| webelektron.pl/ |  91.231.140.77 | 301 Moved Permanently | 162 B |
IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 30 Sep 2022 07:54:33 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://webelektron.pl/
|
|
| firefox.settings.services.mozilla.com/v1/ |  143.204.55.36 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash1b3053fa528e28810f8a2cc9284cc921 cca9eb471d941881a6b9a1793aecb6c281908f6a a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 30 Sep 2022 07:16:05 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bco4Ueg8ylS_ceCuC86BQY1GuGBIHQ4K8X6BtmXVJbQoXcXGyhDH-Q==
Age: 2308
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash6dd4587c98aef98ad0939030a6976a7f 92dc5966ac2deb0c3ac7fdd02bf8d28f9239801e a382476d14b6ae14003333e7acdfbbd9ae8775d4c1a7d5c31116f33987043cff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A382476D14B6AE14003333E7ACDFBBD9AE8775D4C1A7D5C31116F33987043CFF"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8180
Expires: Fri, 30 Sep 2022 10:10:53 GMT
Date: Fri, 30 Sep 2022 07:54:33 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 143.204.55.49 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP143.204.55.49:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 30 Sep 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PLuTxJbe3puZbANeYDbkQAMpKOq3mX-78Aem1HXdlwIqZWjikv_l7g==
age: 8766
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash4dd0d99cf389347dfdd03f0c9150c043 7ad9ae4013b049236441e790988a08c1b931242a 281f3a74b30f851016e51cb05473ba69ada72c20028e4420aedd8c1e6e55fdc8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "281F3A74B30F851016E51CB05473BA69ADA72C20028E4420AEDD8C1E6E55FDC8"
Last-Modified: Thu, 29 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20445
Expires: Fri, 30 Sep 2022 13:35:18 GMT
Date: Fri, 30 Sep 2022 07:54:33 GMT
Connection: keep-alive
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:33 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.36 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Fri, 30 Sep 2022 07:29:33 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Fri, 30 Sep 2022 07:55:11 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: v9hSXcdbQpUlXYU7QXwgb21Kdgl906xJ-XasHf5j1jBm60PXnN9aHQ==
Age: 1500
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashf09cb223e3dc028c58cf32c2274c3766 ca7f1663a1200941986e786353ed2f3ff50bd0b2 9b89a5534b1a84f0a86f150dc7f1f699bb972f7b8e151b29c02454dd939066ca
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5750
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:33 GMT
Last-Modified: Fri, 30 Sep 2022 06:18:43 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.43.253.52 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.43.253.52:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: frvQTMla22ColZ12JHTkug==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 44rImmXHyaA6hfIssUoaZgRFvhU=
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash139d64e28724086d1d5ab6d2f534ff25 2c717905e83564a17bd8ca61dd934133416f629b a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10526
Expires: Fri, 30 Sep 2022 10:50:01 GMT
Date: Fri, 30 Sep 2022 07:54:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash139d64e28724086d1d5ab6d2f534ff25 2c717905e83564a17bd8ca61dd934133416f629b a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10526
Expires: Fri, 30 Sep 2022 10:50:01 GMT
Date: Fri, 30 Sep 2022 07:54:35 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash139d64e28724086d1d5ab6d2f534ff25 2c717905e83564a17bd8ca61dd934133416f629b a37afafc8ee712ae7ae935d3ed564f3cf46dd09005debbc5e2650f8b434d1e00
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A37AFAFC8EE712AE7AE935D3ED564F3CF46DD09005DEBBC5E2650F8B434D1E00"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10526
Expires: Fri, 30 Sep 2022 10:50:01 GMT
Date: Fri, 30 Sep 2022 07:54:35 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f0344fb-c824-4eac-9d71-05a217499bf9.jpeg | 34.120.237.76 | 200 OK | 9.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f0344fb-c824-4eac-9d71-05a217499bf9.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7bb7bc234f1a5c9b04670d89d99c7957 6fbb164a7a1b894c6f5b2be20e66cbc8914f6a10 c4e2ad314004e1e8c97c02575823f376379292c55ba4033362713d84f62e1432
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f0344fb-c824-4eac-9d71-05a217499bf9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9281
x-amzn-requestid: 85c111f8-8883-4f7a-8e94-2e4e12e923b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPdZZF7-oAMF0Vw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f6f-5f4e26bd047866fb170cae01;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: j2TJHo66aMJ_s9Vtr_Tqf0YbBcCwFTprSzk2aUNyOzEPgON6NW5Npw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:21:29 GMT
age: 34386
etag: "6fbb164a7a1b894c6f5b2be20e66cbc8914f6a10"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9789cead-4e6c-4a12-9b45-25d0efd38fc9.png | 34.120.237.76 | 200 OK | 16 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9789cead-4e6c-4a12-9b45-25d0efd38fc9.png IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash1389b1d624b44706c7a6f6b7eb769241 78b798f2cfa7db13a6b5ca2ca2783bece5e77d5d c3c2526b98be06fc7e793e1150bacde2a7bd718e29a851a6e6992e8d84333790
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9789cead-4e6c-4a12-9b45-25d0efd38fc9.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16011
x-amzn-requestid: d58dfdcd-383a-45ac-8ae2-2b97f016b6a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPdbjFy1IAMF84A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f7c-1ca9707a5e5087fd769d9ab6;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:52 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: f7RrSV82yxUNWPUohKYX-_PBShMw7Qk82bepr3WAGkzHTjLR-gIXBA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:53:34 GMT
age: 32461
etag: "78b798f2cfa7db13a6b5ca2ca2783bece5e77d5d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95b5f6af-0368-4914-a31b-9637ad00feda.jpeg | 34.120.237.76 | 200 OK | 5.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95b5f6af-0368-4914-a31b-9637ad00feda.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashda2bb5dc3c41d9956752c2e7a72c6eb6 d9c7b0dea148896017492aad6c02ca6fadf17ebb 28b08565a224d8bd81e3cbb65f2e70a9025d67af5e4cff9cbd673aa416de8aa7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95b5f6af-0368-4914-a31b-9637ad00feda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5754
x-amzn-requestid: dfa32296-9f66-4237-b8fe-9353a1920f71
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPdZaGpZoAMFjcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f6f-0a6fed7e2f3a80cd7579de93;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:39 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 1CYVveZybLOpAwvniJLvUxJJOil9CA1b6hut46pxcB6p_iqvmQTwoA==
via: 1.1 2ecd59b4298afe9d7bb9266870458a74.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:21:09 GMT
age: 34406
etag: "d9c7b0dea148896017492aad6c02ca6fadf17ebb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff846d550-1085-41f0-ab5c-5cbdba5d3a00.jpeg | 34.120.237.76 | 200 OK | 5.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff846d550-1085-41f0-ab5c-5cbdba5d3a00.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash39d9370f63a9d19ea9c05fa1926ce1d0 f15bb6564adddb9a3bb9949321482e65714c047a cf9353ff328f1afced61c19b48b2add29f4a212bd97cb4d874d5e7747850b3e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff846d550-1085-41f0-ab5c-5cbdba5d3a00.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5094
x-amzn-requestid: 49ace90a-85a0-45ea-8c0d-6a498fb89042
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPd60Eo9oAMFtkw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63361045-6b8a1c42300d4d6024186bfd;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:38:13 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: RlSYyyYERUy_dGxSBuCqq7KOrtHEhq02w2Clbo5flJYC4NBmY-Pphg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:15:16 GMT
age: 34759
etag: "f15bb6564adddb9a3bb9949321482e65714c047a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe12af206-9f17-40de-9764-14d3cdcb4d2f.jpeg | 34.120.237.76 | 200 OK | 6.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe12af206-9f17-40de-9764-14d3cdcb4d2f.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5b8d0a19bc0a56bb40a975c5c71af05a 3248ca3a8b88efd5be8499898fce957d096cf211 da44d6dd845dc400b0b76f19c67e5a79d9359ce24fe5e4490477f195b23203b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe12af206-9f17-40de-9764-14d3cdcb4d2f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6722
x-amzn-requestid: 6aca2e04-02b4-4e42-8bba-9bbe2ace1ed0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPeLrGq1oAMFuAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633610b0-65b0664d0233107029ef0157;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:40:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AJBSzj2-oh3i6UOpOUtGTcsdTFfHlZhIQchgvcnIeF-4mnNKRly5HQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 21:47:14 GMT
etag: "3248ca3a8b88efd5be8499898fce957d096cf211"
content-type: image/jpeg
age: 36441
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ae1e7d3-41cb-4400-8cae-870baa006b86.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ae1e7d3-41cb-4400-8cae-870baa006b86.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5a137925cb6116c46ce21c6e27933c44 2973e908318c68489bba9b4242254769a4f3d1ba 737bf9c3d2906a937ed0b082c8830982163be90acf8dd01dacc7ec80c5c8bcd1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1ae1e7d3-41cb-4400-8cae-870baa006b86.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7777
x-amzn-requestid: d035ce80-1700-4e69-8b75-e0bf47ca9ddf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZDCWCFw4oAMFVDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63311759-0412900d669b5381058ec9a2;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 03:07:05 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qzrjS6zkJKNsHq2s5ooiWCPdM5nPY6isIJfpcGtUi4r4uvXkJBlS8w==
via: 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Fri, 30 Sep 2022 07:24:48 GMT
age: 1787
etag: "2973e908318c68489bba9b4242254769a4f3d1ba"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/omgf/zerif_font/lato-normal-300.woff2 | 91.231.140.77 | 200 OK | 25 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/omgf/zerif_font/lato-normal-300.woff2 IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeWeb Open Font Format (Version 2), TrueType, length 24876, version 1.0\012- data Hash846742dab48585c5166515294d9a2ca9 655fd06821848f4dd82d0948ddac88a742dfcb1e 9362a3546f2bd9917b804344d554f61bc5417f6a715ed64e3e594ce371efbaef
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/omgf/zerif_font/lato-normal-300.woff2 HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: font/woff2
content-length: 24876
last-modified: Fri, 02 Sep 2022 13:23:45 GMT
etag: "631203e1-612c"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc4b283708d1c81db7cbd091793f5a3e9 fdd71202d8ae5f7e8792a343f4205e8252e61092 022e0322628e84be858a5123b021fce899f95c6e4e2da408287c4493328be23e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5445
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:36 GMT
Last-Modified: Fri, 30 Sep 2022 06:23:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc4b283708d1c81db7cbd091793f5a3e9 fdd71202d8ae5f7e8792a343f4205e8252e61092 022e0322628e84be858a5123b021fce899f95c6e4e2da408287c4493328be23e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5445
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:36 GMT
Last-Modified: Fri, 30 Sep 2022 06:23:51 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc4b283708d1c81db7cbd091793f5a3e9 fdd71202d8ae5f7e8792a343f4205e8252e61092 022e0322628e84be858a5123b021fce899f95c6e4e2da408287c4493328be23e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2406
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:36 GMT
Last-Modified: Fri, 30 Sep 2022 07:14:30 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc4b283708d1c81db7cbd091793f5a3e9 fdd71202d8ae5f7e8792a343f4205e8252e61092 022e0322628e84be858a5123b021fce899f95c6e4e2da408287c4493328be23e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3100
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:36 GMT
Last-Modified: Fri, 30 Sep 2022 07:02:57 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashc4b283708d1c81db7cbd091793f5a3e9 fdd71202d8ae5f7e8792a343f4205e8252e61092 022e0322628e84be858a5123b021fce899f95c6e4e2da408287c4493328be23e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5710
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:36 GMT
Last-Modified: Fri, 30 Sep 2022 06:19:26 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
|
|
| hb.wpmucdn.com/webelektron.pl/c4319313-9a74-4941-a889-7e4bfc146b1e.js | 151.139.244.25 | 200 OK | 723 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/c4319313-9a74-4941-a889-7e4bfc146b1e.js IP151.139.244.25:0
File typeASCII text, with very long lines (1464), with CRLF, LF line terminators Hashc4cf994a785ed795f64d380f07483b2a c76042431ae960d261356f4af12b790567876b04 3f599f970e4857c13fb9d9f71d7e02c76b4a09b59ba82d820952fc0838220a31
GET /webelektron.pl/c4319313-9a74-4941-a889-7e4bfc146b1e.js HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: application/javascript
content-length: 723
last-modified: Fri, 30 Sep 2022 04:56:31 GMT
etag: W/"125858c56cd06cfa38958d07dbb64b38"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=1499
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/omgf/zerif_font/lato-normal-400.woff2 | 91.231.140.77 | 200 OK | 25 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/omgf/zerif_font/lato-normal-400.woff2 IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeWeb Open Font Format (Version 2), TrueType, length 25284, version 1.0\012- data Hash26f5a0992b68bb38801b08a348288591 4dc2e90e40d35482883aea5fa535cfa4e15fd392 386a206aade080bb0045005cfdbb660430ed46d652039eef6bc299d54d7c43ed
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/omgf/zerif_font/lato-normal-400.woff2 HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: font/woff2
content-length: 25284
last-modified: Fri, 02 Sep 2022 13:23:45 GMT
etag: "631203e1-62c4"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/omgf/zerif_font/lato-italic-400.woff2 | 91.231.140.77 | 200 OK | 26 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/omgf/zerif_font/lato-italic-400.woff2 IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeWeb Open Font Format (Version 2), TrueType, length 26328, version 1.0\012- data Hash19e8478516ae388feab5ff6f9d8bed31 a0cd323509a1bd6394c17825633483ab9bb9ecb5 984d8bd87a1c76937a6d31b6214c81cbc27a26d45a3e912b27a7b64c4ba8b72d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/omgf/zerif_font/lato-italic-400.woff2 HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: font/woff2
content-length: 26328
last-modified: Fri, 02 Sep 2022 13:23:45 GMT
etag: "631203e1-66d8"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/ff1356e3-c01b-409a-bd3f-59c8b20d9f44.js | 151.139.244.25 | 200 OK | 35 kB |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/ff1356e3-c01b-409a-bd3f-59c8b20d9f44.js IP151.139.244.25:0
File typeASCII text, with very long lines (65405), with CRLF, LF line terminators Hashc7be85ffbc230de9d7880e60d396712c 50221b01dc0dfea6be3f4129f307daa675d48d96 96131c5b96671cb9fc4ca79b088ad8d8bac6270712a67210a7767487e87d4782
GET /webelektron.pl/ff1356e3-c01b-409a-bd3f-59c8b20d9f44.js HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: application/javascript
content-length: 34562
last-modified: Fri, 30 Sep 2022 04:56:24 GMT
etag: W/"14c615522741ad86edb3c081114d8cd4"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=89521
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/5fdb7cad-0b3a-427e-9b5c-6304fbdd24dd.css | 151.139.244.25 | 200 OK | 496 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/5fdb7cad-0b3a-427e-9b5c-6304fbdd24dd.css IP151.139.244.25:0
File typeASCII text, with very long lines (1504), with CRLF line terminators Hash3bf53c500d1f075bf58afddaa489b220 d1c571d07a31cbee65b8d3452b3a0aca1defe0b2 387a32c9e714b5c74e7c5b6a3331d6d96948fbdb5b757d05418fd20daf06e45e
GET /webelektron.pl/5fdb7cad-0b3a-427e-9b5c-6304fbdd24dd.css HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
content-length: 496
last-modified: Fri, 30 Sep 2022 04:54:48 GMT
etag: W/"284e7983c8b4cca32abfb962b57069ae"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=1504
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/a5d49fe2-0784-4bc8-a6ca-1a9a8a77914f.js | 151.139.244.25 | 200 OK | 14 kB |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/a5d49fe2-0784-4bc8-a6ca-1a9a8a77914f.js IP151.139.244.25:0
File typeUnicode text, UTF-8 text, with very long lines (32889), with CRLF, LF line terminators Hash5eafefdc2a3dbf3479763e0205f2c486 4020388ef14b44e12dfbfe77b47ccdf870bcb5c4 c0284a7d831e1889cdd98afe8df3a3050e935bb8f80661fefea3837da4b98c2b
GET /webelektron.pl/a5d49fe2-0784-4bc8-a6ca-1a9a8a77914f.js HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: application/javascript
content-length: 13680
last-modified: Fri, 30 Sep 2022 04:57:36 GMT
etag: W/"611aeffabd3dbed1d9d89006599e418e"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=32929
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/omgf/zerif_font/lato-normal-700.woff2 | 91.231.140.77 | 200 OK | 25 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/omgf/zerif_font/lato-normal-700.woff2 IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeWeb Open Font Format (Version 2), TrueType, length 24780, version 1.0\012- data Hash9e7827aaaf284662fe90803f0c3390d8 54a677e2d0e39ac9c7063068f42cf1eaed464c02 21d84ae6011313f56bed19d8067c8ffa780e6b8452c43b560c11d53af4c4c211
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/omgf/zerif_font/lato-normal-700.woff2 HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: font/woff2
content-length: 24780
last-modified: Fri, 02 Sep 2022 13:23:45 GMT
etag: "631203e1-60cc"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/2022/06/ELEKTRON-Oferty-Pracy-2-scaled.jpg | 91.231.140.77 | 200 OK | 292 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/2022/06/ELEKTRON-Oferty-Pracy-2-scaled.jpg IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 48x48, segment length 16, progressive, precision 8, 2560x924, components 3\012- data Size292 kB (292340 bytes) Hash348a0831839619229505eaefdcfedd15 6277602e17b0b89d486e09c557cf4b0065938385 b151e57dc738c503d82b1c8b98342ae7f89252d7893fd923c30b891a8b6a4887
GET /wp-content/uploads/2022/06/ELEKTRON-Oferty-Pracy-2-scaled.jpg HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hb.wpmucdn.com/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: image/jpeg
content-length: 292340
last-modified: Fri, 02 Sep 2022 13:23:35 GMT
etag: "631203d7-475f4"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash6ac97060c75238244bfa94c6c6f63e40 9a640270fe62b82a8d971472f28a150e23f3a0c2 f7c0b8dc16c4a08e73772eadf8303a509768acf9d70f132c1c1db899534d4bab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| webelektron.pl/wp-content/uploads/2021/07/DSC0383-scaled.jpg | 91.231.140.77 | 200 OK | 248 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/2021/07/DSC0383-scaled.jpg IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1709x2560, components 3\012- data Size248 kB (248181 bytes) Hash58768b2cbc2c485972a70e40e866e183 c63a9cf30133ac96d7152d96c0d2aad676ae9e38 d5825d12b9df5b6d9555d2b0aa033c58dc47c09ccd1f957d1eb75dc6b28e23f9
GET /wp-content/uploads/2021/07/DSC0383-scaled.jpg HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://hb.wpmucdn.com/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: image/jpeg
content-length: 248181
last-modified: Fri, 02 Sep 2022 13:23:25 GMT
etag: "631203cd-3c975"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/omgf/google-fonts-1/roboto-normal-700.woff2 | 91.231.140.77 | 200 OK | 23 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/omgf/google-fonts-1/roboto-normal-700.woff2 IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeWeb Open Font Format (Version 2), TrueType, length 22580, version 1.0\012- data Hash1c44e440b54050bdb9c8f4cf048163bc 285209cc8e5df99937d360909021a7501269f6ac 59fb185692872a1d0060ebdb9d6f8664b499b8812e80dc59755ec2f68887450f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/omgf/google-fonts-1/roboto-normal-700.woff2 HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://webelektron.pl/wp-content/uploads/omgf/google-fonts-1/google-fonts-1.css?ver=1653907556
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: font/woff2
content-length: 22580
last-modified: Fri, 02 Sep 2022 13:23:40 GMT
etag: "631203dc-5834"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash9f97453b0baf920ffa5e182340e51f3d 00cfc244b1dca8341352b3f0ee608e2694314863 c8c54878c15caf16bf2a24956d572ff9e16026a5b6708dbf48945b606b4e893c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2634
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:36 GMT
Last-Modified: Fri, 30 Sep 2022 07:10:42 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash6ac97060c75238244bfa94c6c6f63e40 9a640270fe62b82a8d971472f28a150e23f3a0c2 f7c0b8dc16c4a08e73772eadf8303a509768acf9d70f132c1c1db899534d4bab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| webelektron.pl/wp-content/uploads/omgf/google-fonts-1/roboto-normal-400.woff2 | 91.231.140.77 | 200 OK | 23 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/omgf/google-fonts-1/roboto-normal-400.woff2 IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeWeb Open Font Format (Version 2), TrueType, length 22560, version 1.0\012- data Hash1dfb815c0e707ba03fb3486d94881ca4 26c19605a4ebf47cc1bbfa8223cc1d598a401f3c 8c445c283da9a171eb4841f32cb343627ef480ed8c80c6dca83ef8287687e62f
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/omgf/google-fonts-1/roboto-normal-400.woff2 HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://webelektron.pl/wp-content/uploads/omgf/google-fonts-1/google-fonts-1.css?ver=1653907556
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: font/woff2
content-length: 22560
last-modified: Fri, 02 Sep 2022 13:23:40 GMT
etag: "631203dc-5820"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/omgf/zerif_font/zerif_font.css?ver=1653907556 | 91.231.140.77 | 200 OK | 23 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/omgf/zerif_font/zerif_font.css?ver=1653907556 IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
Hash54073194617e2fc75c74e69a6aef0645 0d8685b77035b447cc20a1b8c0a29bcd4529535b 7c0d7c9f80996a1ec61b8b726006c9853409b87ca73c68d68246b3535db0a2b8
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/omgf/zerif_font/zerif_font.css?ver=1653907556 HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 02 Sep 2022 13:23:45 GMT
vary: Accept-Encoding
etag: W/"631203e1-dc0"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash9f97453b0baf920ffa5e182340e51f3d 00cfc244b1dca8341352b3f0ee608e2694314863 c8c54878c15caf16bf2a24956d572ff9e16026a5b6708dbf48945b606b4e893c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 560
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:36 GMT
Last-Modified: Fri, 30 Sep 2022 07:45:16 GMT
Server: ECS (amb/6B90)
X-Cache: HIT
Content-Length: 471
|
|
| 906418.smushcdn.com/2186327/wp-content/uploads/2021/09/fepr-pl-podk-ueefs-01-1536x99.jpg?lossy=1&strip=1&webp=1 | 151.139.243.29 | 200 OK | 11 kB |
URL HTTP/2906418.smushcdn.com/2186327/wp-content/uploads/2021/09/fepr-pl-podk-ueefs-01-1536x99.jpg?lossy=1&strip=1&webp=1 IP151.139.243.29:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1536x99, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashb342cf3034232d64b044c38b20dc4a3f 99d785c875c7cd27b5c82aba99806d279cf11af3 a9da7d173d425785d5d74956ea26e99c723b45bc7bccb9ee438672b0136de168
GET /2186327/wp-content/uploads/2021/09/fepr-pl-podk-ueefs-01-1536x99.jpg?lossy=1&strip=1&webp=1 HTTP/1.1
Host: 906418.smushcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:37 GMT
content-type: image/webp
content-length: 11378
last-modified: Mon, 05 Sep 2022 11:52:54 GMT
x-amz-expiration: expiry-date="Wed, 05 Oct 2022 11:52:54 GMT", rule-id="expire"
etag: "b342cf3034232d64b044c38b20dc4a3f"
smushed: origFmt=jpg, origSize=20231, smushRatio=43.76, skipped=0, originCache=HIT
expires: Mon, 25 Sep 2023 07:54:37 GMT
cache-control: max-age=31104000
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 906418.smushcdn.com/2186327/wp-content/uploads/2019/11/44-1-174x174-150x150.jpg?lossy=1&strip=1&webp=1 | 151.139.243.29 | 200 OK | 3.2 kB |
URL HTTP/2906418.smushcdn.com/2186327/wp-content/uploads/2019/11/44-1-174x174-150x150.jpg?lossy=1&strip=1&webp=1 IP151.139.243.29:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 150x150, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashe685c02b3cf1896f09112f7a1f14d5bf 9ea4ea1a9033986a8884883d6d384ab4abb7761b 082080db5fbb520502b0790e1cf4df1fa4f294ca3f6d2947fa98abe065f47a23
GET /2186327/wp-content/uploads/2019/11/44-1-174x174-150x150.jpg?lossy=1&strip=1&webp=1 HTTP/1.1
Host: 906418.smushcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:37 GMT
content-type: image/webp
content-length: 3224
last-modified: Thu, 08 Sep 2022 11:50:25 GMT
x-amz-expiration: expiry-date="Sat, 08 Oct 2022 11:50:25 GMT", rule-id="expire"
etag: "e685c02b3cf1896f09112f7a1f14d5bf"
smushed: origFmt=jpg, origSize=5361, smushRatio=39.86, skipped=0, originCache=HIT
expires: Mon, 25 Sep 2023 07:54:37 GMT
cache-control: max-age=31104000
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 906418.smushcdn.com/2186327/wp-content/uploads/2020/12/cropped-cropped-logo-dlugie-300x45-1.jpg?lossy=1&strip=1&webp=1 | 151.139.243.29 | 200 OK | 2.3 kB |
URL HTTP/2906418.smushcdn.com/2186327/wp-content/uploads/2020/12/cropped-cropped-logo-dlugie-300x45-1.jpg?lossy=1&strip=1&webp=1 IP151.139.243.29:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 300x45, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash16226d30828ea9d44f42626eb45a3609 5bd977f0b7a7a38c8a123ebce5d11cf1e6ec0426 14cc37ea2a84bb0880df774fc806f898c9fd7985358ae29c8b0b03734c61083d
GET /2186327/wp-content/uploads/2020/12/cropped-cropped-logo-dlugie-300x45-1.jpg?lossy=1&strip=1&webp=1 HTTP/1.1
Host: 906418.smushcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:37 GMT
content-type: image/webp
content-length: 2256
last-modified: Sat, 06 Aug 2022 23:14:41 GMT
x-amz-expiration: expiry-date="Mon, 05 Sep 2022 23:14:41 GMT", rule-id="expire"
etag: "16226d30828ea9d44f42626eb45a3609"
smushed: origFmt=jpg, origSize=4463, smushRatio=49.45, skipped=0, originCache=HIT
expires: Mon, 25 Sep 2023 07:54:37 GMT
cache-control: max-age=31104000
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 906418.smushcdn.com/2186327/wp-content/uploads/2021/09/fepr-pl-podk-ueefs-02-1536x99.jpg?lossy=1&strip=1&webp=1 | 151.139.243.29 | 200 OK | 12 kB |
URL HTTP/2906418.smushcdn.com/2186327/wp-content/uploads/2021/09/fepr-pl-podk-ueefs-02-1536x99.jpg?lossy=1&strip=1&webp=1 IP151.139.243.29:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1536x99, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash94c3cc804f2be56ad9df22cda70fa77d fd49ab537f60570edd0fa4fdf4cce90ed954b85d 6536ccfc539176c923da42261716f4eca932d443a77b3f7918cdac3aa32d69ff
GET /2186327/wp-content/uploads/2021/09/fepr-pl-podk-ueefs-02-1536x99.jpg?lossy=1&strip=1&webp=1 HTTP/1.1
Host: 906418.smushcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:37 GMT
content-type: image/webp
content-length: 11520
last-modified: Thu, 08 Sep 2022 11:50:25 GMT
x-amz-expiration: expiry-date="Sat, 08 Oct 2022 11:50:25 GMT", rule-id="expire"
etag: "94c3cc804f2be56ad9df22cda70fa77d"
smushed: origFmt=jpg, origSize=20540, smushRatio=43.91, skipped=0, originCache=HIT
expires: Mon, 25 Sep 2023 07:54:37 GMT
cache-control: max-age=31104000
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 906418.smushcdn.com/2186327/wp-content/uploads/2020/06/11-target-01-150x150.jpg?lossy=1&strip=1&webp=1 | 151.139.243.29 | 200 OK | 2.4 kB |
URL HTTP/2906418.smushcdn.com/2186327/wp-content/uploads/2020/06/11-target-01-150x150.jpg?lossy=1&strip=1&webp=1 IP151.139.243.29:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 150x150, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash57a41da564196d95d4a82da928292b64 c8cac25dd73afeab3c1fdcfd790e241272959ec8 248b82be423067efa77e29c74f64240466934c43e6b491d11673888857b00862
GET /2186327/wp-content/uploads/2020/06/11-target-01-150x150.jpg?lossy=1&strip=1&webp=1 HTTP/1.1
Host: 906418.smushcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:37 GMT
content-type: image/webp
content-length: 2368
last-modified: Thu, 08 Sep 2022 11:50:25 GMT
x-amz-expiration: expiry-date="Sat, 08 Oct 2022 11:50:25 GMT", rule-id="expire"
etag: "57a41da564196d95d4a82da928292b64"
smushed: origFmt=jpg, origSize=4429, smushRatio=46.53, skipped=0, originCache=HIT
expires: Mon, 25 Sep 2023 07:54:37 GMT
cache-control: max-age=31104000
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 906418.smushcdn.com/2186327/wp-content/uploads/2019/09/22-1-150x150.jpg?lossy=1&strip=1&webp=1 | 151.139.243.29 | 200 OK | 2.5 kB |
URL HTTP/2906418.smushcdn.com/2186327/wp-content/uploads/2019/09/22-1-150x150.jpg?lossy=1&strip=1&webp=1 IP151.139.243.29:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 150x150, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash4e7d1e2de0afed1aea45fff0086a0699 634729e75b172855e754db45d2055c691ae4077c 4ce1d539b10473b6068b6b422e47c39701bb2cd90fb176c834fc1462745fc60c
GET /2186327/wp-content/uploads/2019/09/22-1-150x150.jpg?lossy=1&strip=1&webp=1 HTTP/1.1
Host: 906418.smushcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:37 GMT
content-type: image/webp
content-length: 2548
last-modified: Mon, 05 Sep 2022 11:52:54 GMT
x-amz-expiration: expiry-date="Wed, 05 Oct 2022 11:52:54 GMT", rule-id="expire"
etag: "4e7d1e2de0afed1aea45fff0086a0699"
smushed: origFmt=jpg, origSize=4846, smushRatio=47.42, skipped=0, originCache=HIT
expires: Mon, 25 Sep 2023 07:54:37 GMT
cache-control: max-age=31104000
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/omgf/google-fonts-1/google-fonts-1.css?ver=1653907556 | 91.231.140.77 | 200 OK | 4.3 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/omgf/google-fonts-1/google-fonts-1.css?ver=1653907556 IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
Hash15149c88dbeab7154c67e67c4937a67c ccce40942a9a0a3727b7e7eafd072d7fb6048c92 f533be6fc83ec5cb4499d1e05650d622457e03e537801fff9e76563a01174e5b
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/omgf/google-fonts-1/google-fonts-1.css?ver=1653907556 HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 02 Sep 2022 13:23:39 GMT
vary: Accept-Encoding
etag: W/"631203db-303b"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/2019/09/cropped-miniaturka-192x192.jpg | 91.231.140.77 | 200 OK | 4.3 kB |
URL HTTP/2webelektron.pl/wp-content/uploads/2019/09/cropped-miniaturka-192x192.jpg IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 192x192, components 3\012- data Hash91e61dd00e2f0e6acc6b77abcf8724f4 e0b607b911818e715c5b99460ba041f6397efebd b0b6fde84c5edfb5996afbe240e7066fc5b0bd1286a0929d4abf647321c89ea5
GET /wp-content/uploads/2019/09/cropped-miniaturka-192x192.jpg HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:37 GMT
content-type: image/jpeg
content-length: 4318
last-modified: Fri, 02 Sep 2022 13:23:07 GMT
etag: "631203bb-10de"
expires: Sat, 30 Sep 2023 07:54:37 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/2019/09/cropped-miniaturka-32x32.jpg | 91.231.140.77 | 200 OK | 662 B |
URL HTTP/2webelektron.pl/wp-content/uploads/2019/09/cropped-miniaturka-32x32.jpg IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 32x32, components 3\012- data Hashcb0ae69c94ba213a32d5c0c8598f0a6b abb95e99d498d9073ddecdc844b4d2c6e3ca6d4d 92f71992f9435c607bca737e61d94dd7259fff59759b589f9f11753e7f748589
GET /wp-content/uploads/2019/09/cropped-miniaturka-32x32.jpg HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:37 GMT
content-type: image/jpeg
content-length: 662
last-modified: Fri, 02 Sep 2022 13:23:07 GMT
etag: "631203bb-296"
expires: Sat, 30 Sep 2023 07:54:37 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hashcae538dcce82598fbe43c0bf443e62dd cc68ac6be9c5e0087a0000e5735b83270ace30f5 954b9e9d9744e1319c51760780a35de2dec353afffac705c2cca6d836a5e056d
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 19826
date: Fri, 30 Sep 2022 06:41:09 GMT
expires: Fri, 30 Sep 2022 08:41:09 GMT
cache-control: public, max-age=7200
age: 4408
last-modified: Sun, 11 Sep 2022 13:50:09 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/8ed28aaa-3978-4ff3-a138-51a8a43de002.js | 151.139.244.25 | 200 OK | 21 kB |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/8ed28aaa-3978-4ff3-a138-51a8a43de002.js IP151.139.244.25:0
Hashf90340f303fb6d8c221c3ea699570171 070d5ebdebdb3e317192fd0fde476a8e63aad842 6167e334c9b40021da65400637e7fdf0289a904280e3c682f368e8366097bdc5
GET /webelektron.pl/8ed28aaa-3978-4ff3-a138-51a8a43de002.js HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: application/javascript
last-modified: Fri, 30 Sep 2022 05:15:34 GMT
etag: W/"7ae2610f2e6774d7afc09e0400f67ddf"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=29115
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 906418.smushcdn.com/2186327/wp-content/uploads/2021/07/DSC9740-600x300.jpg?lossy=1&strip=1&webp=1 | 151.139.243.29 | 200 OK | 10 kB |
URL HTTP/2906418.smushcdn.com/2186327/wp-content/uploads/2021/07/DSC9740-600x300.jpg?lossy=1&strip=1&webp=1 IP151.139.243.29:0
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 600x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hashf057f3184c42966aabf44bf407073c77 d6865416415955fa080ee528fbbd48dd0b665ab2 9462cb945f9bfc2da624b79e1d761708590ba6eb8ee5b9e66b6bcd52a0949332
GET /2186327/wp-content/uploads/2021/07/DSC9740-600x300.jpg?lossy=1&strip=1&webp=1 HTTP/1.1
Host: 906418.smushcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:37 GMT
content-type: image/webp
content-length: 10180
last-modified: Thu, 22 Sep 2022 15:28:06 GMT
x-amz-expiration: expiry-date="Sat, 22 Oct 2022 15:28:06 GMT", rule-id="expire"
etag: "f057f3184c42966aabf44bf407073c77"
smushed: origFmt=jpg, origSize=19392, smushRatio=47.5, skipped=0, originCache=HIT
expires: Mon, 25 Sep 2023 07:54:37 GMT
cache-control: max-age=31104000
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hash6e45ed0e014d302b7e4d21520228f1ef 86e935f08f4217126f75d13a516ac049f23637a8 22366c353b6dbdd94f0efdf1163318b4e12476c8d7360c70e56b58650004a84c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashf4cac07a6b43c2c45dbdd3dcbf8856e4 985130ebc2d64abc30a0673061e6f73e5a4f02a4 8945a690f41c23b6411950f9bbdb51becf8c48e363a715af38984d45085f9904
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-125523103-2&cid=684005970.1664523345&jid=635879590&gjid=1863300535&_gid=930401521.1664523346&_u=QACAAEAAAAAAAC~&z=305217111 | 64.233.165.155 | 200 OK | 1 B |
URL HTTP/2stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-125523103-2&cid=684005970.1664523345&jid=635879590&gjid=1863300535&_gid=930401521.1664523346&_u=QACAAEAAAAAAAC~&z=305217111 IP64.233.165.155:0
File typevery short file (no magic) Hashc4ca4238a0b923820dcc509a6f75849b 356a192b7913b04c54574d18c28d46e6395428ab 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j97&tid=UA-125523103-2&cid=684005970.1664523345&jid=635879590&gjid=1863300535&_gid=930401521.1664523346&_u=QACAAEAAAAAAAC~&z=305217111 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://webelektron.pl
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://webelektron.pl
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 30 Sep 2022 07:54:37 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 472 B |
IP142.250.74.3:0
Hashf4cac07a6b43c2c45dbdd3dcbf8856e4 985130ebc2d64abc30a0673061e6f73e5a4f02a4 8945a690f41c23b6411950f9bbdb51becf8c48e363a715af38984d45085f9904
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.3 | 200 OK | 471 B |
IP142.250.74.3:0
Hash9614f0953e42ee2929d2286318d5bf83 50b65951ebd7ca71a864c3dabafecce4cf2bc390 c7da19596f28cfe57d8db43d21297cc201d5a5f74ec894f3919ba0ee59c1242c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 30 Sep 2022 07:54:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp | 34.120.237.76 | 200 OK | 6.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hasha7660f52ff0ccc2805e4186bfaeb86f3 64012d0a87c77d8409fa1be7d8d29124a81e3206 c4c2c65c2f830c5820dd019ada07607e31d338b824e2d66f7b4449c1026e123b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4b307b2d-4d65-4a44-bdc9-02e2eb3040fe.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6058
x-amzn-requestid: 5895a9dc-4ec5-41cb-b0fa-b3f47677affe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZPda6H8toAMFz7g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63360f78-0941b5457484dc0c534333e2;Sampled=0
x-amzn-remapped-date: Thu, 29 Sep 2022 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1Raa8DphZfTmcxIv1z70MMHpeboGmlsoY7k24hpc4GvYqAv4x2NGZQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 29 Sep 2022 22:05:17 GMT
age: 35365
etag: "64012d0a87c77d8409fa1be7d8d29124a81e3206"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/2670729b-ece6-441e-bebe-8c8293e4e180.css | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/2670729b-ece6-441e-bebe-8c8293e4e180.css IP151.139.244.25:0
GET /webelektron.pl/2670729b-ece6-441e-bebe-8c8293e4e180.css HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 04:54:42 GMT
etag: W/"9800893b52d47941dd52d5d1d4d1ecd2"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=90680
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js | 91.231.140.77 | 200 OK | 0 B |
URL HTTP/2webelektron.pl/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: application/javascript
last-modified: Tue, 20 Sep 2022 16:40:08 GMT
vary: Accept-Encoding
etag: W/"6329ece8-135d"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/6e0d849e-7964-464b-9e90-fbe8528e41d8.js | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/6e0d849e-7964-464b-9e90-fbe8528e41d8.js IP151.139.244.25:0
GET /webelektron.pl/6e0d849e-7964-464b-9e90-fbe8528e41d8.js HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: application/javascript
last-modified: Fri, 30 Sep 2022 04:57:37 GMT
etag: W/"f9ee8cd5439c98ede4f6da044ff3b66b"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=139153
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/c9c1841d-cc9f-44fe-9f0c-a917b2d89d21.css | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/c9c1841d-cc9f-44fe-9f0c-a917b2d89d21.css IP151.139.244.25:0
GET /webelektron.pl/c9c1841d-cc9f-44fe-9f0c-a917b2d89d21.css HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 04:54:40 GMT
etag: W/"fb77229f3042eeafb5158fcd06b69520"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=12.2%, origSize=68546
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/ef570e12-0f97-4ddc-a52f-9e891463d96e.css | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/ef570e12-0f97-4ddc-a52f-9e891463d96e.css IP151.139.244.25:0
GET /webelektron.pl/ef570e12-0f97-4ddc-a52f-9e891463d96e.css HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 04:56:22 GMT
etag: W/"1acda1ff3c856122cc5126dfc3b7fb5b"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=2.2%, origSize=26754
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/bfed6dfc-b6c6-421e-85b3-9f895a487c2b.js | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/bfed6dfc-b6c6-421e-85b3-9f895a487c2b.js IP151.139.244.25:0
GET /webelektron.pl/bfed6dfc-b6c6-421e-85b3-9f895a487c2b.js HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: application/javascript
last-modified: Fri, 30 Sep 2022 04:56:32 GMT
etag: W/"22a3dba7eb313fdcde11807d5e2684f6"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=48.5%, origSize=30529
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/fff69a40-4173-4bb9-b10a-84be3d417aa9.css | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/fff69a40-4173-4bb9-b10a-84be3d417aa9.css IP151.139.244.25:0
GET /webelektron.pl/fff69a40-4173-4bb9-b10a-84be3d417aa9.css HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 05:04:19 GMT
etag: W/"4fceadf524dfee6d8533bd2567a3f65e"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=5334
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/ | 91.231.140.77 | 200 OK | 0 B |
IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET / HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://webelektron.pl/wp-json/>; rel="https://api.w.org/", <https://webelektron.pl/wp-json/wp/v2/pages/380>; rel="alternate"; type="application/json", <https://webelektron.pl/>; rel=shortlink
x-cache-status: BYPASS
x-powered-by: PHP/7.4.30, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/042965f8-9f7d-4d68-91bf-162823d5de6f.css | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/042965f8-9f7d-4d68-91bf-162823d5de6f.css IP151.139.244.25:0
GET /webelektron.pl/042965f8-9f7d-4d68-91bf-162823d5de6f.css HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 04:56:28 GMT
etag: W/"af13fb8fd09a70df7c087404cfe5c77d"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=29393
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/b771fabc-3daa-47df-aa86-ed0035c26b22.css | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/b771fabc-3daa-47df-aa86-ed0035c26b22.css IP151.139.244.25:0
GET /webelektron.pl/b771fabc-3daa-47df-aa86-ed0035c26b22.css HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 04:54:47 GMT
etag: W/"93967672123eb5d03198233eef46a523"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=13805
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-includes/js/jquery/ui/core.min.js | 91.231.140.77 | 200 OK | 0 B |
URL HTTP/2webelektron.pl/wp-includes/js/jquery/ui/core.min.js IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-includes/js/jquery/ui/core.min.js HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: application/javascript
last-modified: Fri, 02 Sep 2022 13:24:08 GMT
vary: Accept-Encoding
etag: W/"631203f8-50eb"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| webelektron.pl/wp-content/uploads/omgf/zerif_font_all/zerif_font_all.css?ver=1653907556 | 91.231.140.77 | 200 OK | 0 B |
URL HTTP/2webelektron.pl/wp-content/uploads/omgf/zerif_font_all/zerif_font_all.css?ver=1653907556 IP91.231.140.77:0 ASN#61154 IntegraDesign, Mariusz Barczyk
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /wp-content/uploads/omgf/zerif_font_all/zerif_font_all.css?ver=1653907556 HTTP/1.1
Host: webelektron.pl
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Cookie: _gcl_au=1.1.1108875245.1664523345; _ga_55SQ9LKWVX=GS1.1.1664523345.1.0.1664523350.55.0.0; _ga=GA1.2.684005970.1664523345; _gid=GA1.2.930401521.1664523346
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 02 Sep 2022 13:23:45 GMT
vary: Accept-Encoding
etag: W/"631203e1-178b"
expires: Sat, 30 Sep 2023 07:54:36 GMT
cache-control: max-age=31536000
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/6bfe3623-01a1-4353-9312-74b896997596.css | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/6bfe3623-01a1-4353-9312-74b896997596.css IP151.139.244.25:0
GET /webelektron.pl/6bfe3623-01a1-4353-9312-74b896997596.css HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 04:54:49 GMT
etag: W/"8ceddba0aef77e1d2e9087ca05cea843"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=9475
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| hb.wpmucdn.com/webelektron.pl/4e4f5eb4-e344-40e0-a11c-cabe1096e6bd.css | 151.139.244.25 | 200 OK | 0 B |
URL HTTP/2hb.wpmucdn.com/webelektron.pl/4e4f5eb4-e344-40e0-a11c-cabe1096e6bd.css IP151.139.244.25:0
GET /webelektron.pl/4e4f5eb4-e344-40e0-a11c-cabe1096e6bd.css HTTP/1.1
Host: hb.wpmucdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://webelektron.pl/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 30 Sep 2022 07:54:36 GMT
content-type: text/css
last-modified: Fri, 30 Sep 2022 04:56:26 GMT
etag: W/"975dbd327785b6b665af759b1de0e690"
cache-control: max-age=31104000
expires: Mon, 25 Sep 2023 07:54:36 GMT
hb-minify: minify=0.0%, origSize=59112
content-encoding: gzip
vary: Accept-Encoding
x-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
0.0.0.0