Report - casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php

Report Overview

Submitted URL
casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
IP
212.44.113.18
ASN
#43128 Webtasy d.o.o.
Submitted
2023-02-01 13:20:52
Access
Website Title
Final URL
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
contile.services.mozilla.com	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333 B	391 B	34.117.237.239
push.services.mozilla.com	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606 B	127 B	54.187.247.157
img-getpocket.cdn.mozilla.net	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3.2 kB	63 kB	34.120.237.76
casis.si	unknown	2016-06-18T08:19:42Z	2023-01-25T13:48:50Z	9.9 kB	195 kB	212.44.113.18
r3.o.lencr.org	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3.0 kB	8.0 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	782 B	2.4 kB	35.241.9.150
content-signature-2.cdn.mozilla.net	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413 B	5.8 kB	34.160.144.191

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-01	medium	casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php	Phishing
2023-02-01	medium	casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (7)

	URL	Size	First Seen	Last Seen
	casis.si/wp-content/cache/autoptimize/js/autoptimize_5fb4b7a347a2d745d57f2dc6a70d9506.js	88 kB	2023-03-11	2023-03-25
Pretty URL casis.si/wp-content/cache/autoptimize/js/autoptimize_5fb4b7a347a2d745d57f2dc6a70d9506.js IP 212.44.113.18 ASN #43128 Webtasy d.o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:42:06 Last Seen2023-03-25 23:03:57 Times Seen2 Hash 86dee85007c97db074a8880c74413490 4e0f6bd94f4afd58fddc29924f3920e89f9019aa 2c6dc235dc9df09d627873f8fe8a5a6205854133e4f49d91ff4ecee579bd75ca Loading...

	casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php	135 B	2023-03-11	2023-03-26
Pretty URL casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php IP 212.44.113.18 ASN #43128 Webtasy d.o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:42:06 Last Seen2023-03-26 12:25:55 Times Seen3 Hash eee043c9c19787bbe71995e6b4591857 d7753aa8dea49952ba2edbd960d82cf576190551 a87d3a909f9dad287398c3b9872d09461360e769284ec985304e467399d64440 Loading...

	casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php	475 B	2023-03-11	2023-03-25
Pretty URL casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php IP 212.44.113.18 ASN #43128 Webtasy d.o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 21:42:06 Last Seen2023-03-25 23:03:57 Times Seen2 Hash c4aa68d37943343ea237cef2b8890ad1 27b90981689fd8278d31ebc121b788c3a18b8e72 e1f4f00f67f47caf49f5e69c1ba363697e857a9797f74ee6f51442b752e03371 Loading...

	casis.si/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1	19 kB	2023-03-07	2024-04-25
Pretty URL casis.si/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP 212.44.113.18 ASN #43128 Webtasy d.o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:08 Last Seen2024-04-25 04:27:26 Times Seen38041 Hash 32beb68a374e3aeac00abdf9e12b84ea b5d18aa625e8696dd9d07cd0869337717b211ae0 5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782 Loading...

	casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php	2.1 kB	2023-03-12	2023-03-26
Pretty URL casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php IP 212.44.113.18 ASN #43128 Webtasy d.o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-12 11:04:34 Last Seen2023-03-26 12:25:55 Times Seen3 Hash c0f8b1bf30a3c6d46d38e1e6be0a658c 691b131af09b703bb22212177ae1850e7ccbe1fa 1f1eb98c4c6235e354572ba9afec8ed10228c8f58adce10a8b8e426f0623ae8e Loading...

	casis.si/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9	6.5 kB	2023-03-07	2024-04-25
Pretty URL casis.si/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 IP 212.44.113.18 ASN #43128 Webtasy d.o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:08 Last Seen2024-04-25 04:27:24 Times Seen15495 Hash 61449413a42d2daaa79dbe7298b40e21 d86c474164c603084397bdc50fb0e469d28b5772 f30769ea0b80a5d900c5f0de30b1aad1ab461195e69223d5ef63c2c5de8b6c1a Loading...

	casis.si/wp-includes/js/jquery/jquery.min.js?ver=3.6.1	90 kB	2023-03-08	2024-04-25
Pretty URL casis.si/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP 212.44.113.18 ASN #43128 Webtasy d.o.o. Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:21:46 Last Seen2024-04-25 04:27:26 Times Seen31805 Hash 17738318d61d394f1de8890d589afaec f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3 cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981 Loading...

HTTP Transactions (39)

URL IP Response Size

casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php

212.44.113.18

301 Moved Permanently

274 B

URL HTTP/1.1
casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size
274 B (274 bytes)
Hash
23f7cdd8976803e5d1f95c07ff348df2
bff958709a5cb0c489b0ee17294e6577ec08e163
0275e8a2f4075a5d8dc255b41578f4bfa7c11a45659143c3c3498043d7474ae4

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
date: Wed, 01 Feb 2023 13:20:41 GMT
server: Apache
location: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
content-length: 274
content-type: text/html; charset=iso-8859-1
set-cookie: PH_HPXY_CHECK=s1; path=/
cache-control: private

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17736
Expires: Wed, 01 Feb 2023 18:16:18 GMT
Date: Wed, 01 Feb 2023 13:20:42 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4261
Expires: Wed, 01 Feb 2023 14:31:43 GMT
Date: Wed, 01 Feb 2023 13:20:42 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

35.241.9.150

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 01 Feb 2023 12:36:01 GMT
content-type: application/json
age: 2681
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12499
Expires: Wed, 01 Feb 2023 16:49:01 GMT
Date: Wed, 01 Feb 2023 13:20:42 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: 8yCSWxzfyIUqg4vCN+8XijbpwadYMKQkLR2hx9qD4XPEe4zGFDAntcsWGbCchH55ENskX+JbcCo=
x-amz-request-id: FR0JBD7EGXNWTDQH
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 01 Feb 2023 12:22:40 GMT
age: 3482
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 01 Feb 2023 13:20:42 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d19188ed4ca289a5adce398e039095ca
ddbe2431815bb5179727465b172f66e5a2563c09
d36a31aa1944552760f2fff04a5a73ccbf3ddbd48b04c57ecc2c9c7d79ff477d

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D36A31AA1944552760F2FFF04A5A73CCBF3DDBD48B04C57ECC2C9C7D79FF477D"
Last-Modified: Wed, 01 Feb 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 01 Feb 2023 19:20:42 GMT
Date: Wed, 01 Feb 2023 13:20:42 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

35.241.9.150

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
35.241.9.150:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 01 Feb 2023 12:49:05 GMT
age: 1897
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
8913af0be619500295008bb91f506660
a7b8068ba9aa506205a295b24458c2616997a0d1
6a9838d00256431807ca382fc205064b07c08d5054f2895c2ae3cc4e9094179a

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14718
Expires: Wed, 01 Feb 2023 17:26:00 GMT
Date: Wed, 01 Feb 2023 13:20:42 GMT
Connection: keep-alive

push.services.mozilla.com/

54.187.247.157

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.187.247.157:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9xkT+nlgzGNmMRMRreNqUQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aSd2E3LxnNkBBGs07OF/o29w6aE=

casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php

212.44.113.18

404 Not Found

7.6 kB

URL HTTP/2
casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (5965)
Size
7.6 kB (7558 bytes)
Hash
03c177a6f85137452e99856cc3f0d33a
c850e03a74fb21421fd923813a1fbbddd8b76add
641991d379f8fd3fa41c698329c75c4c9983f3c74f67314cf68514e331c16701

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 404 Not Found
date: Wed, 01 Feb 2023 13:20:42 GMT
server: Apache
vary: Accept-Encoding,Cookie,User-Agent
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://casis.si/wp-json/>; rel="https://api.w.org/"
content-encoding: gzip
content-length: 7558
content-type: text/html; charset=UTF-8
set-cookie: PH_HPXY_CHECK=s1; path=/; Secure; SameSite=Strict
X-Firefox-Spdy: h2

casis.si/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9

212.44.113.18

200 OK

2.5 kB

URL HTTP/2
casis.si/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
ASCII text, with very long lines (6475), with no line terminators
Size
2.5 kB (2457 bytes)
Hash
27cbbd0a9d7c5ad9402118c4afc36035
7659d08a005f5ecfa6c779e3cda45c30007fd059
ebc771d0af626966e38535357861fab0090e0bd7ff346cbe3c7ffdde1683809f

HTTP Headers

GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Sun, 18 Dec 2022 11:35:36 GMT
accept-ranges: bytes
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 2457
content-type: application/javascript
X-Firefox-Spdy: h2

casis.si/wp-includes/js/jquery/jquery.min.js?ver=3.6.1

212.44.113.18

200 OK

31 kB

URL HTTP/2
casis.si/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
ASCII text, with very long lines (65447)
Size
31 kB (30995 bytes)
Hash
1b5264c989379b828aff60f65a518a24
98641237f14ccb33ac114f54329a33bd0aa17eb7
6c8e7b78c6dbc13426810c905572db7589cf3e00264e30ce797fddb0b1092237

HTTP Headers

GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Sun, 18 Dec 2022 11:35:38 GMT
accept-ranges: bytes
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 30995
content-type: application/javascript
X-Firefox-Spdy: h2

casis.si/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0

212.44.113.18

200 OK

6.5 kB

URL HTTP/2
casis.si/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Size
6.5 kB (6532 bytes)
Hash
287748e15cc4a588d0df39da369d9035
b02e10a775f9d6ab54d448acffbc9253e2d9bfb9
742f6e950eecbeaf0c308f5d3877e48d6d57d48b7f8bd458d81875feb4b58654

HTTP Headers

GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Sun, 18 Dec 2022 11:35:36 GMT
accept-ranges: bytes
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 6532
content-type: application/javascript
X-Firefox-Spdy: h2

casis.si/wp-content/cache/autoptimize/js/autoptimize_5fb4b7a347a2d745d57f2dc6a70d9506.js

212.44.113.18

200 OK

23 kB

URL HTTP/2
casis.si/wp-content/cache/autoptimize/js/autoptimize_5fb4b7a347a2d745d57f2dc6a70d9506.js
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
ASCII text, with very long lines (31558)
Size
23 kB (23426 bytes)
Hash
13715836e39b1217f0e5821a747f827c
e2107f0ee102c4967c600fe1168ce8d3490f1951
f7c582c23bbbdf6f6d5373a6c67c067462c7160f2ebab6a9fd315f12de3c6f56

HTTP Headers

GET /wp-content/cache/autoptimize/js/autoptimize_5fb4b7a347a2d745d57f2dc6a70d9506.js HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Fri, 18 Mar 2022 13:22:27 GMT
accept-ranges: bytes
cache-control: max-age=30672000, public, immutable
expires: Mon, 22 Jan 2024 13:20:43 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 23426
content-type: application/javascript
X-Firefox-Spdy: h2

casis.si/wp-content/plugins/gdpr-cookie-compliance/dist/images/gdpr-logo.png

212.44.113.18

200 OK

1.5 kB

URL HTTP/2
casis.si/wp-content/plugins/gdpr-cookie-compliance/dist/images/gdpr-logo.png
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
PNG image data, 350 x 233, 4-bit colormap, non-interlaced\012- data
Size
1.5 kB (1475 bytes)
Hash
dd880989709c875ae9544b52c4d14614
70bf30cc53a852b30092b84c218da4b0dbfdb3f4
2d91c5b43406f8e7f61aca23cec58ee76a8e9a9d4b9a7c96cc9700a3376ca42b

HTTP Headers

GET /wp-content/plugins/gdpr-cookie-compliance/dist/images/gdpr-logo.png HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 05 Jul 2021 08:09:35 GMT
accept-ranges: bytes
content-length: 1475
cache-control: max-age=2678400
expires: Sat, 04 Mar 2023 13:20:43 GMT
content-type: image/png
X-Firefox-Spdy: h2

casis.si/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1

212.44.113.18

200 OK

5.0 kB

URL HTTP/2
casis.si/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
ASCII text, with very long lines (15660)
Size
5.0 kB (5009 bytes)
Hash
e6624e0b978e6ddba476be41aaaa82df
822e920d8233072110ed7c8a7f379e5b13209b18
dac86a9ce08e4d8cded47b4fa900a664b0c997d8910c2a1be54a423678925a41

HTTP Headers

GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Sun, 18 Dec 2022 11:35:38 GMT
accept-ranges: bytes
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 5009
content-type: application/javascript
X-Firefox-Spdy: h2

casis.si/wp-content/uploads/2020/06/bodite-prepoznavni-1-e1609797675719.jpg

212.44.113.18

200 OK

6.4 kB

URL HTTP/2
casis.si/wp-content/uploads/2020/06/bodite-prepoznavni-1-e1609797675719.jpg
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", baseline, precision 8, 600x68, components 3\012- data
Size
6.4 kB (6374 bytes)
Hash
46c5e7dbb184a79b1532378615fa5119
8e1e741ec94c5608dbaf8b1ec1d33ff9195d861b
1df1abd8b50989a88cb967a7823f855885e6246eb92f4900378598da17386776

HTTP Headers

GET /wp-content/uploads/2020/06/bodite-prepoznavni-1-e1609797675719.jpg HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 04 Jan 2021 22:01:15 GMT
accept-ranges: bytes
content-length: 6374
cache-control: max-age=2678400
expires: Sat, 04 Mar 2023 13:20:43 GMT
content-type: image/jpeg
X-Firefox-Spdy: h2

casis.si/wp-content/cache/autoptimize/css/autoptimize_255f58647fc284866254a90696f08d41.css

212.44.113.18

200 OK

98 B

URL HTTP/2
casis.si/wp-content/cache/autoptimize/css/autoptimize_255f58647fc284866254a90696f08d41.css
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
ASCII text, with no line terminators
Size
98 B (98 bytes)
Hash
9ce7361efc8f8aac87c5ede5c472c108
2411b05da8aae1cc2558377870cac80214aa9b2a
77e5ccab911035df46a6cf0e9a05f5d1cf3fcc9e948c64cccf8556930ef51d74

HTTP Headers

GET /wp-content/cache/autoptimize/css/autoptimize_255f58647fc284866254a90696f08d41.css HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Wed, 17 Feb 2021 18:15:29 GMT
accept-ranges: bytes
cache-control: max-age=30672000, public, immutable
expires: Mon, 22 Jan 2024 13:20:43 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 98
content-type: text/css
X-Firefox-Spdy: h2

casis.si/wp-content/uploads/2020/06/casis-logo-200x200.png

212.44.113.18

200 OK

4.1 kB

URL HTTP/2
casis.si/wp-content/uploads/2020/06/casis-logo-200x200.png
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Size
4.1 kB (4129 bytes)
Hash
e3e138ee6e803237f9e046e34ced1be4
7e605281b5e26d181d265b81ad0841b5e64b3b83
d648226b892e00fa4a1a627b508fff744ba822aa23d1f83743f8b0bd6eae1d57

HTTP Headers

GET /wp-content/uploads/2020/06/casis-logo-200x200.png HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 04 Jan 2021 21:38:34 GMT
accept-ranges: bytes
content-length: 4129
cache-control: max-age=2678400
expires: Sat, 04 Mar 2023 13:20:43 GMT
content-type: image/png
X-Firefox-Spdy: h2

casis.si/wp-content/uploads/2020/06/casis-logo-150x150.png

212.44.113.18

200 OK

3.1 kB

URL HTTP/2
casis.si/wp-content/uploads/2020/06/casis-logo-150x150.png
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
PNG image data, 150 x 150, 8-bit colormap, non-interlaced\012- data
Size
3.1 kB (3103 bytes)
Hash
1922b53259e635880a4167e9dea05458
d2ec9f36d4d1493aebef5599f65a68f6052360e2
946e120133d462e951e1124d7911b33c0980888af74f2eb39d6b315a28ab6829

HTTP Headers

GET /wp-content/uploads/2020/06/casis-logo-150x150.png HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 04 Jan 2021 21:38:30 GMT
accept-ranges: bytes
content-length: 3103
cache-control: max-age=2678400
expires: Sat, 04 Mar 2023 13:20:43 GMT
content-type: image/png
X-Firefox-Spdy: h2

casis.si/wp-content/fonts/droid-sans/SlGWmQWMvZQIdix7AFxXmMh3eDs1Zw.woff2

212.44.113.18

200 OK

22 kB

URL HTTP/2
casis.si/wp-content/fonts/droid-sans/SlGWmQWMvZQIdix7AFxXmMh3eDs1Zw.woff2
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
Web Open Font Format (Version 2), TrueType, length 22376, version 1.0\012- data
Size
22 kB (22376 bytes)
Hash
e6af16165f9bfda6aafd0088b8c01daa
c9c0ee8309619643e65ba1b22bfffcd1a7ca1e51
e803cd8c5031ac6b0d099a2d96ba1c3ee44782649a7f7c6f0d09b6410d93e216

HTTP Headers

GET /wp-content/fonts/droid-sans/SlGWmQWMvZQIdix7AFxXmMh3eDs1Zw.woff2 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://casis.si/wp-content/cache/autoptimize/css/autoptimize_dd5d0338241ce89c139912100fb9aa97.css
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 29 Aug 2022 10:42:18 GMT
accept-ranges: bytes
content-length: 22376
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff2
X-Firefox-Spdy: h2

casis.si/wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2

212.44.113.18

200 OK

13 kB

URL HTTP/2
casis.si/wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
Web Open Font Format (Version 2), TrueType, length 12972, version 1.0\012- data
Size
13 kB (12972 bytes)
Hash
f155ae6c5a655f05edb86445bd7e8d76
23115e9e59853e36044ae725d809759b7e8fa5f2
140ef34d138412106d0dc0bf060ba49acf6eaa6610c5bab642b182ddd0d68c8a

HTTP Headers

GET /wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVIGxA.woff2 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://casis.si/wp-content/cache/autoptimize/css/autoptimize_dd5d0338241ce89c139912100fb9aa97.css
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 29 Aug 2022 10:42:22 GMT
accept-ranges: bytes
content-length: 12972
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff2
X-Firefox-Spdy: h2

casis.si/wp-content/fonts/droid-sans/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2

212.44.113.18

200 OK

21 kB

URL HTTP/2
casis.si/wp-content/fonts/droid-sans/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
Web Open Font Format (Version 2), TrueType, length 21224, version 1.0\012- data
Size
21 kB (21224 bytes)
Hash
13bdfb843f942ccd9f485eb6c0bc1934
2bad44362ff7569f24f2a3df2521b27a97ec1297
7a291479495fbb281655d5e870c6d118dc6b7ed18e8c235aef5974c1e9de4e6c

HTTP Headers

GET /wp-content/fonts/droid-sans/SlGVmQWMvZQIdix7AFxXkHNSbQ.woff2 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://casis.si/wp-content/cache/autoptimize/css/autoptimize_dd5d0338241ce89c139912100fb9aa97.css
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 29 Aug 2022 10:42:18 GMT
accept-ranges: bytes
content-length: 21224
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff2
X-Firefox-Spdy: h2

casis.si/wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2

212.44.113.18

200 OK

17 kB

URL HTTP/2
casis.si/wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Size
17 kB (16740 bytes)
Hash
e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681

HTTP Headers

GET /wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://casis.si/wp-content/cache/autoptimize/css/autoptimize_dd5d0338241ce89c139912100fb9aa97.css
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 29 Aug 2022 10:42:22 GMT
accept-ranges: bytes
content-length: 16740
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff2
X-Firefox-Spdy: h2

casis.si/wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVIGxA.woff2

212.44.113.18

200 OK

7.5 kB

URL HTTP/2
casis.si/wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVIGxA.woff2
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
Web Open Font Format (Version 2), TrueType, length 7532, version 1.0\012- data
Size
7.5 kB (7532 bytes)
Hash
44d52bf20e4bdbe79fcd85c5bb9c4aa9
4749c15fe11cc4015c12a27ce89570b2d29c4103
100ac33d1b1bf7305b9fbc807e3bc1f23c8eb05a31db979c01b1c96897ff1d87

HTTP Headers

GET /wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVIGxA.woff2 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://casis.si/wp-content/cache/autoptimize/css/autoptimize_dd5d0338241ce89c139912100fb9aa97.css
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 29 Aug 2022 10:42:22 GMT
accept-ranges: bytes
content-length: 7532
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff2
X-Firefox-Spdy: h2

casis.si/wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2

212.44.113.18

200 OK

16 kB

URL HTTP/2
casis.si/wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type
Web Open Font Format (Version 2), TrueType, length 16372, version 1.0\012- data
Size
16 kB (16372 bytes)
Hash
e45478d4d6f15dafda1f25d9e0fb5fa1
52cb490cd0ee4442ede034085cda9652b206f91c
d1a17abb1a999842fe425e1a4ace9d90f9c18f3595c21a63d89f0611b90cfd72

HTTP Headers

GET /wp-content/fonts/open-sans/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsg-1x4gaVI.woff2 HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://casis.si/wp-content/cache/autoptimize/css/autoptimize_dd5d0338241ce89c139912100fb9aa97.css
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Mon, 29 Aug 2022 10:42:23 GMT
accept-ranges: bytes
content-length: 16372
cache-control: max-age=1
expires: Wed, 01 Feb 2023 13:20:44 GMT
vary: Accept-Encoding,User-Agent
content-type: font/woff2
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4167
Expires: Wed, 01 Feb 2023 14:30:11 GMT
Date: Wed, 01 Feb 2023 13:20:44 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4167
Expires: Wed, 01 Feb 2023 14:30:11 GMT
Date: Wed, 01 Feb 2023 13:20:44 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4167
Expires: Wed, 01 Feb 2023 14:30:11 GMT
Date: Wed, 01 Feb 2023 13:20:44 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
43bc5afe1d7330aa521e0efc78185a92
f53e9daa0a32e0acf7a10d9494fb383c1d039305
429d5a3a918137cae61e9dee0f05b0d5b4c799517aa6ae30e041a2a3e7f05cac

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "429D5A3A918137CAE61E9DEE0F05B0D5B4C799517AA6AE30E041A2A3E7F05CAC"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4167
Expires: Wed, 01 Feb 2023 14:30:11 GMT
Date: Wed, 01 Feb 2023 13:20:44 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg

34.120.237.76

200 OK

8.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.6 kB (8597 bytes)
Hash
27e95b7912edc909d6b031e36fe83534
eb27fae0bb17dbe0929a620002195233ef50c1d0
b32e7e1a2eee367c5bf9e99bcb38f4c74c4e9e7bdfe7fb0f8f2a657060c0624c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82a4ade3-0c43-4f21-9738-0bc1dbb9a6a6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8597
x-amzn-requestid: e7bf4ac9-d86d-4ee9-9e10-8a42e5dfe2c6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fcRaNEW4IAMFatA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d4c90d-7731312f630b00ba028836ca;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 07:04:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z3ZJ7bq6LuJd-9I9D22VIs0avctNGVDKnYmt-fxevCheQibivmUomQ==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 07:53:10 GMT
age: 19654
etag: "eb27fae0bb17dbe0929a620002195233ef50c1d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.6 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.6 kB (9600 bytes)
Hash
3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: aZOeDFqBJQoGwLpIs-GpPvY0FKGCAOXY6MgzG32qzX-kVzUCKKv-kw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 22:03:43 GMT
age: 55021
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55af221f-e2a5-4ea0-ba8f-1f045ea1cbb7.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.8 kB (8812 bytes)
Hash
7d09523ece9b6da85a1a007c7e2abcb6
a637b08e2fbba31ef60103b2d9fd3c6f96d84b27
811bbd2e85b83dcaa8743a1d7e513fd76b81d4ced2b8aa99c62f9590f20e85a8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F55af221f-e2a5-4ea0-ba8f-1f045ea1cbb7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8812
x-amzn-requestid: 8c568658-2708-4031-93ff-1654cc17a311
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foeeZGjKIAMFyUA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9aac2-4587a6e43c1430ed03d0e69b;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 23:56:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: SN1t3ynbcYOqHlv7bgBwzUTdZLjPAEq8bmRuIJaKHGA-4AkcMyBJkg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 00:16:28 GMT
age: 47056
etag: "a637b08e2fbba31ef60103b2d9fd3c6f96d84b27"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

14 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
14 kB (14041 bytes)
Hash
78fe9a77211d6f9a462f625af0c6f9bc
ac0b58423d7578e7a1b60a62220c0a57924dda82
e047466c3ae0a55509f4ace49d0476f94271b5a25e71caa3b06ec468a238b652

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb36bfce9-5d67-458e-846d-ca30f9242449.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 14041
x-amzn-requestid: 2be6655d-3b0e-4e65-b44b-11682610b640
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRGFpIAMFbMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-5554d18d5db235913afa77a2;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MeSOuCSjsjhK6FOS67rw6oF4rS08twjOACGbXJrNPH6vwZb8lZh9lw==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:18 GMT
etag: "ac0b58423d7578e7a1b60a62220c0a57924dda82"
content-type: image/jpeg
age: 55766
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.7 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.7 kB (8735 bytes)
Hash
23db22ce2120fbb0ae6109e1a046062d
2068c8d9a5bc30a17be658e198e26c64a80703cf
f307ba6c4929d9f0c9354334b7baea878da379138489d9689bb777c4da308dab

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffc960001-158a-4a74-b6ce-f28cd110ca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8735
x-amzn-requestid: f466c962-7b12-4923-a4be-7ff9fce372a0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaWFP_IAMF9wA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-7a8c027d58f5b9132bb68a33;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hjIm9dNf6UE9rpIlKWeLwWuF7Pm6yJeAZgbwchvJcuDy-zkXEr502w==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:18 GMT
age: 55766
etag: "2068c8d9a5bc30a17be658e198e26c64a80703cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

6.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
6.8 kB (6819 bytes)
Hash
ec7e808a5e82552c46c3417a5b32b836
f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd
f16d982224dfeb0753eaf9d4eb87d80fd1111f682fd8fa36f3177aad5bf926a4

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30335cb7-009a-42f5-8186-d0c302adc827.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 6819
x-amzn-requestid: a0368695-4182-40bd-9a28-c50ae783a7a5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: foJaRHGnoAMF0Ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d9890e-624285eb16110b8c2360dec5;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 21:33:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4MpUHqMYJoNA7QuRuQwbJIodNkhizq6EL5SPbIoSKFQjtoAKQgLuEg==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 21:51:25 GMT
age: 55759
etag: "f0a273292b47d7e2e33c9d77fd95abdcc9e31ddd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

casis.si/wp-content/cache/autoptimize/css/autoptimize_dd5d0338241ce89c139912100fb9aa97.css

212.44.113.18

200 OK

0 B

URL HTTP/2
casis.si/wp-content/cache/autoptimize/css/autoptimize_dd5d0338241ce89c139912100fb9aa97.css
IP
212.44.113.18:0
ASN
#43128 Webtasy d.o.o.

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /wp-content/cache/autoptimize/css/autoptimize_dd5d0338241ce89c139912100fb9aa97.css HTTP/1.1
Host: casis.si
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://casis.si/Fdx/901b99ff3353d813b414cbc1f8a2e788/tracking.php
Cookie: PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Feb 2023 13:20:43 GMT
server: Apache
last-modified: Sun, 18 Dec 2022 14:26:00 GMT
accept-ranges: bytes
cache-control: max-age=30672000, public, immutable
expires: Mon, 22 Jan 2024 13:20:43 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-type: text/css
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (7)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (39)

URL HTTP/1.1

IP

ASN

File type