| GET androidlnk.cc/sumozucr/index_files/config.js |  104.21.58.135 | 200 OK | 32 kB |
URL GET androidlnk.cc/sumozucr/index_files/config.js IP104.21.58.135:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subjectandroidlnk.cc Fingerprint0F:02:EB:71:E8:42:38:03:80:CD:32:13:CF:D4:09:AC:EE:E2:81:52 ValidityFri, 23 May 2025 05:40:19 GMT - Thu, 21 Aug 2025 06:38:39 GMT
File typeJavaScript source, ASCII text, with very long lines (31847), with no line terminators Hash3c40e81a3e59ffb977430ed30d2cda82 c3653b24f44de3c50ff63c59226fd6e56fe02216 4259163baf684b65ae4d92dac92c4e3163ca0d14978e7aab0eaaa314cf6d640c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sumozucr/index_files/config.js HTTP/1.1
Host: androidlnk.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Jun 2025 14:26:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Xd6xi2qI7zZMzY1NW4lNaB16zWxdI%2B2M17QaUhllElY%2FW8X0Ukxj7T2S9tMweognq9wXLYBvLMMeq32b8s74lSYkq3%2FK7P7R2TCat5FWerpItVedqkgXx97xIppo9B44"}],"group":"cf-nel","max_age":604800}
last-modified: Tue, 17 Jun 2025 10:06:57 GMT
etag: W/"68513e41-7c67"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
cf-ray: 951338ee9af6b4eb-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3382&min_rtt=886&rtt_var=1681&sent=54&recv=48&lost=0&retrans=0&sent_bytes=17621&recv_bytes=4116&delivery_rate=3002100&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=a021c607cc10851c&ts=3310&inflight_dur=36&x=80"
|
|
| GET ozujsko.com@androidlnk.cc/favicon.ico | 104.21.58.135 | 404 Not Found | 146 B |
URL GET ozujsko.com@androidlnk.cc/favicon.ico IP104.21.58.135:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/404.html CertificateIssuerGoogle Trust Services Subjectandroidlnk.cc Fingerprint0F:02:EB:71:E8:42:38:03:80:CD:32:13:CF:D4:09:AC:EE:E2:81:52 ValidityFri, 23 May 2025 05:40:19 GMT - Thu, 21 Aug 2025 06:38:39 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: androidlnk.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://androidlnk.cc/NEeSjJVs/404.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 17 Jun 2025 14:26:40 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xNIgrQbuNq4q%2B3yduXKUmOE%2FPUgMRKVHlFtOGNmHwaoErqO3v8ecYRGIcsZu0Nk0mAJQ8s70MN1l21EGlqlHqC3gr3NQNfc4uOxJ2WfIQW5LP6K7AJd38PfxSJWE%2B8x2"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 9513392d7d9eb4eb-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3080&min_rtt=886&rtt_var=1415&sent=64&recv=52&lost=0&retrans=0&sent_bytes=26195&recv_bytes=4808&delivery_rate=4094786&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=a021c607cc10851c&ts=13354&inflight_dur=60&x=80"
|
|
| GET ozujsko.com@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html | 104.21.58.135 | 200 OK | 79 kB |
URL User Request GET ozujsko.com@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html IP104.21.58.135:443
CertificateIssuerGoogle Trust Services Subjectandroidlnk.cc Fingerprint0F:02:EB:71:E8:42:38:03:80:CD:32:13:CF:D4:09:AC:EE:E2:81:52 ValidityFri, 23 May 2025 05:40:19 GMT - Thu, 21 Aug 2025 06:38:39 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (35239) Hashe6d0314d2ceb392ea397495d521af572 b5da8e073c34afc6196874ec31961277372b7679 b978f54dd123da54f82274c9e9221a9a09cddfe83757967495d0201e8f1f237e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html HTTP/1.1
Host: androidlnk.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Jun 2025 14:26:27 GMT
content-type: text/html
server: cloudflare
last-modified: Tue, 17 Jun 2025 14:14:24 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GXPMx5Dc9O2zCuK5iGLou92Lk07xKwQI78aSQFAIhOWyvG45WtdRDYijU0jRxYclJseak487DSPWkNjhhhqYE6twebZ5tsAiwEJs"}]}
vary: accept-encoding
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 951338d98ee7568e-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET ozujsko.com@androidlnk.cc/NEeSjJVs/global.js | 104.21.58.135 | 200 OK | 30 kB |
URL GET ozujsko.com@androidlnk.cc/NEeSjJVs/global.js IP104.21.58.135:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subjectandroidlnk.cc Fingerprint0F:02:EB:71:E8:42:38:03:80:CD:32:13:CF:D4:09:AC:EE:E2:81:52 ValidityFri, 23 May 2025 05:40:19 GMT - Thu, 21 Aug 2025 06:38:39 GMT
File typeJavaScript source, ASCII text, with very long lines (30287), with no line terminators Hash09dd415cc1e06054390bb2089a019b89 5d18e827988ea4729933bd1b32e9c0890d30218a bb3db298ffa7299b7646c34da61d45d290430556e336b85122218db5f42eae4b
| Analyzer | Verdict | Alert |
|---|
| Public Nextron YARA rules | malware | Unique code from Jetriz, Swid & Jeniva of the Tetris framework | | Quad9 DNS | malicious | Sinkholed |
GET /NEeSjJVs/global.js HTTP/1.1
Host: androidlnk.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Jun 2025 14:26:30 GMT
content-type: application/javascript
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vkkbKjiYSvFodBaZGAhoud6dA%2BWasEumcKubcaexIy13kvdeoAsJkR9jfZvODWQhhL6lCvoquIHD9KOI0zJXsSJ27wCt9QNDWHPr7D5uKCJnXjdHv%2BnAr2RZJsItsyFv"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 16 Jun 2025 19:20:10 GMT
etag: W/"68506e6a-764f"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
cf-ray: 951338ec6aebb4eb-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3726&min_rtt=886&rtt_var=1777&sent=41&recv=44&lost=0&retrans=0&sent_bytes=6645&recv_bytes=3506&delivery_rate=611894&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=a021c607cc10851c&ts=2966&inflight_dur=30&x=80"
|
|
| GET ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js |  216.58.211.10 | 200 OK | 90 kB |
URL GET ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js IP216.58.211.10:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subjectupload.video.google.com FingerprintFF:78:1F:2C:E7:6A:27:90:8B:25:07:97:DD:25:4A:FA:6F:1F:0F:31 ValidityMon, 19 May 2025 08:42:52 GMT - Mon, 11 Aug 2025 08:42:51 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash8fb8fee4fcc3cc86ff6c724154c49c42 b82d238d4e31fdf618bae8ac11a6c812c03dd0d4 ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e
GET /ajax/libs/jquery/3.6.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 31017
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 17 Jun 2025 02:54:23 GMT
expires: Wed, 17 Jun 2026 02:54:23 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 41527
last-modified: Wed, 10 Mar 2021 14:28:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css | 104.17.24.14 | 200 OK | 37 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css IP104.17.24.14:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (372) Hashc495654869785bc3df60216616814ad1 0140952c64e3f2b74ef64e050f2fe86eab6624c8 36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Jun 2025 14:26:30 GMT
content-type: text/css; charset=utf-8
content-length: 5884
cf-ray: 951338ecebfe56b9-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-9226"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 637831
expires: Sun, 07 Jun 2026 14:26:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CUGNwjoj8%2Bd%2FPtyiPr82Y%2Fovco5ptT9aoV7%2BiX6fvpZ7d86J87%2BvyxWOD4HRWm4Io5O%2FNG5iNplIYDENpwWECfIEYvpVEUoU8IqVGhHvm0ceKiGyRrFPPVsa2bQ4HMpDuMZorxmB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET androidlnk.cc/sumozucr/index_files/themecustom.css | 104.21.58.135 | 200 OK | 16 kB |
URL GET androidlnk.cc/sumozucr/index_files/themecustom.css IP104.21.58.135:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subjectandroidlnk.cc Fingerprint0F:02:EB:71:E8:42:38:03:80:CD:32:13:CF:D4:09:AC:EE:E2:81:52 ValidityFri, 23 May 2025 05:40:19 GMT - Thu, 21 Aug 2025 06:38:39 GMT
Hash2967e526346d5fbd86076432e96c7f53 8ad2b508942bcf43fa9f5cc9ba55d01880a28a23 6984940488726e4293ea70d5d272e7a94fdd5f8cc37072ab1a853ae63c461c37
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /sumozucr/index_files/themecustom.css HTTP/1.1
Host: androidlnk.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 17 Jun 2025 14:26:30 GMT
content-type: text/css
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DXaamw3bv0imw94uWXm9d2vqkRjdfXWI%2FwQYhA0KpQJqyzTQaJrxXwEFfNPnD3EJvAar7hspFltOleBNgC%2BxzpSTyfApyd8j8ppSL0LzvU3B0Eob%2FUsfWbnvzraaCEt9"}],"group":"cf-nel","max_age":604800}
last-modified: Mon, 16 Jun 2025 15:48:03 GMT
etag: W/"68503cb3-3f0a"
content-encoding: gzip
cache-control: max-age=14400
cf-cache-status: MISS
vary: accept-encoding
cf-ray: 951338ee9af5b4eb-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3711&min_rtt=886&rtt_var=1364&sent=50&recv=47&lost=0&retrans=0&sent_bytes=13376&recv_bytes=4073&delivery_rate=1650232&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=a021c607cc10851c&ts=3295&inflight_dur=34&x=80"
|
|
| GET ozujsko.com@androidlnk.cc/NEeSjJVs/404.html | 104.21.58.135 | 404 Not Found | 146 B |
URL User Request GET ozujsko.com@androidlnk.cc/NEeSjJVs/404.html IP104.21.58.135:443
CertificateIssuerGoogle Trust Services Subjectandroidlnk.cc Fingerprint0F:02:EB:71:E8:42:38:03:80:CD:32:13:CF:D4:09:AC:EE:E2:81:52 ValidityFri, 23 May 2025 05:40:19 GMT - Thu, 21 Aug 2025 06:38:39 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash8eec510e57f5f732fd2cce73df7b73ef 3c0af39ecb3753c5fee3b53d063c7286019eac3b 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /NEeSjJVs/404.html HTTP/1.1
Host: androidlnk.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Tue, 17 Jun 2025 14:26:31 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4K7LrvEPm0e4L8K18IVG%2BCfiJxA50sk1Qx17RZn%2BsrnbnzszeKzqcYraRk1OBqH0KppFite18itfuzd9MOi44aIENxW2teYfIKk%2Bdh0AHAGSQ4ljJYrhA0H5oy1KLB1R"}],"group":"cf-nel","max_age":604800}
cache-control: max-age=14400
cf-cache-status: MISS
content-encoding: br
cf-ray: 951338ef7af8b4eb-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3114&min_rtt=886&rtt_var=1796&sent=62&recv=50&lost=0&retrans=0&sent_bytes=25442&recv_bytes=4474&delivery_rate=4094786&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=a021c607cc10851c&ts=3442&inflight_dur=38&x=80"
|
|
| GET cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/js/bootstrap.min.js | 104.17.24.14 | 200 OK | 64 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/js/bootstrap.min.js IP104.17.24.14:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeJavaScript source, ASCII text, with very long lines (63188) Hashf0c2bcf5ef0c4476508d79ec9cdcce07 3beed68ed7d753c6bf4f61c26386ddd7929ba030 edd03b96ae4ff7886406c59d7dfeeaa1b624a7da297bf2f92d0cb6b7f9633cba
GET /ajax/libs/bootstrap/4.6.0/js/bootstrap.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Jun 2025 14:26:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 13132
cf-ray: 951338ecbbd256b9-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60f698d0-334c"
last-modified: Tue, 20 Jul 2021 09:35:12 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2850610
expires: Sun, 07 Jun 2026 14:26:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pYYssxV3C0jW%2BxOKrR754p8By6f0zAOJgRDAnqAxH2zLyFZ%2BchL%2Bha5Aj%2FHqZj7AfKokIoC0rP%2F6oP6IrZXGINLix%2BtDx8JE6YKXmhQi1TDVXUvm5Rv3E175aNSUeV71cljsBrj3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/css/bootstrap.min.css | 104.17.24.14 | 200 OK | 161 kB |
URL GET cdnjs.cloudflare.com/ajax/libs/bootstrap/4.6.0/css/bootstrap.min.css IP104.17.24.14:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subjectcdnjs.cloudflare.com Fingerprint4B:06:E9:E2:47:47:F5:3C:33:58:F8:2A:95:70:22:5E:23:19:03:77 ValidityThu, 22 May 2025 14:38:44 GMT - Wed, 20 Aug 2025 15:38:38 GMT
File typeASCII text, with very long lines (65326) Size161 kB (161409 bytes) Hashd432e4222814b62dd30c9513dcc29440 2cac4afc120983921411296bd4e8fd8a94ba237e 4ffcc598ee6cff4692c1cea272cd8a2f195f6dec32473e94370d6cdcfa5fe601
GET /ajax/libs/bootstrap/4.6.0/css/bootstrap.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Jun 2025 14:26:30 GMT
content-type: text/css; charset=utf-8
content-length: 17764
cf-ray: 951338ecdbfb56b9-OSL
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "60f698d0-4564"
last-modified: Tue, 20 Jul 2021 09:35:12 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 328014
expires: Sun, 07 Jun 2026 14:26:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rrm%2B%2FV7NcCCZaRjHOX5aQrc6xcSg0%2By79%2FE6C9K53f7HnB%2F1hVWYge9wrUhcFZqdGSGzBApVjB6cPI0zZP%2BGco%2F2nOsyW94RFpeTchN%2FnqzTTzj%2FMq6cJSUIug7QdMU0FDMmk7Bt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET ozujsko.com@androidlnk.cc/NEeSjJVs/index_files/themecustom.css | 104.21.58.135 | 302 Found | 16 kB |
URL GET ozujsko.com@androidlnk.cc/NEeSjJVs/index_files/themecustom.css IP104.21.58.135:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subjectandroidlnk.cc Fingerprint0F:02:EB:71:E8:42:38:03:80:CD:32:13:CF:D4:09:AC:EE:E2:81:52 ValidityFri, 23 May 2025 05:40:19 GMT - Thu, 21 Aug 2025 06:38:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /NEeSjJVs/index_files/themecustom.css HTTP/1.1
Host: androidlnk.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Tue, 17 Jun 2025 14:26:30 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vqhUEco4fpopfjHk%2FfPA6D9LqTBhYZ59PWo%2F2aWQzyT%2B21iW8FU75Rusuitcaqbp8Y57TcOU%2FsoVhRCeH7zntgDjrcGP%2Ffn%2BteUGi%2FnlDKb8fyLW8FS6XQiWdOFsEpF1"}],"group":"cf-nel","max_age":604800}
location: https://androidlnk.cc/sumozucr/index_files/themecustom.css
cf-cache-status: BYPASS
cf-ray: 951338ec8aecb4eb-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3726&min_rtt=886&rtt_var=1777&sent=38&recv=44&lost=0&retrans=0&sent_bytes=5121&recv_bytes=3506&delivery_rate=611894&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=a021c607cc10851c&ts=2965&inflight_dur=29&x=80"
|
|
| GET cdn.onesignal.com/sdks/OneSignalSDK.js | 104.17.111.223 | 200 OK | 9.2 kB |
URL GET cdn.onesignal.com/sdks/OneSignalSDK.js IP104.17.111.223:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subject*.onesignal.com FingerprintF3:67:04:59:01:79:B7:C1:A6:E1:54:A2:B6:12:7F:14:70:24:20:2C ValiditySat, 26 Apr 2025 12:06:17 GMT - Fri, 25 Jul 2025 13:06:16 GMT
File typeJavaScript source, ASCII text, with very long lines (9163) Hash09282956186c8515ef0d208902803581 ea83b81c9955b3e983a7bef75714a9cefa904151 ec8b1b07980996f574075e1b7e895d5d47794b9dcf345a68d60fbb17034f7bef
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 17 Jun 2025 14:26:30 GMT
content-type: application/javascript
etag: W/"09282956186c8515ef0d208902803581"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2672
expires: Fri, 20 Jun 2025 14:26:30 GMT
cache-control: public, max-age=259200
set-cookie: __cf_bm=nQKm7ubZWzGqHBb7m8LGTacx0FmxNCkTh9TfjOL0l.Y-1750170390-1.0.1.1-PGSLbT7QUuCr6FdJtb3rb8fv4zouRsL__Ba95jRmxC_8vNpLhjFmh7tQ4BwSzIfaLBFfvzvDOPLDcBeLDiE0n8BXkh44yIRIqCkWsVlftxE; path=/; expires=Tue, 17-Jun-25 14:56:30 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 951338ecec5eb527-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| GET ozujsko.com@androidlnk.cc/NEeSjJVs/index_files/config.js | 104.21.58.135 | 302 Found | 32 kB |
URL GET ozujsko.com@androidlnk.cc/NEeSjJVs/index_files/config.js IP104.21.58.135:443
Requested byhttps://ozujsko%2Ecom@androidlnk.cc/NEeSjJVs/?hladnjak-pivo-ozujsko-ljeto.html CertificateIssuerGoogle Trust Services Subjectandroidlnk.cc Fingerprint0F:02:EB:71:E8:42:38:03:80:CD:32:13:CF:D4:09:AC:EE:E2:81:52 ValidityFri, 23 May 2025 05:40:19 GMT - Thu, 21 Aug 2025 06:38:39 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /NEeSjJVs/index_files/config.js HTTP/1.1
Host: androidlnk.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Tue, 17 Jun 2025 14:26:30 GMT
content-type: text/html
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DbcR117X309Hu36S2nQC8IbVq5nlFXF18DMHDRNR9p5HBctWfKtUiPX2sd2mlM8vGUb2iAY3UrLCdDaxHJakv8JlHdMkWcFjO15GPWDd3rQGGKjp2%2Bx1GJI6GI1leL85"}],"group":"cf-nel","max_age":604800}
location: https://androidlnk.cc/sumozucr/index_files/config.js
cf-cache-status: BYPASS
cf-ray: 951338ec8aedb4eb-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3726&min_rtt=886&rtt_var=1777&sent=40&recv=44&lost=0&retrans=0&sent_bytes=5992&recv_bytes=3506&delivery_rate=611894&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=12000&unsent_bytes=0&cid=a021c607cc10851c&ts=2965&inflight_dur=29&x=80"
|
|
0.0.0.0