firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1aac651ec250c598683dd17ca2002c07
11595ac82e017f95190c2a36dc77323a3fedcbfc
93fa640d042452ae8455d026e30e3b4594c13d4be65f3552a4b5edae027c02f9
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Backoff, Content-Length, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 12 Oct 2022 13:02:42 GMT
Expires: Wed, 12 Oct 2022 13:31:47 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 3lkJDQzsVPt1gcrChXm4hAk9ESdq9tVGcEweHWwFQW3lwJCYHAvGcg==
Age: 3156
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e0602913f3d432ffbfaa654440972ee1
e5aaf31749e65875fd840091f9a3bba641de413d
5495ad212166703dcd1d17d7aa6ff4d1c40e73dfad703d24f00f60f35bc7d56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5495AD212166703DCD1D17D7AA6FF4D1C40E73DFAD703D24F00F60F35BC7D56C"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10614
Expires: Wed, 12 Oct 2022 16:52:13 GMT
Date: Wed, 12 Oct 2022 13:55:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ceb45134349ef6afcb5b4bb730678041
15dc3ecb18e30e77cd7c694dd237bff9be583e7a
a39e0827fa31257562bb681e312ec2944a862e9ad4e568a803f6e09e994a6018
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A39E0827FA31257562BB681E312EC2944A862E9AD4E568A803F6E09E994A6018"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11841
Expires: Wed, 12 Oct 2022 17:12:40 GMT
Date: Wed, 12 Oct 2022 13:55:19 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: eNP/cCoW+k/aHkOnrnAUz5xR93n/JcTCFHHYlULz+XtT+d+08XgKdqQfLJ0Q7ccEDafDh80kuhA=
x-amz-request-id: Y5JM20SGBFR715P2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 12 Oct 2022 13:01:17 GMT
age: 3242
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 12 Oct 2022 13:55:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Wed, 12 Oct 2022 13:29:41 GMT
Cache-Control: max-age=3600
Expires: Wed, 12 Oct 2022 13:44:53 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zDeiHh4_lZvM1VL14u-JLj-WAAECngeXtnsLFBGihE-s0mSdfFcD6g==
Age: 1538
ocsp.digicert.com/
200 OK 471 B IP
Hash 63604bda613d148120c491e2f095255f
0fc63ecaff8a0f36dc2a82f3fb187725d0064d69
8478a84e8513fb9afb0d1c369b668bd37ca98943a624ac3a3a69165536bd1748
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5747
Cache-Control: max-age=157636
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:20 GMT
Etag: "63467599-1d7"
Expires: Fri, 14 Oct 2022 09:42:36 GMT
Last-Modified: Wed, 12 Oct 2022 08:06:49 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
dzns.rs/
301 Moved Permanently 0 B IP
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 12 Oct 2022 13:55:19 GMT
Server: Apache
Vary: Accept-Encoding,Cookie
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: https://dzns.rs/
Content-Length: 0
Keep-Alive: timeout=5, max=100
Content-Type: text/html; charset=UTF-8
ocsp.comodoca.com/
200 OK 472 B IP
Hash 293132e2d2660f2b80348796ddb50650
070868a0d9717de54d40f3b598aee3f33e5773fa
9bceb9bd9ae0a9024463c2d1f8ce919b60c45209a4eb09c25512766ab74d6e13
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 12 Oct 2022 13:55:20 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 11 Oct 2022 12:59:13 GMT
Expires: Tue, 18 Oct 2022 12:59:12 GMT
Etag: "070868a0d9717de54d40f3b598aee3f33e5773fa"
Cache-Control: max-age=598680,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75905524187cb4f7-OSL
dzns.rs/
200 OK 11 kB IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047)
Hash 6c0ba1eac3a9a4f5329097fe1a8f61e4
4e2d94216f6e35c4d6086100e5ad2bfb5cc21646
9514956d5fd0416274842cc5af2d746bb54dbbf201515096349c2aabc4a35de1
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
vary: Accept-Encoding,Cookie
cache-control: max-age=3, must-revalidate
content-encoding: gzip
content-length: 10906
content-type: text/html; charset=UTF-8
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: zBESIscU8Uyozg7gPSycug==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: GF19sSsosUA6Mlq1FcieraQaTBE=
dzns.rs/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
200 OK 2.7 kB URL HTTP/2 dzns.rs/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3
IP
ASN #24940 Hetzner Online GmbH
Hash e6fae855021a88a0067fcc58121c594f
6299ac3987b5e81725781799dad361d19ac3b99d
e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.3 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 02 Sep 2022 05:28:50 GMT
accept-ranges: bytes
content-length: 2731
content-type: text/css
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/plugins/wp-polls/polls-css.css?ver=2.77.0
200 OK 2.7 kB URL HTTP/2 dzns.rs/wp-content/plugins/wp-polls/polls-css.css?ver=2.77.0
IP
ASN #24940 Hetzner Online GmbH
Hash e619fed4db9cedec2065f006d5b63713
c3bdc5f70bf382d1122babab70bf89b28039946a
4d956a758ca48121e4434c413596334c6b0f3cda0e622ada0d73c41d39eda526
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-polls/polls-css.css?ver=2.77.0 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Oct 2022 06:42:15 GMT
accept-ranges: bytes
content-length: 2708
content-type: text/css
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 89 kB URL HTTP/2 dzns.rs/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (43771)
Hash b7915926fe42d76e9c802353ab01dae4
3a8192a4312f25f53de25b100d62829c0f14d67c
d7705700d24d5919255576642ad2c28bfc790390b7183a369038ff5c1e814d51
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Jul 2022 19:42:21 GMT
accept-ranges: bytes
content-length: 88932
content-type: text/css
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/style.css?ver=6.0.2
200 OK 702 B URL HTTP/2 dzns.rs/wp-content/themes/dzns/style.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
Hash 988626f379a8e00320ba5f44b2de737a
a81162449f9c39f03b5e9897c84516098527b7e2
2c90b26bf28d72a8006bd34e67abb5ee4bb6369265073bf72bb39a10f703086e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/dzns/style.css?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 07 Aug 2018 13:14:55 GMT
accept-ranges: bytes
content-length: 702
content-type: text/css
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/plugins/popups/public/assets/css/public.css?ver=1.9.3.8
200 OK 5.4 kB URL HTTP/2 dzns.rs/wp-content/plugins/popups/public/assets/css/public.css?ver=1.9.3.8
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with CRLF line terminators
Hash 73989cbfca737220b50bc4a4a95b12c3
7eeab86d2d03bd75cffc09d053b5d3da0a20ca34
37c558263ba695539d83e2b57c33595763d1b7b36e27e4d2b0a654ef00027690
GET /wp-content/plugins/popups/public/assets/css/public.css?ver=1.9.3.8 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 28 Nov 2019 05:16:12 GMT
accept-ranges: bytes
content-length: 5421
content-type: text/css
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.1
200 OK 6.2 kB URL HTTP/2 dzns.rs/wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6004)
Hash 11ff8e4ed98bf4c707f67352f66786e4
0bd3e2ba53ef69de977d8bf30af79c65a0c881b3
b3874d7912ab8f1f860c5eef8cfb799fcae41b23259165082a1791e15a65050f
GET /wp-includes/js/jquery/ui/tooltip.min.js?ver=1.13.1 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 04 Jun 2022 21:58:41 GMT
accept-ranges: bytes
content-length: 6184
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/js/lib/cyrlatconverter_ignore_list_rs.js?ver=6.0.2
200 OK 5.2 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/js/lib/cyrlatconverter_ignore_list_rs.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (769)
Hash a6fa527ee27b9271fd98c7ccdc142b52
c58e67b923bd905b138eec57ff8afa79fe8f81d1
ecd87d6115ea36d48941bcf34e2b1f5b1255a654c7e0f908824941579f4d0670
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/dzns/assets/js/lib/cyrlatconverter_ignore_list_rs.js?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 May 2021 15:44:08 GMT
accept-ranges: bytes
content-length: 5169
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1
200 OK 10 kB URL HTTP/2 dzns.rs/wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9937)
Hash 887f1d35750dab9617fc2e87ed2c7905
eea3e0885cc6653aba765826337e4aa5ec17a899
f4154825dc56e715b2138ad66a290eb8b17824bb0c08685a2888c2fcec94b36a
GET /wp-includes/js/jquery/ui/menu.min.js?ver=1.13.1 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 04 Jun 2022 21:58:41 GMT
accept-ranges: bytes
content-length: 10114
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-includes/js/jquery/ui/selectmenu.min.js?ver=1.13.1
200 OK 9.3 kB URL HTTP/2 dzns.rs/wp-includes/js/jquery/ui/selectmenu.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9155)
Hash e26c71149fa8df6b8dfdfd797ac0a865
885312af98d19506bb2446bf21d44fbcbddac0be
6bf4786c3d1edbb9467898a2d47c469779a68f76b2ec6b0016b4db482c002112
GET /wp-includes/js/jquery/ui/selectmenu.min.js?ver=1.13.1 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 04 Jun 2022 21:58:42 GMT
accept-ranges: bytes
content-length: 9338
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/plugins/wp-fullcalendar/includes/css/main.css?ver=1.4.1
200 OK 17 kB URL HTTP/2 dzns.rs/wp-content/plugins/wp-fullcalendar/includes/css/main.css?ver=1.4.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (16046), with CRLF line terminators
Hash 21a7cc357c131dd4d68db98ee6b86814
49443c336bb2f9b01fba8c4d0d7fd594e4726fc6
9f6698aa1772ff9631817db50a94e13c8968057e91ec3dfd95cb83433f1ca402
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/wp-fullcalendar/includes/css/main.css?ver=1.4.1 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 14 Apr 2021 17:35:29 GMT
accept-ranges: bytes
content-length: 17204
content-type: text/css
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
200 OK 21 kB URL HTTP/2 dzns.rs/wp-includes/js/jquery/ui/core.min.js?ver=1.13.1
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (8189)
Hash 6aaf0a4e8eac131defea126f5b1b5fbf
24da0326af36303e5a1e9799a3c26f7a1077928c
240b702419d6c39ecc4896f0132ccfc9bc517e9aef0c782d99580e0c678b47d5
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.1 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 04 Jun 2022 21:58:42 GMT
accept-ranges: bytes
content-length: 20715
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/js/lib/modernizr-2.8.3-respond-1.4.2.min.js?ver=6.0.2
200 OK 21 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/js/lib/modernizr-2.8.3-respond-1.4.2.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text, with very long lines (14856)
Hash 173f4123bddab419645df0286a582ec6
cb0ded0f82fa6579dfb2fa13b137aa2b6ae17c68
5b2e0669a7fb70c2e37dda74cec47ac3e5ba73039d70c7ae76a5dea09ab548f8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/dzns/assets/js/lib/modernizr-2.8.3-respond-1.4.2.min.js?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 May 2021 15:44:03 GMT
accept-ranges: bytes
content-length: 20875
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/js/lib/cyrlatconverter-v0.6.1.js?ver=6.0.2
200 OK 26 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/js/lib/cyrlatconverter-v0.6.1.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (769)
Hash e4eacabf058850b0285d6d626c82a074
d86ca5799a8e43088fc30062464dfbdf1e5e1659
2aaa8ef53b0b431f9880c744531fe697fc06ec5858b909ba156313bf4f803cda
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/dzns/assets/js/lib/cyrlatconverter-v0.6.1.js?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 May 2021 15:44:11 GMT
accept-ranges: bytes
content-length: 25649
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/plugins/wp-polls/polls-js.js?ver=2.77.0
200 OK 3.2 kB URL HTTP/2 dzns.rs/wp-content/plugins/wp-polls/polls-js.js?ver=2.77.0
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (3242), with no line terminators
Hash 92a77854e7be2f0cf4350123adf6e4d2
8ac459501bf94deb660ddd844ac0b825f169b9ae
03d87f337bb68d971d9fdb8ed746c0ab6f4008e6060e63ed67057f444a05a6a6
GET /wp-content/plugins/wp-polls/polls-js.js?ver=2.77.0 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 05 Oct 2022 06:42:15 GMT
accept-ranges: bytes
content-length: 3242
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/js/lib/detectmobilebrowser.js?ver=6.0.2
200 OK 3.0 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/js/lib/detectmobilebrowser.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2834)
Hash d151de8fea037bf9074995e0c41a5444
a3451b18be8b9d53f9dd505ac22d1f0ffcd7a32d
002c5a1b4e15fb0c7aa353b6915bf7072bdb88fb321c68d5b78ebb6371c5370c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/dzns/assets/js/lib/detectmobilebrowser.js?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 May 2021 15:44:21 GMT
accept-ranges: bytes
content-length: 2980
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-includes/js/dist/vendor/moment.min.js?ver=2.29.4
200 OK 58 kB URL HTTP/2 dzns.rs/wp-includes/js/dist/vendor/moment.min.js?ver=2.29.4
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (58024), with no line terminators
Hash 99d33210b6eb23cf25fcd4ab7cfc9f2a
473543a8a80fb55d800d4356864b9491ba819cae
081737985335af4be15fc676ed4ccc0703c7446c6b5cbc9317e40bcdc6428e5d
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/moment.min.js?ver=2.29.4 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 30 Aug 2022 19:42:37 GMT
accept-ranges: bytes
content-length: 58024
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/css/main.css?ver=6.0.2
200 OK 68 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/css/main.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash 570ef7b5b6d75408eb848459805861a2
884b65110aeea51c7fd1f6bafd11370928b5e4b9
2404f77753c7c4de13ea3b1be3a913a97de3630495e07ff028efbabd36799c1b
GET /wp-content/themes/dzns/assets/css/main.css?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 06 Oct 2017 12:56:04 GMT
accept-ranges: bytes
content-length: 68069
content-type: text/css
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.3
200 OK 999 B URL HTTP/2 dzns.rs/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (999), with no line terminators
Hash 6a0e8318d42803736d2fafcc12238026
c955314a7e0a9a9871329b0f042c8f0b5df49a78
2648a1333fa24d383fd73a6beaac17156ae78f4267ff7407ad60e05a788df44c
GET /wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=5.6.3 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 02 Sep 2022 05:28:50 GMT
accept-ranges: bytes
content-length: 999
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
200 OK 9.7 kB URL HTTP/2 dzns.rs/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (9680), with no line terminators
Hash 490c29d6776fc430c23403fd845b34b0
817129906b7fef1011895a76f047c7693a852e21
29e8de26576208c07ba0845f604e65c9273b93f9f4d1d66214eb4c586f9938c4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.6.3 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 02 Sep 2022 05:28:50 GMT
accept-ranges: bytes
content-length: 9680
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash befa75dbbe9d5dfa501f9c1f03b7cdfa
73814c47bdcd6bebffc963b71d0a20fb361fad50
76b8f843416709a64e030343fbea3e04b9ee9faf2872ddba29f7c8ea28041e28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b45d7f40a93a062e11d3152f4c8cc386
118b3c9ba2d1939c87d45bc232b6833eb2190623
85f94ae27cef37d4aa23385459ae771386e0d4f2f794ccbf43174de141601b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b45d7f40a93a062e11d3152f4c8cc386
118b3c9ba2d1939c87d45bc232b6833eb2190623
85f94ae27cef37d4aa23385459ae771386e0d4f2f794ccbf43174de141601b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dzns.rs/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
200 OK 12 kB URL HTTP/2 dzns.rs/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3
IP
ASN #24940 Hetzner Online GmbH
File type HTML document, ASCII text, with very long lines (12211), with no line terminators
Hash 3f3fc23f477a3849aa5677c585b2a2b4
ccf0865ebd37f76c450c7a377a86ff2448288db3
985fdd42398281348ca133a44750a56fe4909a806b9c075c9443a5d0bd6d2e51
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.3 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 02 Sep 2022 05:28:50 GMT
accept-ranges: bytes
content-length: 12211
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 6.5 kB URL HTTP/2 dzns.rs/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6475), with no line terminators
Hash 61449413a42d2daaa79dbe7298b40e21
d86c474164c603084397bdc50fb0e469d28b5772
f30769ea0b80a5d900c5f0de30b1aad1ab461195e69223d5ef63c2c5de8b6c1a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 04 Jun 2022 21:58:39 GMT
accept-ranges: bytes
content-length: 6475
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/js/lib/bootstrap.min.js?ver=6.0.2
200 OK 17 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/js/lib/bootstrap.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (17030)
Hash 50a3ae66dac230d79355f36d2fd1f4cc
e344b01129c40dd92d61df8163c702e3d3082943
337c882dde059dd56f81813f7b0f474187fe8d3af18976cc50524b62a46a2ed3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/dzns/assets/js/lib/bootstrap.min.js?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 May 2021 15:44:14 GMT
accept-ranges: bytes
content-length: 17417
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 19 kB URL HTTP/2 dzns.rs/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash 57459b58fd7665a5e20b2345463df9c9
71c3b177ad1412d5e0b56d99f18bc345148df88b
6fecb89a29ee2bd397bb1bf58ecaa530a76f0654db71fadefd3cc70b0bc302bf
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 04 Jun 2022 21:58:39 GMT
accept-ranges: bytes
content-length: 19142
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/plugins/popups/public/assets/js/public.js?ver=1.9.3.8
200 OK 30 kB URL HTTP/2 dzns.rs/wp-content/plugins/popups/public/assets/js/public.js?ver=1.9.3.8
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (6832), with CRLF line terminators
Hash 33c66f8bb7b8a86344c136ad2f3a56e1
5a7ba63520e23b22eb828268c11825f9150729f9
5881b4f2ae1a4f45ae43f7b68d1fde8de01885d0c05ba9e35d135bf21c6d3e8a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/popups/public/assets/js/public.js?ver=1.9.3.8 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 06 May 2021 22:12:16 GMT
accept-ranges: bytes
content-length: 29990
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/js/lib/owl.carousel.min.js?ver=6.0.2
200 OK 41 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/js/lib/owl.carousel.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (32068)
Hash b1c931e9479f0dddf26fcd316d029f12
f64af54031937e47441c47333067d4e01aaf949c
8ee715d1aa71f9365c6f57e8b4967dac5a6601ffe6f601f568e591d86a27147d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/dzns/assets/js/lib/owl.carousel.min.js?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 May 2021 15:44:37 GMT
accept-ranges: bytes
content-length: 41170
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ec8c3be288c030a2f21f77da38609a2c
5dce231ac91002054bbdbc6b19f6d1aa0d6c32bc
fa3abfefbd26a9339066ee03360614fc68312aefd2aa7e47e291589f426a7265
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dzns.rs/wp-content/themes/dzns/assets/js/lib/jquery.mmenu.all.min.js?ver=6.0.2
200 OK 48 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/js/lib/jquery.mmenu.all.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (10114)
Hash 737b6514d4fb4e5556663ee70a59f42b
eedfcbf702276c7f64fb57b7557f494d83f91611
6ac7d80d80545e860ffcda055ce330329e63849f0772b5e36617f9a75bf2938c
GET /wp-content/themes/dzns/assets/js/lib/jquery.mmenu.all.min.js?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 May 2021 15:44:27 GMT
accept-ranges: bytes
content-length: 48356
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js?ver=2.0.s
200 OK 30 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js?ver=2.0.s
IP
File type ASCII text, with very long lines (32065)
Hash 6d973c8b7e2439d958e09c0a1ab9fe50
05ae0830200c20b9a2dfd5a825adc400481a60fb
f3c122dc227e829ed96b2a754296809201bd78abbad7ba50ef5079654e1cc894
GET /ajax/libs/jquery/2.2.4/jquery.min.js?ver=2.0.s HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 30028
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 11 Oct 2022 13:06:14 GMT
expires: Wed, 11 Oct 2023 13:06:14 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 89346
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-107686903-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-107686903-1
IP
File type ASCII text, with very long lines (1962)
Hash 7c346a0d6eb7d585253d6016aee32511
e7a74e57b79c5576526b5699272b267595ea72a4
b8523918a95b67a4efa5968eb75ff14bf3eec5ea825f329b9595e339899a5565
GET /gtag/js?id=UA-107686903-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 12 Oct 2022 13:55:20 GMT
expires: Wed, 12 Oct 2022 13:55:20 GMT
cache-control: private, max-age=900
last-modified: Wed, 12 Oct 2022 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 42419
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/js/main.min.js?ver=1.0.0
200 OK 49 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/js/main.min.js?ver=1.0.0
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (32037)
Hash e080bb34335508288bf3ab3fded0b302
64f80b99d431508b33c5359883972fa5eb2ddd8d
a8887a02a204daeb072fc7f578f067da39adc00a2df3dbdf9b9d36ecaf953d4a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/dzns/assets/js/main.min.js?ver=1.0.0 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 May 2021 15:45:17 GMT
accept-ranges: bytes
content-length: 49080
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/css/vendor/vendors.css?ver=6.0.2
200 OK 257 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/css/vendor/vendors.css?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (13793)
Size 257 kB (257220 bytes)
Hash 9113bb32daad70efd77d1ba3a47d1d8b
a82972a01ab7a82be193a63cdd1d30314d4173af
021482b2946be7387517eba697af252986296ae041fc82d47ddc0b74c04a748b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/dzns/assets/css/vendor/vendors.css?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 06 Oct 2017 12:56:04 GMT
accept-ranges: bytes
content-length: 257220
content-type: text/css
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/plugins/wp-fullcalendar/includes/js/main.js?ver=1.4.1
200 OK 380 kB URL HTTP/2 dzns.rs/wp-content/plugins/wp-fullcalendar/includes/js/main.js?ver=1.4.1
IP
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65431), with CRLF line terminators
Size 380 kB (380119 bytes)
Hash dcda0202844eedc2757b886a773a6f19
58b666a5ae95872eb558fd535068fd26642e778d
0e0f08fe54e606d95cf2fbc2ea410cd425013b7d915db136bba053c19a3dbb6c
GET /wp-content/plugins/wp-fullcalendar/includes/js/main.js?ver=1.4.1 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 14 Apr 2021 17:35:21 GMT
accept-ranges: bytes
content-length: 380119
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=6LdWr6QUAAAAAPtUyidAli2Mw_KN9bOH33qy6505&ver=3.0
200 OK 585 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LdWr6QUAAAAAPtUyidAli2Mw_KN9bOH33qy6505&ver=3.0
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash c6b959f011a121adbd4be3419a1c8f88
d2cf804e50de39e652b91f22c3481750d2feb273
a49963b50dfb906e5fa5a8764956b296490c8c71f6eec9ca435544856ae0e707
GET /recaptcha/api.js?render=6LdWr6QUAAAAAPtUyidAli2Mw_KN9bOH33qy6505&ver=3.0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 12 Oct 2022 13:55:20 GMT
date: Wed, 12 Oct 2022 13:55:20 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 585
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2017/09/ico_savetovaliste1.png
200 OK 4.8 kB URL HTTP/2 dzns.rs/wp-content/uploads/2017/09/ico_savetovaliste1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 108 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 93f6439973228d5bdb5d07f82ce01117
f2be0e73a7d1416c847e5bd4d33ff6b3d464e0ea
fac12c96efea0078b411ae1560b335cd7d14a42ce9600e9d36423eace6518c0e
GET /wp-content/uploads/2017/09/ico_savetovaliste1.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:21:00 GMT
accept-ranges: bytes
content-length: 4806
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2017/09/ico_centar1.png
200 OK 6.3 kB URL HTTP/2 dzns.rs/wp-content/uploads/2017/09/ico_centar1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 108 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 89f88ff1f0029f20c9bbd5aaa10ac5fb
90792811ff75ad5c993e2c236eaf38b0f2350f22
ad669bbc45b423a74c916827a727a8c965278e8c5e5d476b7138f9e86c9150af
GET /wp-content/uploads/2017/09/ico_centar1.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:20:59 GMT
accept-ranges: bytes
content-length: 6257
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2017/09/ico_zakazivanje_.png
200 OK 4.5 kB URL HTTP/2 dzns.rs/wp-content/uploads/2017/09/ico_zakazivanje_.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 108 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash a89bf97a3099040f7a9c53867a8301b0
569b3e561fb3f14ca55f4f33b8d0bfb7bacebe5e
d0f9794394a08bbe95a6ae7e182689c624e04a3b8c3892b17338e0d7d359099c
GET /wp-content/uploads/2017/09/ico_zakazivanje_.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:21:00 GMT
accept-ranges: bytes
content-length: 4518
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2017/09/ico_protokol_.png
200 OK 6.3 kB URL HTTP/2 dzns.rs/wp-content/uploads/2017/09/ico_protokol_.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 108 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 814e995b5128089263dc3fb457744813
5b72f968aaa5a971f847759e6ecf3a9bf2183cad
a37eec6fd503f842426e3fbd65e949000cddb9da1ecbf62ecd74894632fc43cc
GET /wp-content/uploads/2017/09/ico_protokol_.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:20:59 GMT
accept-ranges: bytes
content-length: 6260
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2018/01/ico_zastitnik.png
200 OK 5.6 kB URL HTTP/2 dzns.rs/wp-content/uploads/2018/01/ico_zastitnik.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 108 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 29608a155594804da54d83d8cd8a7161
506929e518dcfd4164354ffb054e351917406505
f164a3eca0f2f6b42d307f8d18066b72ea59d71ac899f8dd9f02bdb194ce2255
GET /wp-content/uploads/2018/01/ico_zastitnik.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 04 Jan 2018 11:07:08 GMT
accept-ranges: bytes
content-length: 5600
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2019/06/ucimo-da-jedemo_beba-307x121.jpg
200 OK 6.5 kB URL HTTP/2 dzns.rs/wp-content/uploads/2019/06/ucimo-da-jedemo_beba-307x121.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 307x121, components 3\012- data
Hash d5ebd6f3f63a6d57f5220026f9984b07
b7490555a43ea23aba5905103054a6eba36994a9
4957283dbf645162ce49e7a78126c00e1327aa7b2e486fca78f257cfaf4c4f79
GET /wp-content/uploads/2019/06/ucimo-da-jedemo_beba-307x121.jpg HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 14 Jun 2019 11:44:50 GMT
accept-ranges: bytes
content-length: 6526
content-type: image/jpeg
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/img/logo_vesti.png
200 OK 3.2 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/img/logo_vesti.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 215 x 65, 8-bit colormap, non-interlaced\012- data
Hash 5efce6a46a3b68dc89a20a7ce84dc5b1
4c1ad87c68bfdd253bb0ee8b136d78b94f2071aa
b23d09ff09f5d2ffb6bc6ab2ed23886707462969cad68850380e5d33548c6ee7
GET /wp-content/themes/dzns/assets/img/logo_vesti.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 06 Oct 2017 12:56:04 GMT
accept-ranges: bytes
content-length: 3197
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/themes/dzns/assets/img/ico_anketa.png
200 OK 3.4 kB URL HTTP/2 dzns.rs/wp-content/themes/dzns/assets/img/ico_anketa.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 55 x 47, 8-bit/color RGBA, non-interlaced\012- data
Hash 33763d3e1574b7ce3805235b69510aea
c449acc4b1ec112e751792eee161a53130fe3421
e41d786b8925dc81099fb9cbd7fbec30fda3be1830ccac5e9d275e785f03feec
GET /wp-content/themes/dzns/assets/img/ico_anketa.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 06 Oct 2017 12:56:04 GMT
accept-ranges: bytes
content-length: 3352
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2018/11/dojenje-307x121.jpg
200 OK 5.8 kB URL HTTP/2 dzns.rs/wp-content/uploads/2018/11/dojenje-307x121.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 307x121, components 3\012- data
Hash b578215749b23dee80a24dc506f98a33
f2f8731038bbff384a54dcfb8f73a8e60573db88
abf45c60d05378ebc9813d9c278f0b9af333ed04b331b71006e1dcf68ff6eb12
GET /wp-content/uploads/2018/11/dojenje-307x121.jpg HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 19 Nov 2018 09:07:33 GMT
accept-ranges: bytes
content-length: 5820
content-type: image/jpeg
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2022/09/Citanje_Deca-307x121.jpg
200 OK 8.9 kB URL HTTP/2 dzns.rs/wp-content/uploads/2022/09/Citanje_Deca-307x121.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 307x121, components 3\012- data
Hash a20d6e37872f645af48e6017fad93f8e
da2ba1257848cf8495ed22142d5a1705c14de201
c406140ba88e868e199c0eb084bcacd1ace3e7050a9d4121ba36bcd2d33b6bbf
GET /wp-content/uploads/2022/09/Citanje_Deca-307x121.jpg HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 30 Sep 2022 07:08:11 GMT
accept-ranges: bytes
content-length: 8859
content-type: image/jpeg
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2017/09/ico_lekar_.png
200 OK 6.3 kB URL HTTP/2 dzns.rs/wp-content/uploads/2017/09/ico_lekar_.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 108 x 81, 8-bit/color RGBA, non-interlaced\012- data
Hash 6b55520c20cdc014c2964ae1a1b70ca2
22c69fdef1b9eb3e273abc6a2d300b0ba1fa4a7c
6bbcbed4cac95a51116530f0f696fe4acba822774c4ddf8f8f183034622caa02
GET /wp-content/uploads/2017/09/ico_lekar_.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:20:59 GMT
accept-ranges: bytes
content-length: 6324
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2019/07/alergije-na-sunce-307x121.png
200 OK 46 kB URL HTTP/2 dzns.rs/wp-content/uploads/2019/07/alergije-na-sunce-307x121.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 307 x 121, 8-bit/color RGBA, non-interlaced\012- data
Hash 5014231f666b4e5874ec37ef9c60a6c4
fb0b1c27d4bc25c978d45892c5c609b46bc7b94f
c8716fcdb8f760b08e62e55ce87af43b048d4b9ed4a307e3ebc39d1e05848b25
GET /wp-content/uploads/2019/07/alergije-na-sunce-307x121.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 05 Jul 2019 10:53:48 GMT
accept-ranges: bytes
content-length: 45825
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2017/06/dzns_logo_.png
200 OK 72 kB URL HTTP/2 dzns.rs/wp-content/uploads/2017/06/dzns_logo_.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 82 x 76, 8-bit/color RGBA, non-interlaced\012- data
Hash f987cc24b8e0e47deba2f86e0324faef
c4d44138461340d879e6dfb8b73ec32f79a09722
133f8f8ec30befd5c1ffd939916655aa2ae18a9a69b705d64811e1532157ca5e
GET /wp-content/uploads/2017/06/dzns_logo_.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:17:51 GMT
accept-ranges: bytes
content-length: 72370
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2021/01/Vakcinacija-307x121.png
200 OK 71 kB URL HTTP/2 dzns.rs/wp-content/uploads/2021/01/Vakcinacija-307x121.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 307 x 121, 8-bit/color RGBA, non-interlaced\012- data
Hash 6ba9484e00ac7c9555807e45d8daf0cd
986cdd8d93175d1d4965e346b302b40b79ce8915
4c819c7afbaa899420c3c8f275c9b8797d98b3384983d5e0f09b0a4d3c2ebd38
GET /wp-content/uploads/2021/01/Vakcinacija-307x121.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 15 Jan 2021 11:08:58 GMT
accept-ranges: bytes
content-length: 70818
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/glavni/Fotografije/2022/Svetski_Dan_Srca_22_Home-307x121.png
200 OK 86 kB URL HTTP/2 dzns.rs/wp-content/uploads/glavni/Fotografije/2022/Svetski_Dan_Srca_22_Home-307x121.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 307 x 121, 8-bit/color RGBA, non-interlaced\012- data
Hash 56ec26d5ac97e28e6a9c5c459adfa354
5c8f3cb7cd20917da7a46f3d321136b1050f70f0
985f2abab960ebabee6816be249424d47c15e361c6b24299969ac5466c1ac03d
GET /wp-content/uploads/glavni/Fotografije/2022/Svetski_Dan_Srca_22_Home-307x121.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 29 Sep 2022 12:01:59 GMT
accept-ranges: bytes
content-length: 86021
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2020/04/Krpelji-307x121.png
200 OK 100 kB URL HTTP/2 dzns.rs/wp-content/uploads/2020/04/Krpelji-307x121.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 307 x 121, 8-bit/color RGBA, non-interlaced\012- data
Size 100 kB (100523 bytes)
Hash 78cd475d36541ca97295fce9b80c8a67
37bfdd3d7f167624af46690dd441d314a1b79ea3
ac709631940e15d61c645741d277615f0a9111810df6126815ca4d3fe2e0cf3b
GET /wp-content/uploads/2020/04/Krpelji-307x121.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 14 Jul 2020 16:53:05 GMT
accept-ranges: bytes
content-length: 100523
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 19 kB URL HTTP/2 dzns.rs/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 04 Jun 2022 21:58:42 GMT
accept-ranges: bytes
content-length: 18617
content-type: application/javascript
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash befa75dbbe9d5dfa501f9c1f03b7cdfa
73814c47bdcd6bebffc963b71d0a20fb361fad50
76b8f843416709a64e030343fbea3e04b9ee9faf2872ddba29f7c8ea28041e28
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b45d7f40a93a062e11d3152f4c8cc386
118b3c9ba2d1939c87d45bc232b6833eb2190623
85f94ae27cef37d4aa23385459ae771386e0d4f2f794ccbf43174de141601b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b45d7f40a93a062e11d3152f4c8cc386
118b3c9ba2d1939c87d45bc232b6833eb2190623
85f94ae27cef37d4aa23385459ae771386e0d4f2f794ccbf43174de141601b9b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b8e058c50dbe0871b6ccde4ed4cc8785
06b0c34d584624df99282c1fff1d766b9ed00e64
3319073b74402c41450cc9ca2162140dbe8b231db146cf8e77cb0b43fa461b4c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dzns.rs/wp-content/uploads/2022/06/DZNS_slide_2.png
200 OK 1.2 MB URL HTTP/2 dzns.rs/wp-content/uploads/2022/06/DZNS_slide_2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 1800 x 1194, 8-bit colormap, non-interlaced\012- data
Size 1.2 MB (1240140 bytes)
Hash 8f7eb5e5e477ec9197c43ed217dde352
7fa690f82d8a431e6254f49704a3c3770001d469
4244b97b6372a5a8d12b16ddd71a046806a68d0a901d11e91e20a492f8372d15
GET /wp-content/uploads/2022/06/DZNS_slide_2.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 04 Jun 2022 10:51:51 GMT
accept-ranges: bytes
content-length: 1240140
content-type: image/png
date: Wed, 12 Oct 2022 13:55:21 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2017/09/Skola_Za_Trudnice_H.jpg
200 OK 86 kB URL HTTP/2 dzns.rs/wp-content/uploads/2017/09/Skola_Za_Trudnice_H.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1266x500, components 3\012- data
Hash f9fef69b1d08cd5b09d7619fa4a6b7e3
72ef1e8fc23436de647d835f4e0947f8c87755ab
e3351b8a54f55b68c6b036d6457e10e13373a63d7948377b6944d25065337c6e
GET /wp-content/uploads/2017/09/Skola_Za_Trudnice_H.jpg HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:21:01 GMT
accept-ranges: bytes
content-length: 86525
content-type: image/jpeg
date: Wed, 12 Oct 2022 13:55:21 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2013/07/Vrucine_Su_Opasne_Za_Hronicare-307x121.jpg
200 OK 72 kB URL HTTP/2 dzns.rs/wp-content/uploads/2013/07/Vrucine_Su_Opasne_Za_Hronicare-307x121.jpg
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 71896, version 4.393\012- data
Hash e6cf7c6ec7c2d6f670ae9d762604cb0b
97e438cc545714309882fbceadbf344fcaddcec5
7dacf83f51179de8d7980a513e67ab3a08f2c6272bb5946df8fd77c0d1763b73
GET /wp-content/uploads/2013/07/Vrucine_Su_Opasne_Za_Hronicare-307x121.jpg HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 13:04:06 GMT
accept-ranges: bytes
content-length: 6944
content-type: image/jpeg
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2017/09/ico_skolica.png
200 OK 1.1 kB URL HTTP/2 dzns.rs/wp-content/uploads/2017/09/ico_skolica.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 56 x 5, 8-bit/color RGBA, non-interlaced\012- data
Hash e33bb757094e793b34765c3523907d04
cde728dacbfbee8ab4339def0512450ecd284805
fd08f7cf36d2e2db819d77eb3264a18ce319cea0f44760f3362a277cba4d31e8
GET /wp-content/uploads/2017/09/ico_skolica.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:21:00 GMT
accept-ranges: bytes
content-length: 5672
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2020/04/Pluca_Slider_1.jpg
200 OK 60 kB URL HTTP/2 dzns.rs/wp-content/uploads/2020/04/Pluca_Slider_1.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=14, height=2160, bps=0, PhotometricIntepretation=RGB, description=3D Illustration of Human Respiratory System Lungs Anatomy, orientation=upper-left, width=3840], progressive, precision 8, 856x369, components 3\012- data
Hash d2c10e30cd935dcad40bec86b1d0f82a
56b5cbbaf66ff039ce90e728233dcda6b89ef289
c05dd138bf64bd400cceb7c436e46db163baf51b077c45904e5521c5ab4724c9
GET /wp-content/uploads/2020/04/Pluca_Slider_1.jpg HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Apr 2020 15:12:27 GMT
accept-ranges: bytes
content-length: 59986
content-type: image/jpeg
date: Wed, 12 Oct 2022 13:55:21 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2021/09/Vakcinacija_Sider.png
200 OK 99 kB URL HTTP/2 dzns.rs/wp-content/uploads/2021/09/Vakcinacija_Sider.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 712 x 294, 8-bit colormap, non-interlaced\012- data
Hash 4ea14bb26e9ad0631ed4c6443de889fe
0545d1fd92934a443c89b7af197b7bab51c2634c
bbdd6f2580192d207aee04130e8e5b1f7f2f72f7f1e3a36e58a2bcc1b51466bf
GET /wp-content/uploads/2021/09/Vakcinacija_Sider.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 13 Sep 2021 11:13:42 GMT
accept-ranges: bytes
content-length: 98666
content-type: image/png
date: Wed, 12 Oct 2022 13:55:21 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2021/10/email.jpeg
200 OK 56 kB URL HTTP/2 dzns.rs/wp-content/uploads/2021/10/email.jpeg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, baseline, precision 8, 960x545, components 3\012- data
Hash 06014400907a6331de3bdb741b468d5d
4b6b90652c73fea44a7bdefe300533c233f694d0
33dd1953a76245b691f34debc822d37b2c1757d5a15d894fa2f747b8b9e0ae3d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/10/email.jpeg HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 12 Oct 2021 17:42:21 GMT
accept-ranges: bytes
content-length: 56450
content-type: image/jpeg
date: Wed, 12 Oct 2022 13:55:21 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2015/12/Prva-pomoc.png
200 OK 524 kB URL HTTP/2 dzns.rs/wp-content/uploads/2015/12/Prva-pomoc.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 2489 x 1181, 8-bit colormap, non-interlaced\012- data
Size 524 kB (524450 bytes)
Hash abdd1efa801355c203e85f1b8acc8894
591ecdee7447c8745729850d3d7c91c0597cb2d1
959f9a0789107d43ad8cc49322ee3cc5e12baf19eeeb1047896163955eca52c4
GET /wp-content/uploads/2015/12/Prva-pomoc.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 18 Oct 2017 10:45:19 GMT
accept-ranges: bytes
content-length: 524450
content-type: image/png
date: Wed, 12 Oct 2022 13:55:21 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2018/02/Srce.jpg
200 OK 29 kB URL HTTP/2 dzns.rs/wp-content/uploads/2018/02/Srce.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 670x447, components 3\012- data
Hash 84fe8743d7f16b3409c39000b866d508
cc65a51b27882916fd20b30f0a44b3ccb9eb61d4
06a4cf79e0bd76aad43a567f4ac8e62043cc5a366978647f32e38fc1811d22d0
GET /wp-content/uploads/2018/02/Srce.jpg HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 23 Feb 2018 09:46:16 GMT
accept-ranges: bytes
content-length: 28995
content-type: image/jpeg
date: Wed, 12 Oct 2022 13:55:21 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2017/09/ico_centar.png
200 OK 1.1 kB URL HTTP/2 dzns.rs/wp-content/uploads/2017/09/ico_centar.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 56 x 5, 8-bit/color RGBA, non-interlaced\012- data
Hash 6f76bd88067d57ef93c02865d53dcc15
812fd3b8d0182b7c6db7344cf26ce8049ec8902f
c0b0249a77fe6218f89623936babebc7e68802dc73e8d7ee50c6fab0804b51c6
GET /wp-content/uploads/2017/09/ico_centar.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:20:59 GMT
accept-ranges: bytes
content-length: 10007
content-type: image/png
date: Wed, 12 Oct 2022 13:55:20 GMT
server: Apache
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2020/01/Puska.jpg
200 OK 183 kB URL HTTP/2 dzns.rs/wp-content/uploads/2020/01/Puska.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=907, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], baseline, precision 8, 1200x663, components 3\012- data
Size 183 kB (183247 bytes)
Hash cce53e1c679e9900b717799e68d8cc4e
c46619913fd53f983afd60099aaafc456380f8f0
63df73592aa1528260e56197f6f672e737eee8a177a83d0f7fbc151638ac2168
GET /wp-content/uploads/2020/01/Puska.jpg HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 24 Feb 2020 10:23:25 GMT
accept-ranges: bytes
content-length: 183247
content-type: image/jpeg
date: Wed, 12 Oct 2022 13:55:21 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b80441eff42b20b9def8e35c2e40efd3
f9fe84a9e292cb463f176040150eafbb68dd2e02
89bb831922fbb4b3675d0a7b109880111057574202841db3c6db5b6bdeab39b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b80441eff42b20b9def8e35c2e40efd3
f9fe84a9e292cb463f176040150eafbb68dd2e02
89bb831922fbb4b3675d0a7b109880111057574202841db3c6db5b6bdeab39b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 19860, version 1.0\012- data
Hash a95e391373ad634c3b7dbaf77de3f40e
ddc4638bc28c21a400fcd2df94448743f198a257
fa3d5a0422c9b413abb4c78f8ff80de8a8ed58766f7110c82febf5296e899b47
GET /s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDXbtM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dzns.rs
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 10 Oct 2022 22:46:46 GMT
expires: Tue, 10 Oct 2023 22:46:46 GMT
cache-control: public, max-age=31536000
age: 140915
last-modified: Mon, 18 Jul 2022 19:06:33 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDZbtPY_Q.woff2
200 OK 9.9 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDZbtPY_Q.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9936, version 1.0\012- data
Hash 8acf916feb3b26478b323d7d659e9c29
942c8f14f066b3e20168bb9489b9469b71df8594
fbd6cc2b7752f845e19f2a2a4765828f5909456f9f207134583de9958cf0d768
GET /s/playfairdisplay/v30/nuFvD-vYSZviVYUb_rj3ij__anPXJzDwcbmjWBN2PKdFvXDZbtPY_Q.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://dzns.rs
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9936
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 11 Oct 2022 02:14:47 GMT
expires: Wed, 11 Oct 2023 02:14:47 GMT
cache-control: public, max-age=31536000
age: 128434
last-modified: Mon, 18 Jul 2022 19:12:46 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dzns.rs/wp-content/uploads/2016/07/dzns_logo_big.png
200 OK 30 kB URL HTTP/2 dzns.rs/wp-content/uploads/2016/07/dzns_logo_big.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 116 x 109, 8-bit/color RGBA, non-interlaced\012- data
Hash 534e5ca530f39b731e01be73686b46f4
28fd919e63a5cf20b51c894c427883e90497e3e2
1f7050e870389233d459b2d51d94c302b68ae925428f3f5c7948ad5920c6bb68
GET /wp-content/uploads/2016/07/dzns_logo_big.png HTTP/1.1
Host: dzns.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 19 Sep 2017 16:11:10 GMT
accept-ranges: bytes
content-length: 29540
content-type: image/png
date: Wed, 12 Oct 2022 13:55:21 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b80441eff42b20b9def8e35c2e40efd3
f9fe84a9e292cb463f176040150eafbb68dd2e02
89bb831922fbb4b3675d0a7b109880111057574202841db3c6db5b6bdeab39b6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 12 Oct 2022 13:55:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js
200 OK 160 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js
IP
File type ASCII text, with very long lines (608)
Size 160 kB (159789 bytes)
Hash 1230a090d5cedcb9e764406ab9497c1b
3d175bcf4ad9957c3e32611713c01347299b173e
585cafe3d6a3b932804aaa5aeb19a650688a2c15767f513d0d60c1941475c428
GET /recaptcha/releases/vP4jQKq0YJFzU6e21-BGy3GP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dzns.rs
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 159789
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 05 Oct 2022 19:23:47 GMT
expires: Thu, 05 Oct 2023 19:23:47 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 02 Oct 2022 20:02:07 GMT
content-type: text/javascript
age: 585094
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Wed, 12 Oct 2022 12:41:09 GMT
expires: Wed, 12 Oct 2022 14:41:09 GMT
cache-control: public, max-age=7200
age: 4452
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 372301cc3e0ad3b9318a13a6ec327d30
9d34de85f08bf496e76a3577e0b23af5a2e06548
b5b57c12618c4d45d9b712be3fccaba0debbbf018f82b028bff74e39a077cf03
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5B57C12618C4D45D9B712BE3FCCABA0DEBBBF018F82B028BFF74E39A077CF03"
Last-Modified: Tue, 11 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13224
Expires: Wed, 12 Oct 2022 17:35:45 GMT
Date: Wed, 12 Oct 2022 13:55:21 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6e4dcdd-5afd-425d-85c2-9f7571390130.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6e4dcdd-5afd-425d-85c2-9f7571390130.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ff7a8b488ec08c86e580f3d3a8192c3
2dc6cace500c9a1d50e93378cfd1faaddb7fd8df
aa8f05435eec4b8b325151447d279daae7b8edf1582b1bfe458b7f78c8ce46b2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6e4dcdd-5afd-425d-85c2-9f7571390130.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10834
x-amzn-requestid: 4aae385b-f2d3-429e-9758-46bbfeb22639
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3Bp4Hj9IAMFYCw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e30b-4ca4df143546252c175e1215;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:41:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: v5Q5zFsNx90Duj5kNn_gzj1OKhpUx95-pi7-Oa6UUQD5e1Lgph6HTg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 ee330666adf9f04c8c30094f8ddcd004.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 21:56:43 GMT
age: 57518
etag: "2dc6cace500c9a1d50e93378cfd1faaddb7fd8df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5dcf5ef-7db7-4ea1-94ab-4f64163898dc.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5dcf5ef-7db7-4ea1-94ab-4f64163898dc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c44735cb9a0eba8f445262a24c9cc478
ef570c9938890ec942e4786cc549d687cb8a2e95
5974dbdba95af9dbaeb5ef6ff4a2e045e88482987c296e6afba5381b14da9600
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5dcf5ef-7db7-4ea1-94ab-4f64163898dc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6504
x-amzn-requestid: 21151bfb-93e7-485c-9ab3-13b7439e09ce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3B7uE1iIAMFnww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e37e-54087c9c7a4b72962bf78531;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:43:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: vINWu8ABGbLR_tD2eMQaKXFxdY34qMkAQIpOvNq5qchVYpLetmPzqw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:09:04 GMT
age: 56777
etag: "ef570c9938890ec942e4786cc549d687cb8a2e95"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5d5a2a4-e4d4-4f11-8cb5-c320f1078b2f.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5d5a2a4-e4d4-4f11-8cb5-c320f1078b2f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4f78379e6bde371b492c950402bcc39e
53a7502d8932c515aa09055c5cf8f2d2242e4398
241016bbd3cebc009f63dff2773c1c7fdb68fa941ab62b368d5e023b9155fa37
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5d5a2a4-e4d4-4f11-8cb5-c320f1078b2f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5252
x-amzn-requestid: b4ef9c4f-7ca4-42c9-a928-b0b8aa3cc695
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3BUaEtBoAMF8Lg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e282-455619be605fa91977c66df7;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:39:14 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zg4cBw3GML5OoCmS3yOEMdwKHFgl4fulcLN0Eqp4ttYBPj3umRY9lg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:34:25 GMT
age: 55256
etag: "53a7502d8932c515aa09055c5cf8f2d2242e4398"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31b429ef-0b4d-4ac1-a57e-0512cbe70108.png
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31b429ef-0b4d-4ac1-a57e-0512cbe70108.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e885fe35564ed7fefe0fb0fda2b9ebe7
bf37aa53466c3764d205de17070753b3204d78e4
187a99359986ae3131d303c09baf25ffa0dcf1ca80e09c9bee56434bff6f07d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31b429ef-0b4d-4ac1-a57e-0512cbe70108.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13724
x-amzn-requestid: 3f358e0a-786b-48fc-9e45-bda97026e544
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3Ak_FbjoAMFfQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e152-134d2c6f4efafecb71df10e6;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:34:10 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: AyEJLSY_cily6sTTT4rSqXN9YRpw7u-NQD3Gb-aL48_aeOBjtctABw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:08:46 GMT
etag: "bf37aa53466c3764d205de17070753b3204d78e4"
content-type: image/jpeg
age: 56795
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0524849b-0616-46fe-9940-c4934dc5fba0.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0524849b-0616-46fe-9940-c4934dc5fba0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 013a1c2ceea4c7055b2d8d5272e68e07
db90a35ecc3262efe4bf8ad7aca5f92e2e13e0d0
94c614b3414f27f0d9dfe5c4ebd6b1745431a5e8d221ca7b85e8b63cf911e72b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0524849b-0616-46fe-9940-c4934dc5fba0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5926
x-amzn-requestid: a9cb9682-9f41-467c-8ab2-c95461ada103
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZkE9uF_8IAMFzlg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633e4ebe-3c42cb491380d48712eeb124;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 03:42:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fIOteUHWkVG99Shd3zXGiCIPRQ9-YkFRL91mc4--huR34QOuDBMiNA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 12 Oct 2022 07:06:07 GMT
age: 24554
etag: "db90a35ecc3262efe4bf8ad7aca5f92e2e13e0d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74c4905d-ef25-43db-8882-67009cd34f1a.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74c4905d-ef25-43db-8882-67009cd34f1a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eda06240feabfa1b019765fe963c2d9c
3bbdd5560213e9b49ab7c079c5f2549d68890720
cd3724bfc1355b419c46df1259bfa40b4b4517a81bd45a4392d34e22c14a3d6e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74c4905d-ef25-43db-8882-67009cd34f1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3985
x-amzn-requestid: 6da73a65-c346-4040-9a03-63d5d6845adf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z1Cr1HeVoAMFubg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634517e5-34af0c8d6dc8218963b7319c;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 07:14:45 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: LAjdvQ29NhOnJjwigVkIjb7vx5tCPJPrHOOPmUD5Vh9N45WN4ZZXCg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Wed, 12 Oct 2022 07:37:37 GMT
age: 22664
etag: "3bbdd5560213e9b49ab7c079c5f2549d68890720"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 08 Oct 2022 12:31:58 GMT
expires: Sun, 08 Oct 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 350603
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 07 Oct 2022 00:48:31 GMT
expires: Sat, 07 Oct 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 479210
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb15fc1-cc74-4918-8e82-688ede90f3df.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb15fc1-cc74-4918-8e82-688ede90f3df.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5a61ea2d6a9b25c5567339c60f503bc6
19dd911262d941074183edd995d59abc84a42cd5
0ff68c4572b0eda2ddce4ce76b39cd268dcf5182acdaacb0274c23e2c5f50b3d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbb15fc1-cc74-4918-8e82-688ede90f3df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12284
x-amzn-requestid: 7df5e0e3-155f-4cfd-b1e1-62310edf4516
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Z3B7JFbxIAMFxnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6345e37a-0882e1333f26304f1d89c3c9;Sampled=0
x-amzn-remapped-date: Tue, 11 Oct 2022 21:43:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9wDJ29JLh2XIpgl5eKOBisYXYZY0IUFJGzZVNIJ-s3oBVET3NoL4ig==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Tue, 11 Oct 2022 22:33:17 GMT
age: 55331
etag: "19dd911262d941074183edd995d59abc84a42cd5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Playfair+Display&ver=6.0.2
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Playfair+Display&ver=6.0.2
IP
GET /css?family=Playfair+Display&ver=6.0.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 12 Oct 2022 13:55:20 GMT
date: Wed, 12 Oct 2022 13:55:20 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.6.3/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.6.3/css/font-awesome.min.css
IP
GET /font-awesome/4.6.3/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dzns.rs
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 12 Oct 2022 13:55:20 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"4083f5d376eb849a458cc790b53ba080"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 03/16/2022 19:53:21
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 632
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: cee67dafb1ce9b2bd4f11fda4ba4fe1b
cdn-cache: HIT
cf-cache-status: HIT
age: 273569
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 759055255e670b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Playfair+Display
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Playfair+Display
IP
GET /css?family=Playfair+Display HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://dzns.rs/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 12 Oct 2022 13:55:20 GMT
date: Wed, 12 Oct 2022 13:55:20 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
95.216.66.15
23.36.77.32
104.18.11.207
93.184.220.29
142.250.74.10