| jpkiselavoda.com.mk/admin/ |  64.227.79.134 | 200 OK | 35 kB |
URL User Request GET HTTP/1.1jpkiselavoda.com.mk/admin/ IP64.227.79.134:443 ASN#14061 DIGITALOCEAN-ASN
CertificateIssuerLet's Encrypt Subjectjpkiselavoda.com.mk FingerprintDF:E2:92:70:59:9F:9A:DA:D7:AE:40:AF:A9:8F:29:85:76:FD:66:AC ValidityWed, 24 Apr 2024 16:53:58 GMT - Tue, 23 Jul 2024 16:53:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63974) Hashf5717363cbb8b5fc5883dbc2cbe82dcf ef7ea2eb44e9818e8ed6988a9054e9360bc4d5f2 8804eb03abfa4eb979761f8985e3b8ac7c437ca408a6bf931066088cceae5ff7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Google |
GET /admin/ HTTP/1.1
Host: jpkiselavoda.com.mk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 27 Apr 2024 05:17:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| jpkiselavoda.com.mk/assets/js | 64.227.79.134 | 200 OK | 35 kB |
URL GET HTTP/1.1jpkiselavoda.com.mk/assets/js IP64.227.79.134:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerLet's Encrypt Subjectjpkiselavoda.com.mk FingerprintDF:E2:92:70:59:9F:9A:DA:D7:AE:40:AF:A9:8F:29:85:76:FD:66:AC ValidityWed, 24 Apr 2024 16:53:58 GMT - Tue, 23 Jul 2024 16:53:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63974) Hashf5717363cbb8b5fc5883dbc2cbe82dcf ef7ea2eb44e9818e8ed6988a9054e9360bc4d5f2 8804eb03abfa4eb979761f8985e3b8ac7c437ca408a6bf931066088cceae5ff7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Google |
GET /assets/js HTTP/1.1
Host: jpkiselavoda.com.mk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/admin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 27 Apr 2024 05:17:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| jpkiselavoda.com.mk/assets/analytics.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F | 64.227.79.134 | 200 OK | 35 kB |
URL GET HTTP/1.1jpkiselavoda.com.mk/assets/analytics.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F IP64.227.79.134:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerLet's Encrypt Subjectjpkiselavoda.com.mk FingerprintDF:E2:92:70:59:9F:9A:DA:D7:AE:40:AF:A9:8F:29:85:76:FD:66:AC ValidityWed, 24 Apr 2024 16:53:58 GMT - Tue, 23 Jul 2024 16:53:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63974) Hashf5717363cbb8b5fc5883dbc2cbe82dcf ef7ea2eb44e9818e8ed6988a9054e9360bc4d5f2 8804eb03abfa4eb979761f8985e3b8ac7c437ca408a6bf931066088cceae5ff7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Google |
GET /assets/analytics.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: jpkiselavoda.com.mk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/admin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 27 Apr 2024 05:17:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www.google.com/chrome/static/css/pages/home/main.min.css |  142.250.74.164 | 200 OK | 14 kB |
URL GET HTTP/2www.google.com/chrome/static/css/pages/home/main.min.css IP142.250.74.164:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subjectwww.google.com FingerprintF3:75:C9:48:E6:A5:11:C7:87:C8:8D:9A:C4:16:F8:09:4E:88:7C:5A ValidityMon, 08 Apr 2024 07:33:48 GMT - Mon, 01 Jul 2024 07:33:47 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash50d6ecb8051e866f694f900a8643cb1c c4c25edb577787650e29b658f1a4bc14284f4c16 499c9a4ae50a257a21e02d90d23ee50f808956597d86040fef658adba25b70dd
GET /chrome/static/css/pages/home/main.min.css HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
content-encoding: br
content-type: text/css; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chrome
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/chrome"
report-to: {"group":"uxe-owners-acl/chrome","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/chrome"}]}
content-length: 14151
date: Sat, 27 Apr 2024 05:17:06 GMT
expires: Sat, 27 Apr 2024 05:17:06 GMT
cache-control: private, max-age=0
last-modified: Thu, 25 Apr 2024 14:00:00 GMT
x-content-type-options: nosniff
accept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
critical-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| jpkiselavoda.com.mk/assets/analytics.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F | 64.227.79.134 | 200 OK | 35 kB |
URL GET HTTP/1.1jpkiselavoda.com.mk/assets/analytics.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F IP64.227.79.134:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerLet's Encrypt Subjectjpkiselavoda.com.mk FingerprintDF:E2:92:70:59:9F:9A:DA:D7:AE:40:AF:A9:8F:29:85:76:FD:66:AC ValidityWed, 24 Apr 2024 16:53:58 GMT - Tue, 23 Jul 2024 16:53:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63974) Hashf5717363cbb8b5fc5883dbc2cbe82dcf ef7ea2eb44e9818e8ed6988a9054e9360bc4d5f2 8804eb03abfa4eb979761f8985e3b8ac7c437ca408a6bf931066088cceae5ff7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Google |
GET /assets/analytics.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: jpkiselavoda.com.mk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/admin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 27 Apr 2024 05:17:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| jpkiselavoda.com.mk/assets/gtm.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F | 64.227.79.134 | 200 OK | 35 kB |
URL GET HTTP/1.1jpkiselavoda.com.mk/assets/gtm.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F IP64.227.79.134:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerLet's Encrypt Subjectjpkiselavoda.com.mk FingerprintDF:E2:92:70:59:9F:9A:DA:D7:AE:40:AF:A9:8F:29:85:76:FD:66:AC ValidityWed, 24 Apr 2024 16:53:58 GMT - Tue, 23 Jul 2024 16:53:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63974) Hashf5717363cbb8b5fc5883dbc2cbe82dcf ef7ea2eb44e9818e8ed6988a9054e9360bc4d5f2 8804eb03abfa4eb979761f8985e3b8ac7c437ca408a6bf931066088cceae5ff7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Google |
GET /assets/gtm.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: jpkiselavoda.com.mk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/admin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 27 Apr 2024 05:17:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| jpkiselavoda.com.mk/assets/autotrack.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F | 64.227.79.134 | 200 OK | 35 kB |
URL GET HTTP/1.1jpkiselavoda.com.mk/assets/autotrack.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F IP64.227.79.134:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerLet's Encrypt Subjectjpkiselavoda.com.mk FingerprintDF:E2:92:70:59:9F:9A:DA:D7:AE:40:AF:A9:8F:29:85:76:FD:66:AC ValidityWed, 24 Apr 2024 16:53:58 GMT - Tue, 23 Jul 2024 16:53:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63974) Hashf5717363cbb8b5fc5883dbc2cbe82dcf ef7ea2eb44e9818e8ed6988a9054e9360bc4d5f2 8804eb03abfa4eb979761f8985e3b8ac7c437ca408a6bf931066088cceae5ff7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Google |
GET /assets/autotrack.js.%D0%91%D0%B5%D0%B7%20%D0%BD%D0%B0%D0%B7%D0%B2%D0%B0%D0%BD%D0%B8%D1%8F HTTP/1.1
Host: jpkiselavoda.com.mk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/admin/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 27 Apr 2024 05:17:06 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| jpkiselavoda.com.mk/assets/icon-warning.svg | 64.227.79.134 | 200 OK | 35 kB |
URL GET HTTP/1.1jpkiselavoda.com.mk/assets/icon-warning.svg IP64.227.79.134:443 ASN#14061 DIGITALOCEAN-ASN
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerLet's Encrypt Subjectjpkiselavoda.com.mk FingerprintDF:E2:92:70:59:9F:9A:DA:D7:AE:40:AF:A9:8F:29:85:76:FD:66:AC ValidityWed, 24 Apr 2024 16:53:58 GMT - Tue, 23 Jul 2024 16:53:57 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (63974) Hashf5717363cbb8b5fc5883dbc2cbe82dcf ef7ea2eb44e9818e8ed6988a9054e9360bc4d5f2 8804eb03abfa4eb979761f8985e3b8ac7c437ca408a6bf931066088cceae5ff7
| Analyzer | Verdict | Alert |
|---|
| urlquery | phishing | Phishing - Google |
GET /assets/icon-warning.svg HTTP/1.1
Host: jpkiselavoda.com.mk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/admin/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 27 Apr 2024 05:17:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
|
|
| www.googletagmanager.com/gtm.js?id=GTM-PZ6TRJB | 142.250.74.168 | 200 OK | 108 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-PZ6TRJB IP142.250.74.168:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (49672) Size108 kB (108173 bytes) Hashe5e7c8bb7f0eee3034f54ba2f8b36882 e74e9a8f55a50fe12ab3cfbdf8496b82b4e09efc f02079cca94a67e893fac379e3d00f603254b5123c11732a14d32812f3106ddf
GET /gtm.js?id=GTM-PZ6TRJB HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 27 Apr 2024 05:17:06 GMT
expires: Sat, 27 Apr 2024 05:17:06 GMT
cache-control: private, max-age=900
last-modified: Sat, 27 Apr 2024 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 108173
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 | 216.58.207.227 | 200 OK | 34 kB |
URL GET HTTP/2fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 IP216.58.207.227:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34184, version 1.0 Hash1aca735014a6bb648f468ee476680d5b 6d28e3ae6e42784769199948211e3aa0806fa62c e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a
GET /s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://jpkiselavoda.com.mk
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34184
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:33:15 GMT
expires: Fri, 25 Apr 2025 02:33:15 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 23:36:54 GMT
content-type: font/woff2
age: 182632
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://jpkiselavoda.com.mk
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 06:02:10 GMT
expires: Sat, 26 Apr 2025 06:02:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 83697
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 | 216.58.207.227 | 200 OK | 34 kB |
URL GET HTTP/2fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 IP216.58.207.227:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34184, version 1.0 Hash1aca735014a6bb648f468ee476680d5b 6d28e3ae6e42784769199948211e3aa0806fa62c e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a
GET /s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://jpkiselavoda.com.mk
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34184
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:33:15 GMT
expires: Fri, 25 Apr 2025 02:33:15 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 23:36:54 GMT
content-type: font/woff2
age: 182632
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 | 216.58.207.227 | 200 OK | 34 kB |
URL GET HTTP/2fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 IP216.58.207.227:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 34184, version 1.0 Hash1aca735014a6bb648f468ee476680d5b 6d28e3ae6e42784769199948211e3aa0806fa62c e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a
GET /s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://jpkiselavoda.com.mk
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 34184
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:33:15 GMT
expires: Fri, 25 Apr 2025 02:33:15 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 24 Apr 2024 23:36:54 GMT
content-type: font/woff2
age: 182632
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.com/chrome/static/images/homepage/hero-anim-middle.png | 142.250.74.164 | 200 OK | 886 B |
URL GET HTTP/3www.google.com/chrome/static/images/homepage/hero-anim-middle.png IP142.250.74.164:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typePNG image data, 120 x 119, 8-bit colormap, non-interlaced Hash7dc4991880c08d2e4ba8c7084f3e84ac dd38319d7e7bee0edb715bc6e3fd13ddccb9edcd 7f85e4ec9841cd9011f8cca307134654da2684cf45872439960d31b0d2e0c7e8
GET /chrome/static/images/homepage/hero-anim-middle.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-type: image/png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chrome
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/chrome"
report-to: {"group":"uxe-owners-acl/chrome","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/chrome"}]}
content-length: 886
date: Sat, 27 Apr 2024 05:17:07 GMT
expires: Sat, 27 Apr 2024 05:17:07 GMT
cache-control: private, max-age=31536000
last-modified: Thu, 17 Jun 2021 20:30:00 GMT
x-content-type-options: nosniff
accept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
critical-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
vary: Accept-Encoding, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/chrome/static/images/chrome-logo-m100.svg | 142.250.74.164 | 200 OK | 881 B |
URL GET HTTP/3www.google.com/chrome/static/images/chrome-logo-m100.svg IP142.250.74.164:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typeSVG Scalable Vector Graphics image Hashc978f2a2d0110b5d47e01bcf6576bcf0 dcb7f341dfbeccb3d7dd850d2b07a33a522838ba 1357dd965397a99cbc937ddd2345a9897d527f7229c8b0f2aeebac97680cc66d
GET /chrome/static/images/chrome-logo-m100.svg HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
content-encoding: br
content-type: image/svg+xml
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chrome
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/chrome"
report-to: {"group":"uxe-owners-acl/chrome","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/chrome"}]}
content-length: 881
date: Sat, 27 Apr 2024 05:17:07 GMT
expires: Sat, 27 Apr 2024 05:17:07 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 02 Mar 2022 19:00:00 GMT
x-content-type-options: nosniff
accept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
critical-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/chrome/static/images/homepage/hero-anim-top-right.png | 142.250.74.164 | 200 OK | 5.2 kB |
URL GET HTTP/3www.google.com/chrome/static/images/homepage/hero-anim-top-right.png IP142.250.74.164:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typePNG image data, 540 x 540, 8-bit colormap, non-interlaced Hashb1e38c38bfe1598a615a5cd29a8a6934 bd32eaf0ba944329967b96268fbb2f4771152054 0bc177ab9cdfe4d264e5111c552d58db89c477a4112dd4d1091f9f3338c8f1af
GET /chrome/static/images/homepage/hero-anim-top-right.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-type: image/png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chrome
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/chrome"
report-to: {"group":"uxe-owners-acl/chrome","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/chrome"}]}
content-length: 5219
date: Sat, 27 Apr 2024 05:17:07 GMT
expires: Sat, 27 Apr 2024 05:17:07 GMT
cache-control: private, max-age=31536000
last-modified: Thu, 17 Jun 2021 20:30:00 GMT
x-content-type-options: nosniff
accept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
critical-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
vary: Accept-Encoding, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/chrome/static/images/fallback/google-chrome-logo.jpg | 142.250.74.164 | 200 OK | 2.7 kB |
URL GET HTTP/3www.google.com/chrome/static/images/fallback/google-chrome-logo.jpg IP142.250.74.164:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 160x24, components 3 Hashf0e776a677860d4961915f2eca8d555e 9698bf0f877a6539d6b730f32a00ad04d3880c52 380330f93337ca6dd8fcfdab31044e3b8a1d3dbfc72cf4625bfd1eec4414857c
GET /chrome/static/images/fallback/google-chrome-logo.jpg HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-type: image/jpeg
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chrome
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/chrome"
report-to: {"group":"uxe-owners-acl/chrome","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/chrome"}]}
content-length: 2689
date: Sat, 27 Apr 2024 05:17:07 GMT
expires: Sat, 27 Apr 2024 05:17:07 GMT
cache-control: private, max-age=31536000
last-modified: Thu, 26 Aug 2021 20:30:00 GMT
x-content-type-options: nosniff
accept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
critical-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
vary: Accept-Encoding, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/chrome/static/images/homepage/hero-anim-bottom-left.png | 142.250.74.164 | 200 OK | 3.9 kB |
URL GET HTTP/3www.google.com/chrome/static/images/homepage/hero-anim-bottom-left.png IP142.250.74.164:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typePNG image data, 400 x 400, 8-bit colormap, non-interlaced Hashd5484f84888d5d422c3214e0d058dd09 84d5f337d3c3c0024f4afaf1b89fe87273fcd977 eb9c623c4651f1c7acdd25a5a7104ee9a460a3751446d4bf14f5853924628f6e
GET /chrome/static/images/homepage/hero-anim-bottom-left.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-type: image/png
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chrome
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/chrome"
report-to: {"group":"uxe-owners-acl/chrome","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/chrome"}]}
content-length: 3892
date: Sat, 27 Apr 2024 05:17:07 GMT
expires: Sat, 27 Apr 2024 05:17:07 GMT
cache-control: private, max-age=31536000
last-modified: Thu, 17 Jun 2021 20:30:00 GMT
x-content-type-options: nosniff
accept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
critical-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
vary: Accept-Encoding, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.google.com/chrome/static/images/intl/en_GB/home-experiment/hero-img_desktop.webp | 142.250.74.164 | 200 OK | 15 kB |
URL GET HTTP/3www.google.com/chrome/static/images/intl/en_GB/home-experiment/hero-img_desktop.webp IP142.250.74.164:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.google.com Fingerprint01:16:A3:AE:CA:C9:AC:ED:3A:C9:AA:75:BE:C2:51:EF:65:CE:23:E1 ValidityMon, 08 Apr 2024 06:34:56 GMT - Mon, 01 Jul 2024 06:34:55 GMT
File typeRIFF (little-endian) data, Web/P image Hashbd02291252d323ac83be0ad286717fe5 a97eb2c0fbb96b5ce4814e0d991e8668baeec0fb 5cee28cc0152235c8896151a8e31f4156e239a7fff132d2e645bc11bffd1806a
GET /chrome/static/images/intl/en_GB/home-experiment/hero-img_desktop.webp HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-type: image/webp
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/chrome
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="uxe-owners-acl/chrome"
report-to: {"group":"uxe-owners-acl/chrome","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/chrome"}]}
content-length: 15364
date: Sat, 27 Apr 2024 05:17:07 GMT
expires: Sat, 27 Apr 2024 05:17:07 GMT
cache-control: private, max-age=31536000
last-modified: Thu, 09 Mar 2023 15:00:00 GMT
x-content-type-options: nosniff
accept-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
critical-ch: Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
vary: Accept-Encoding, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Platform-Version, Sec-CH-Prefers-Reduced-Motion
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-EGC7PESK0Z&l=dataLayer&cx=c | 142.250.74.168 | 200 OK | 87 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-EGC7PESK0Z&l=dataLayer&cx=c IP142.250.74.168:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com FingerprintFC:B1:16:E0:D8:F3:2B:F3:AB:33:E5:E1:23:57:F4:48:66:FD:4D:52 ValidityMon, 08 Apr 2024 06:34:55 GMT - Mon, 01 Jul 2024 06:34:54 GMT
File typeJavaScript source, ASCII text, with very long lines (5945) Hash6b3c49f0463d69f171369ac89d725d28 d761ee7404a32462c3f9b91dddeb2a970587c893 0027f97d627ece53ccf07365dc4f99413013366edeaab1553c3fce789441979c
GET /gtag/js?id=G-EGC7PESK0Z&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 27 Apr 2024 05:17:07 GMT
expires: Sat, 27 Apr 2024 05:17:07 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 87424
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| fonts.googleapis.com/css?family=Google+Sans:400,500,600,700%7CRoboto:400,500,600,700%7C&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese&display=swap | 142.250.74.106 | 200 OK | 9.0 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Google+Sans:400,500,600,700%7CRoboto:400,500,600,700%7C&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese&display=swap IP142.250.74.106:443
Requested byhttps://jpkiselavoda.com.mk/admin/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typegzip compressed data, max compression Hash39b1956d2cc4e093a3166a631c262d98 8e9fe30bf1d92f5e008bb4f1ebcdee6b51257318 13d0b710869a73d229b72ab8cadc1a55b9188b25994caa46369b61a0a9606b47
GET /css?family=Google+Sans:400,500,600,700%7CRoboto:400,500,600,700%7C&subset=cyrillic,cyrillic-ext,greek,greek-ext,latin-ext,vietnamese&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://jpkiselavoda.com.mk
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 27 Apr 2024 05:17:06 GMT
date: Sat, 27 Apr 2024 05:17:06 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.comhttps//www.google.com/chrome/static/images/favicons/android-icon-192x192.png |  0.0.0.0 | | 0 B |
URL GET www.google.comhttps//www.google.com/chrome/static/images/favicons/android-icon-192x192.png IP0.0.0.0:0
Requested byhttps://jpkiselavoda.com.mk/admin/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET //www.google.com/chrome/static/images/favicons/android-icon-192x192.png HTTP/1.1
Host: www.google.comhttps
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.google.comhttps//www.google.com/chrome/static/images/favicons/favicon-16x16.png | 0.0.0.0 | | 0 B |
URL GET www.google.comhttps//www.google.com/chrome/static/images/favicons/favicon-16x16.png IP0.0.0.0:0
Requested byhttps://jpkiselavoda.com.mk/admin/
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET //www.google.com/chrome/static/images/favicons/favicon-16x16.png HTTP/1.1
Host: www.google.comhttps
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://jpkiselavoda.com.mk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
0.0.0.0