phlThZ8rMiYV.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 9249
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 20:35:40 GMT
etag: W/"2421-18a38b59a4a"
cf-cache-status: HIT
age: 6887
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iYN22cnLUmA8pyVaKCWXb0fzQAFNEwAVbuaSdxDSw4YpMQEdbMiaVru%2BJayeS2es1Qjgn27oi5IsOsckdpLSKa1WAztKRmoRV%2BeiZIbBF%2FIno4HqoN6AqaARHbc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f49991fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/blldKv09cjQZ.jpg

172.67.139.204

200 OK

8.6 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/blldKv09cjQZ.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
8.6 kB (8639 bytes)
Hash
4a5f4ab56ecd75229a6e5cf27c85fff1
3792063b0763304849d8a6a3441b8c11365b13bd
20d98e9ab0aaa971645fe0b59464cebf16c9a97f2dcb1b91c9005786a3b3a71f

HTTP Headers

GET /uploads/thumbs/blldKv09cjQZ.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 8639
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 20:45:04 GMT
etag: W/"21bf-18a38be34c6"
cf-cache-status: HIT
age: 6544
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FGtgI6muOw5SYStfbACRhaUlzELJM63xCUK%2FrR%2FaeaffUjEVLB59fdpMghI1xi2eHAmaEyGHa%2BA62rWr9LEVkzfMP5DRuSev6Wxmrn%2Fp4SFIEjw2mhRLWwEBGlw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f49990fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/60av7mrexlNM.jpg

172.67.139.204

200 OK

8.3 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/60av7mrexlNM.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
8.3 kB (8297 bytes)
Hash
4ce42d092eff4149e35d2878ee646bd4
283ce284b9cb1b2ba5c547c7f1d3dacc62793d62
a7242d919b6c9f9ac0c9dc46c9fb8b65a6e9ca130333bffa5d222676560d0962

HTTP Headers

GET /uploads/thumbs/60av7mrexlNM.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 8297
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 12:00:37 GMT
etag: W/"2069-18a36de0e93"
cf-cache-status: HIT
age: 38399
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FTCybtrSHcl31j3kMiAU4hfU35iAG63qtnSmHVTPuM8jF9dVub0zBqerqqMAXQqFojcuE2iKOGq8Eqp9ceU4%2BULZE1bIv%2BN2kA0ROdGzMva6oj6dlgLGj9JedCw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f4a995fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/Um3Xyh7QPKd6.jpg

172.67.139.204

200 OK

7.1 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/Um3Xyh7QPKd6.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
7.1 kB (7094 bytes)
Hash
c682e5e31d81cab0fd4c39715f114753
f300db9319c071a91b353f5d7165d3cf84ea9b83
355555d1216d9eb5259caf9fd6548c7ed526f268ef1c65c3ec62011f366191c4

HTTP Headers

GET /uploads/thumbs/Um3Xyh7QPKd6.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 7094
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sat, 29 Jul 2023 19:53:45 GMT
etag: W/"1bb6-189a336cf6e"
cf-cache-status: HIT
age: 2471393
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6yMsA6OZNxurFMnXXaiacDOYbxZskx2mZgIlCO9qRvi3Q4RpJSt64DHqbTLqJsI2bp8SzSDbUHuLnWthy%2BLQoPkaROgAXG9jr%2FYlBSWME5il%2FAb8a57MdcFM0w0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f4b999fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/8gGRZdIQQGcU.jpg

172.67.139.204

200 OK

10 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/8gGRZdIQQGcU.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
10 kB (10191 bytes)
Hash
b13157597c393beaa66deeda82f48fd9
4f98f376dc5f3ba00098925aeab1c3ce06b79cf1
c22c2390baf6eeb6e09e67a8d1950adf99d9b2adfea239ccb492dd81c1be97e2

HTTP Headers

GET /uploads/thumbs/8gGRZdIQQGcU.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 10191
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 12:02:25 GMT
etag: W/"27cf-18a36dfb5e4"
cf-cache-status: HIT
age: 38399
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1FcuNKAJ2U%2BVu7BbUsuQknPT1imenEOjTC5FjSJ4qFLCk8frmmM%2FR%2FMUFDF7O6ME7ox093i0QvhEXQww4lx4KhAqhU2C8HJgoH%2FvTLpv5%2FZLVAKs3hK6tZXXO0A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f4a996fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/rTuEaNmBL85K.jpg

172.67.139.204

200 OK

7.7 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/rTuEaNmBL85K.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3\012- data
Size
7.7 kB (7683 bytes)
Hash
5bed7965e940ad98b65cc8162a18e4fb
8a8350de34b1dfde9fee3bba52c9632fcfaff6cc
7e14bf4f4001909efa3c8fc9a4939ddf5f486a123a8eccd445fe349181685ddd

HTTP Headers

GET /uploads/thumbs/rTuEaNmBL85K.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/jpeg
content-length: 7683
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 27 Aug 2023 09:50:12 GMT
etag: W/"1e03-18a3666a93b"
cf-cache-status: HIT
age: 44591
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZPx6Sgl%2FA7SVrARl8E6IUlsk40z%2FStw0pGcdnTt3VpRrqjGQxETKZWrGFXBQyBywSbBYM1PW45Xs9%2F4Vr9yzfUFPh%2BOEhvUQY3r12eT%2BxGqrB1c3Sdc0tEOo%2BZ0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f4b99cfab4-OSL
alt-svc: h3=":443"; ma=86400

ocsp.pki.goog/gts1c3

142.250.74.131

472 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
0f98634f04a08f651bd38c7430a1264f
8cbc2e42c071e1a4c0d3df3ad9fd1aed474bbb40
e1f8d695582012778e79ce2ef271e29e94ae00863ec19efb01c8bfd8224a7ed2

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Aug 2023 22:54:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

inklinkor.com/tag.min.js

172.67.211.29

200 OK

0 B

URL HEAD HTTP/2
inklinkor.com/tag.min.js
IP
172.67.211.29:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerGoogle Trust Services LLC
Subjectinklinkor.com
FingerprintF9:E2:87:BB:45:BD:69:84:B8:1A:2C:23:70:4D:BE:9E:4F:00:3C:F6
ValidityFri, 25 Aug 2023 12:55:35 GMT - Thu, 23 Nov 2023 12:55:34 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

HEAD /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zerion.cc/
Origin: https://zerion.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 282dd512b09cd0f98ecd82d9784230e2
cache-control: max-age=86400
last-modified: Fri, 25 Aug 2023 12:48:32 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://zerion.cc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
expires: Mon, 28 Aug 2023 22:46:01 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 525
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MgWxRin3jtwbH511q%2Btvyzedg6h57IHsBBPDqM143DqGnJ2mmmna%2BvOBZ2y6CvgJ1RywJRNCNdrLcwkg8gP9hW8hZAjZq9eyye2BTPiXSSV%2B3ZSDjZSb%2B8M%2BD6R8RBsc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f57cf0b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
7d86a3dce6d27e0a976ced013a552c63
ba7bb8b3b3ef53390afc5c48387be80fad4471d8
366822f1c01f284a91051f7e1753d6a5526f32be04336dc424de852d1ee22eac

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Aug 2023 22:54:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
48ce690e83fdc571d2f7fd617c2dfb73
64323ddedd153d7dcdb6a3a51f3c9f0dfaa803ce
274c166416d9423e3285ad737340c875c69efd1c66509c473d21f2351d83993c

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Aug 2023 22:54:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

16 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://zerion.cc/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint1B:14:11:9F:49:14:C3:A3:7C:87:B0:E1:5B:18:75:10:3D:2A:B3:72
ValidityMon, 07 Aug 2023 12:21:56 GMT - Mon, 30 Oct 2023 12:21:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size
16 kB (15744 bytes)
Hash
15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zerion.cc
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Aug 2023 04:50:55 GMT
expires: Fri, 23 Aug 2024 04:50:55 GMT
cache-control: public, max-age=31536000
age: 324231
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2

216.58.207.227

200 OK

12 kB

URL GET HTTP/2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://zerion.cc/
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint1B:14:11:9F:49:14:C3:A3:7C:87:B0:E1:5B:18:75:10:3D:2A:B3:72
ValidityMon, 07 Aug 2023 12:21:56 GMT - Mon, 30 Oct 2023 12:21:55 GMT

File type
Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Size
12 kB (11872 bytes)
Hash
87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431

HTTP Headers

GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zerion.cc
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 25 Aug 2023 10:31:16 GMT
expires: Sat, 24 Aug 2024 10:31:16 GMT
cache-control: public, max-age=31536000
age: 217410
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471 B

URL
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
7d86a3dce6d27e0a976ced013a552c63
ba7bb8b3b3ef53390afc5c48387be80fad4471d8
366822f1c01f284a91051f7e1753d6a5526f32be04336dc424de852d1ee22eac

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 27 Aug 2023 22:54:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

zerion.cc/api/ping

172.67.139.204

200 OK

13 B

URL POST HTTP/3
zerion.cc/api/ping
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JSON data\012- , ASCII text, with no line terminators
Size
13 B (13 bytes)
Hash
f9198d723cba416707e9163bf9c95f40
8e370dc7e9d6ac3f0d5487206aa2c373f5aaa5b8
3dac47acb1d3459ecf35c9e8452b03e68e68bd14c85982a69324655e41352d1c

HTTP Headers

POST /api/ping HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zerion.cc/
x-csrf-token: 2MVtwWp0-nRIJrdJViuXvmo-uBh0P9c4MeIs
Content-type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 26
Origin: https://zerion.cc
DNT: 1
Connection: keep-alive
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: application/json; charset=utf-8
content-length: 13
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
set-cookie: uid=HoA7r7EQg1S_S3y1z8pDj2UmpGOyhZ; Max-Age=31536000; Path=/; Expires=Mon, 26 Aug 2024 22:54:46 GMT; HttpOnly; Secure
sid=Thn8YfLGXKU4i-gpFS_ng0BfKAuS8Q; Path=/; HttpOnly; Secure
etag: W/"d-jjcNx+nWrD8NVIcgaqLDc/Wqpbg"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7JB4H3%2BkDsuhlZkeaRu46fqGBb21xWqbFMAlb0QAa3y%2BQa7wPZ3mTL1UV5lGe8%2F%2FGISSJlXSrNjLCZ8rX00bohON6KURMeLQHsi5N1IFo2LggOpRr3fmw13XSNE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fd7e5f5da01fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/assets/img/icons/favicon-16x16.png

172.67.139.204

200 OK

1.2 kB

URL GET HTTP/3
zerion.cc/assets/img/icons/favicon-16x16.png
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size
1.2 kB (1218 bytes)
Hash
50ad93eef9a24193f3a102d62d72fbc8
e27c457a9629e872f3ee7d4ed0049eac177b5d7c
8c76f571c26b4ebf0aa635b45522d99d9e9f58cc5f0dd85061be8374329d7977

HTTP Headers

GET /assets/img/icons/favicon-16x16.png HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW; uid=HoA7r7EQg1S_S3y1z8pDj2UmpGOyhZ; sid=Thn8YfLGXKU4i-gpFS_ng0BfKAuS8Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/png
content-length: 1218
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:25:57 GMT
etag: W/"4c2-18707c7f51d"
cf-cache-status: HIT
age: 2265827
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Zp8afpvY0YsN%2FFH%2BGvKRyzSZkFk9Q4MK9LbC%2Fra0d%2F9Sk5qdOacgVIjg2FuEr4poKcr4wcbzyHlAf3r%2FHlIvM0K8hseKNg5%2BmcImzyU2WekXpJB0%2BSWj1BKLIqo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f75a8bfab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/assets/img/icons/android-icon-192x192.png

172.67.139.204

200 OK

1.8 kB

URL GET HTTP/3
zerion.cc/assets/img/icons/android-icon-192x192.png
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
PNG image data, 192 x 192, 4-bit colormap, non-interlaced\012- data
Size
1.8 kB (1798 bytes)
Hash
7f56e927c9b6c2d02c77649dbfdbe0ad
1f35098e18716f527f3866d3223201e42c566451
3e5a72f3eb6ee0f7e3382fcee5cfebf8a8ececaf2d925a6a9991beef1d236d55

HTTP Headers

GET /assets/img/icons/android-icon-192x192.png HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW; uid=HoA7r7EQg1S_S3y1z8pDj2UmpGOyhZ; sid=Thn8YfLGXKU4i-gpFS_ng0BfKAuS8Q
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: image/png
content-length: 1798
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:25:57 GMT
etag: W/"706-18707c7f62d"
cf-cache-status: HIT
age: 2265827
accept-ranges: bytes
priority: u=6,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LI6bEMWAOA9HgY0HfT2IWu%2FnT2qkWGZUV1zdgRsSXcieZyFcLqe9rZYHpfrha4Z%2FSGlboclbrdls6p8QjeWdsp3Av9MoReJXP8h6Trjw3fmGTVd0maTyr2tHJW4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f75a8afab4-OSL
alt-svc: h3=":443"; ma=86400

basicwhenpear.com/5d/f8/f9/5df8f962a3fcdc4791bda1f08207cd83.js

192.243.59.20

200 OK

17 kB

URL GET HTTP/1.1
basicwhenpear.com/5d/f8/f9/5df8f962a3fcdc4791bda1f08207cd83.js
IP
192.243.59.20:443
ASN
#39572 DataWeb Global Group B.V.

Requested by
https://zerion.cc/
Certificate
IssuerLet's Encrypt
Subjectbasicwhenpear.com
FingerprintE3:76:75:95:73:82:5E:E4:20:2F:BC:11:AD:ED:48:C4:58:E7:29:B4
ValiditySun, 23 Jul 2023 00:34:15 GMT - Sat, 21 Oct 2023 00:34:14 GMT

File type
ASCII text, with very long lines (40311)
Size
17 kB (16698 bytes)
Hash
8727b752a4c98ea9c463f8b7876d6c06
be224379902f08b054d8c925a22e4f0d84c1b9bd
84f0656a4b56f445817648a38ed74e2dbdd67693ccf201fb2301980195a59240

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /5d/f8/f9/5df8f962a3fcdc4791bda1f08207cd83.js HTTP/1.1
Host: basicwhenpear.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 27 Aug 2023 22:54:47 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: 4b4e7ab587d59b22ad7bcd2439afc363_CF-2604=0; expires=Fri, 01 Sep 2023 22:54:47 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 43fb93fea6ff0e8ee047752549683f1c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

ocsp.r2m01.amazontrust.com/

143.204.48.16

471 B

URL
ocsp.r2m01.amazontrust.com/
IP
143.204.48.16:0
ASN
#16509 AMAZON-02

File type
data
Size
471 B (471 bytes)
Hash
5e57ef598467a45b140818c206024a37
ae7867e21b27ff1d01cfac35b567dfe0fecced6a
e7bb232ca7a1cb85c7c14bf3821fbb0d696937619cee39efc2121fc1303eee7e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Sun, 27 Aug 2023 22:54:47 GMT
Last-Modified: Sun, 27 Aug 2023 22:22:18 GMT
Server: ECAcc (ska/F7A5)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: n8vUwuiXTa4_rOwWKl2RcSSZLsVvezxoPpSJ7ii0_vI4Clm6bGyQhw==
Age: 1949

professionalswebcheck.com/stats

3.72.183.229

200 OK

40 B

URL GET HTTP/2
professionalswebcheck.com/stats
IP
3.72.183.229:443
ASN
#16509 AMAZON-02

Requested by
https://zerion.cc/
Certificate
IssuerAmazon
Subjectsimplewebanalysis.com
FingerprintA5:BD:9A:4F:AD:65:CB:9A:6B:86:23:32:84:A4:79:A5:36:98:C8:B2
ValidityMon, 21 Aug 2023 00:00:00 GMT - Wed, 18 Sep 2024 23:59:59 GMT

File type
ASCII text, with no line terminators
Size
40 B (40 bytes)
Hash
fc20f4d791d4a02d8032fe88bc50fff2
3a672f7181dd1e0af0c29cf19fa5c9a7674edfe2
f948245713a50e237ccf3987bbf61523381ad64f6bf1880bcf03fb14c943d236

HTTP Headers

GET /stats HTTP/1.1
Host: professionalswebcheck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zerion.cc
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 27 Aug 2023 22:54:47 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://zerion.cc
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=72b29e1f-d91c-4729-bc10-fc6a5077e3e9:2:1; expires=Wed, 24 Aug 2033 22:54:47 GMT; secure; SameSite=None
X-Firefox-Spdy: h2

continentalaileendepict.com/pixel/purst?dl=0&th=0&sc=0&rs=1493&rd=1493&fd=1010&bv=23.8.v.4&tmpl=70

173.233.137.52

200 OK

0 B

URL GET HTTP/1.1
continentalaileendepict.com/pixel/purst?dl=0&th=0&sc=0&rs=1493&rd=1493&fd=1010&bv=23.8.v.4&tmpl=70
IP
173.233.137.52:443
ASN
#7979 SERVERS-COM

Requested by
https://zerion.cc/
Certificate
IssuerLet's Encrypt
Subjectcontinentalaileendepict.com
Fingerprint48:00:54:F6:0D:8E:87:C2:40:F8:1C:29:DD:59:4D:22:F8:20:E9:94
ValidityMon, 21 Aug 2023 01:35:31 GMT - Sun, 19 Nov 2023 01:35:30 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /pixel/purst?dl=0&th=0&sc=0&rs=1493&rd=1493&fd=1010&bv=23.8.v.4&tmpl=70 HTTP/1.1
Host: continentalaileendepict.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 27 Aug 2023 22:54:47 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

zerion.cc/cdn-cgi/rum?

172.67.139.204

204 No Content

0 B

URL POST HTTP/3
zerion.cc/cdn-cgi/rum?
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1013
Origin: https://zerion.cc
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW; uid=HoA7r7EQg1S_S3y1z8pDj2UmpGOyhZ; sid=Thn8YfLGXKU4i-gpFS_ng0BfKAuS8Q; dom3ic8zudi28v8lr6fgphwffqoz0j6c=72b29e1f-d91c-4729-bc10-fc6a5077e3e9%3A2%3A1; ppu_main_5df8f962a3fcdc4791bda1f08207cd83=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
date: Sun, 27 Aug 2023 22:54:47 GMT
access-control-allow-origin: https://zerion.cc
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7fd7e5fdcce6fab4-OSL
x-frame-options: DENY
x-content-type-options: nosniff

zerion.cc/assets/js/swiper.9.0.1.min.js

172.67.139.204

200 OK

53 kB

URL GET HTTP/3
zerion.cc/assets/js/swiper.9.0.1.min.js
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
ASCII text, with very long lines (65280)
Size
53 kB (53433 bytes)
Hash
e856f612b4b05632adeb15de9300e1d2
450e17b487b4622efd2a89792b9aca2d9e04ab09
69aea4595ac4efa99c91bc0cf46c62b7e259b9a1c1e17b54a80228384e224e80

HTTP Headers

GET /assets/js/swiper.9.0.1.min.js HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Fri, 28 Jul 2023 06:53:03 GMT
etag: W/"210f2-1899b45b373"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2096524
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h%2F%2FZufcg7OA0u31JhzQZ%2FASJVyHsGc1%2BHpfGZ%2FMkRkbkUk%2BwK3gvvarWlrbKddXuELkU9JytRQ0kxecYFGIB8H72MiKUs5NBENkWiNVBt%2FxXUk2%2BsJImH5qSJww%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fd7e5f3791afab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

zerion.cc/uploads/thumbs/Ii-7zVK7goiu.jpg

172.67.139.204

200 OK

14 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/Ii-7zVK7goiu.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3\012- data
Size
14 kB (13990 bytes)
Hash
021fa003f69e28362f1e1e39779b35e0
f2bbbd3be516ff86cbb073f3a1624835b3bdcff0
b85a60be66aa8669913a375460a8f977942036354259a29af911cb609b2cf08d

HTTP Headers

GET /uploads/thumbs/Ii-7zVK7goiu.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW; uid=HoA7r7EQg1S_S3y1z8pDj2UmpGOyhZ; sid=Thn8YfLGXKU4i-gpFS_ng0BfKAuS8Q; dom3ic8zudi28v8lr6fgphwffqoz0j6c=72b29e1f-d91c-4729-bc10-fc6a5077e3e9%3A2%3A1; ppu_main_5df8f962a3fcdc4791bda1f08207cd83=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:56 GMT
content-type: image/jpeg
content-length: 13990
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 30 Jul 2023 20:27:28 GMT
etag: W/"36a6-189a87c09a4"
cf-cache-status: HIT
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VKkm1PNhPdQCbv270q3A4Y415LHv1yIddlpF9WeJSufTq2ZcDCPoUzMPaEUFghB2nnk2dZq08u8rs%2FZW18Js%2BFUI3ov65TCg2q5bxasrg58tOjDkVRALnZOjC8s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e63509b5fab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/cdn-cgi/rum?

172.67.139.204

204 No Content

0 B

URL POST HTTP/3
zerion.cc/cdn-cgi/rum?
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

POST /cdn-cgi/rum? HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 443
Origin: https://zerion.cc
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/3 204 No Content
date: Sun, 27 Aug 2023 22:55:01 GMT
access-control-allow-origin: https://zerion.cc
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7fd7e650fd61fab4-OSL
x-frame-options: DENY
x-content-type-options: nosniff

zerion.cc/uploads/thumbs/w6jpBHle4B.jpg

172.67.139.204

200 OK

15 kB

URL GET HTTP/3
zerion.cc/uploads/thumbs/w6jpBHle4B.jpg
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3\012- data
Size
15 kB (14774 bytes)
Hash
ecbc59745b76c058f1f3945dbe7a7a6a
95151496647f346bc04f8a09a5819ad677ba061b
770f47a9deb183d0eb7db977269821c2f47116ba02879c819b9c7a43e1ce56f1

HTTP Headers

GET /uploads/thumbs/w6jpBHle4B.jpg HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW; uid=HoA7r7EQg1S_S3y1z8pDj2UmpGOyhZ; sid=Thn8YfLGXKU4i-gpFS_ng0BfKAuS8Q; dom3ic8zudi28v8lr6fgphwffqoz0j6c=72b29e1f-d91c-4729-bc10-fc6a5077e3e9%3A2%3A1; ppu_main_5df8f962a3fcdc4791bda1f08207cd83=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:51 GMT
content-type: image/jpeg
content-length: 14774
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 31 May 2020 18:38:56 GMT
etag: W/"39b6-1726c079600"
cf-cache-status: HIT
age: 2262824
accept-ranges: bytes
priority: u=4,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=soePKN%2Fzpj6GmBschLYPfkUrU2CQ6F0z1WhMwB603LdNu5jVqfP1vo48mlbhMls8sKaA9uF7tCll4XH%2BdqfkAperc%2F4qN%2FTyzztJvEsSylw%2BdrFJ0vDdNdXxKbw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e613ed0efab4-OSL
alt-svc: h3=":443"; ma=86400

zerion.cc/assets/js/main.js?v=2.16.0

172.67.139.204

200 OK

33 kB

URL GET HTTP/3
zerion.cc/assets/js/main.js?v=2.16.0
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type

Size
33 kB (32724 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/js/main.js?v=2.16.0 HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 20 Aug 2023 02:44:31 GMT
etag: W/"7fd4-18a10d46e70"
vary: Accept-Encoding
cf-cache-status: HIT
age: 675738
priority: u=3,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K6WBOxbCyFR6aecuGGSzgAp3AAvPNCGI4Y3jjCYGvlOMitbDmo2SAA5%2B7%2FkH16z2%2Bmc36ZLzrp3jfbw3MFZ1eFT1KqLN%2BUyRcMabRfpC4AeVSmTEGwvdvCFNvYc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fd7e5f37919fab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

zerion.cc/assets/css/swiper.9.0.1.min.css

172.67.139.204

200 OK

18 kB

URL GET HTTP/3
zerion.cc/assets/css/swiper.9.0.1.min.css
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type
ASCII text, with very long lines (17607)
Size
18 kB (17863 bytes)
Hash
71546498deedea7ef1f568c90c51b5fc
a17b5a9157d3d25a4ae231c1cd11f48676ef37b6
86f4715f26444c65bfb07e6f1e4ed1e02b6cd4893d0e67108c8df00e45bf0acd

HTTP Headers

GET /assets/css/swiper.9.0.1.min.css HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: text/css; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Fri, 28 Jul 2023 06:53:03 GMT
etag: W/"45c7-1899b45b18f"
vary: Accept-Encoding
cf-cache-status: HIT
age: 2092988
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wtvVvU0SFpNyYnl1FV8AYW%2F9DxmJinhrWMWeN%2F3JnDgFR5ccacVesupPs%2BuNVZWcN9Jh7o4ewZkOHrTZ1lYeAhHWKlR0S1PK1xT7YnkEloENOoIGmFgofS5iotw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fd7e5f37915fab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

fonts.googleapis.com/css2?family=Roboto:wght@400;500&display=swap

142.250.74.74

200 OK

4.5 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Roboto:wght@400;500&display=swap
IP
142.250.74.74:443
ASN
#15169 GOOGLE

Requested by
https://zerion.cc/
Certificate
IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint94:C0:54:E4:BA:6C:E0:93:C6:8F:D9:27:1C:74:6F:E8:CE:6E:E2:BA
ValidityMon, 07 Aug 2023 12:21:56 GMT - Mon, 30 Oct 2023 12:21:55 GMT

File type
ASCII text, with very long lines (4666), with no line terminators
Size
4.5 kB (4540 bytes)
Hash
d1743611338d9db8e2196c4d62cee363
e70282a2861f0cd3220aa5d97bd4f39701a99dac
3e5732002f64489541cc33e26687333a265d32cf5a30339a306e252362a4642c

HTTP Headers

GET /css2?family=Roboto:wght@400;500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 27 Aug 2023 22:54:46 GMT
date: Sun, 27 Aug 2023 22:54:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

zerion.cc/

172.67.139.204

200 OK

26 kB

URL User Request GET HTTP/2
zerion.cc/
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type

Size
26 kB (26338 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 27 Aug 2023 22:54:45 GMT
content-type: text/html; charset=utf-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
set-cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW; Path=/; HttpOnly; Secure; SameSite=Lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R3DWichxd%2FFJqiDW7kveAghwaLBS8nak0SvbTK08%2BEINcm345F8ZJJYsthsBtGvlx9nPT%2B5EX2eM936GYMQIRiAmEVA1xyU%2BuSxH3DY98Qo%2FU1pXFSH5s0hDwtc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fd7e5f05fa3b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

zerion.cc/assets/css/style.css?v=2.16.0

172.67.139.204

200 OK

188 kB

URL GET HTTP/3
zerion.cc/assets/css/style.css?v=2.16.0
IP
172.67.139.204:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint1A:30:4F:8F:D1:DB:E9:F2:CC:6E:0E:A2:FC:1D:ED:A3:A9:86:84:DE
ValiditySat, 19 Nov 2022 00:00:00 GMT - Sun, 19 Nov 2023 23:59:59 GMT

File type

Size
188 kB (188349 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /assets/css/style.css?v=2.16.0 HTTP/1.1
Host: zerion.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Cookie: _csrf=FBGtfCDq3p408TwEqFHaMEZW
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: text/css; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sun, 20 Aug 2023 02:44:31 GMT
etag: W/"2dfbd-18a10d46c40"
vary: Accept-Encoding
cf-cache-status: HIT
age: 675738
priority: u=2,i=?0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4B67jfKb7fObLDb%2FCplZeCEdQa0t0%2B8PO5deq2xkGHHsmCoX7yQMtIKbyQMYNZkjySso9o6e4Am5bQcL0mlT5Yyi93EcoGHNDqy7GxJRfrnJ1PHPgHo5T6%2F0iXU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fd7e5f36913fab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

addresseepaper.com/sfp.js

0.0.0.0

0 B

URL GET
addresseepaper.com/sfp.js
IP
0.0.0.0:0
ASN
#0

Requested by
https://zerion.cc/

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

static.cloudflareinsights.com/beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854

104.16.56.101

200 OK

20 kB

URL GET HTTP/2
static.cloudflareinsights.com/beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854
IP
104.16.56.101:443
ASN
#13335 CLOUDFLARENET

Requested by
https://zerion.cc/
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (19978), with no line terminators
Size
20 kB (19978 bytes)
Hash
efeb2542712dce8a2c51cf68396e4a05
ac9ce350c598644c7b7f6186aaf0368eb077d396
c235f21017bcc11fcaa31d7dfd9855aaebcbf5f6d7ee9bf9f2e98a910907c391

HTTP Headers

GET /beacon.min.js/v8b253dfea2ab4077af8c6f58422dfbfd1689876627854 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zerion.cc
DNT: 1
Connection: keep-alive
Referer: https://zerion.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 27 Aug 2023 22:54:46 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/"2023.7.1"
last-modified: Thu, 20 Jul 2023 18:10:27 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fd7e5f3abf2b50b-OSL
content-encoding: gzip
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (6)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (46)

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

File type

Size

Hash

HTTP Headers

URL GET HTTP/3

IP