igraonice.hr/aut-aut/ut.zip
301 Moved Permanently 243 B URL HTTP/1.1 igraonice.hr/aut-aut/ut.zip
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9aa17fbbead6f70859ef081e50e7be83
0281dffeab4ae4cb346e149e1fc097e37edbd61b
bbe606698b3482435fad21b5c199d644464c84fcf64f02e60e2b1242d743ae7d
Analyzer Verdict Alert fortinet Malware
GET /aut-aut/ut.zip HTTP/1.1
Host: igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
date: Wed, 16 Nov 2022 17:25:34 GMT
server: Apache
x-content-type-options: nosniff
location: https://igraonice.hr/aut-aut/ut.zip
content-length: 243
content-type: text/html; charset=iso-8859-1
set-cookie: PH_HPXY_CHECK=s1; path=/
cache-control: private
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ade0f92f30e7d68787598ca2b5fd30c7
fc7065ecb41bdfc5cbf0d8d568d335426c57f02f
1aac1c0926e545793d2040b114d2e064b175592a131ba27ff820fcd4aff4b4e3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1AAC1C0926E545793D2040B114D2E064B175592A131BA27FF820FCD4AFF4B4E3"
Last-Modified: Wed, 16 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8326
Expires: Wed, 16 Nov 2022 19:44:21 GMT
Date: Wed, 16 Nov 2022 17:25:35 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 9b4e6c72233070ef185ff980135e9555
2f14523a3f6f9532df3b872984fd23e156d2c465
5040e340e60b331b1569d52d66afcd5649a4121e2841d38cca0974e2a4c0af75
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6190
Cache-Control: max-age=154132
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:35 GMT
Etag: "6374bbf5-1d7"
Expires: Fri, 18 Nov 2022 12:14:27 GMT
Last-Modified: Wed, 16 Nov 2022 10:31:17 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c88bc06741ab9fb81c2544acfcc34aa2
362cab19cff5aba27f472cc00071d5dfa38192e4
314ba27975f458e13917b2be91c9d5989a3e57c9e94b5a84dd52d0e21d27ae7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "314BA27975F458E13917B2BE91C9D5989A3E57C9E94B5A84DD52D0E21D27AE7F"
Last-Modified: Mon, 14 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7843
Expires: Wed, 16 Nov 2022 19:36:18 GMT
Date: Wed, 16 Nov 2022 17:25:35 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Backoff, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 16 Nov 2022 16:44:34 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2461
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vSWEVsSIjtInHmnE/HtMpsVqulFO9P3WYLyhufdAMkhLv4wfqQEs3HTWldvBLkxriehbSDTPFYQ=
x-amz-request-id: VR5E9PTCYRXP14A8
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 16 Nov 2022 17:14:46 GMT
age: 649
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 17:25:35 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.comodoca.com/
200 OK 472 B IP
Hash 3f18c2fa15715dd8bf1f608f068ec382
3a3d5a24be8276f7ad60baae66343907cb3a7b9d
b43006f6e3bfa87845d5136053a1ca0f08e15ef2a851b383e86c6ab96216fe67
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 16 Nov 2022 17:25:35 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 16 Nov 2022 16:40:50 GMT
Expires: Wed, 23 Nov 2022 16:40:49 GMT
Etag: "3a3d5a24be8276f7ad60baae66343907cb3a7b9d"
Cache-Control: max-age=601513,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: MISS
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76b1ed3f4a4f0af6-OSL
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Retry-After, ETag, Alert, Expires, Backoff, Content-Type, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 16 Nov 2022 17:25:01 GMT
cache-control: public,max-age=3600
age: 34
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 8345d8a2ca46c3b181a81d8626d0425f
5d9d088c5dca072bbc9ad23a15450e7af7829400
663b0e6c239177f35b5b48d4203ce95aabc0e5bab7911f5b1d9fb7624cac2e25
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6058
Cache-Control: max-age=148950
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:35 GMT
Etag: "6374a83b-1d7"
Expires: Fri, 18 Nov 2022 10:48:05 GMT
Last-Modified: Wed, 16 Nov 2022 09:07:07 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
www.igraonice.hr/
200 OK 23 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1411), with CRLF, LF line terminators
Hash 883fba0f6b983c7abbb115eff91000e1
3cd4360d4d8337d87cbe6689ee7acc179b46e2b7
4794494bec3f70c1557f29081a4d5ec9f0e77a3774d65f866ffada975b3e2c5f
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://igraonice.hr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:35 GMT
server: Apache
x-powered-by: PHP/5.6.40
expires: Mon, 26 Jul 1997 05:00:00 GMT
pragma: no-cache
x-frame-options: POWERCMS
x-ua-compatible: IE=edge;FF=3;OtherUA=4
cache-control: max-age=300, must-revalidate
x-content-type-options: nosniff
last-modified: Wed, 16 Nov 2022 17:25:35 GMT
vary: User-Agent
content-type: text/html; charset=utf-8
set-cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; path=/
PH_HPXY_CHECK=s1; path=/
X-Firefox-Spdy: h2
code.jquery.com/jquery-3.2.1.min.js
200 OK 30 kB URL HTTP/2 code.jquery.com/jquery-3.2.1.min.js
IP
File type ASCII text, with very long lines (32058)
Hash 148f8d3ffd9cc02048c5f4d1cc83c407
9f2b89cfd151be6a29b4d43ad64d164fb8471046
4dc681da48ba2b417e613e8e027ff5322963c3a3697a8ba97973cfefb48def5e
GET /jquery-3.2.1.min.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
content-encoding: gzip
content-length: 30125
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-15283"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668619536.dop230.sk1.t,1668619536.cds071.sk1.hn,1668619536.cds222.sk1.c
X-Firefox-Spdy: h2
code.jquery.com/jquery-migrate-3.0.0.js
200 OK 5.0 kB URL HTTP/2 code.jquery.com/jquery-migrate-3.0.0.js
IP
Hash a1ab44f15ae27f50bd5432a0d8a9c41a
da6cac4b271724aff3d13efd17a3154824aeaf20
cbf744382777029fa06a71bcd98055902ad3f94ba40e31d69e381b501813e23b
GET /jquery-migrate-3.0.0.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
content-encoding: gzip
content-length: 4960
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-3a4b"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668619536.dop230.sk1.t,1668619536.cds071.sk1.hn,1668619536.cds220.sk1.c
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RrObuJVj8ToJTQ5LoonjxA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: zxF0MMCgOt4pzyTvfEd3GoHJ0gU=
code.jquery.com/ui/1.10.1/themes/base/jquery-ui.css
200 OK 5.9 kB URL HTTP/2 code.jquery.com/ui/1.10.1/themes/base/jquery-ui.css
IP
File type ASCII text, with very long lines (339)
Hash ff960b5f26bc3f99c208134bd3d25bc5
bd71bfee058ccecf5b3d9cdc26258e6f4166755d
953952aca9c675f4a683ffb2facf35cf062688dafd4d7b50ca95df0732d8f89c
GET /ui/1.10.1/themes/base/jquery-ui.css HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
content-encoding: gzip
content-length: 5903
content-type: text/css
last-modified: Wed, 16 Feb 2022 10:50:40 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd700-7e0a"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1668619536.dop230.sk1.t,1668619536.cds071.sk1.hn,1668619536.cds254.sk1.c
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9d96ce61547f9d3184b571ec26c13f61
9607a743ed3f0c67ffd8aa22fdc76070c00b18fc
ce83e5b84417ac34b261442b70b71cec63124f57e8baa8acee68dc22c38763c7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.igraonice.hr/extensions/css/basic.css
200 OK 36 kB URL HTTP/2 www.igraonice.hr/extensions/css/basic.css
IP
File type ASCII text, with CRLF line terminators
Hash 6e8c176ad9c0f927543ff6e979ebd614
14a9777dffd628220cfc77ec199327b2cff2822b
0c5ebd9e62c45707b32e165fab01d0f31e1934d8587559239fc1ce0d89fe1d13
GET /extensions/css/basic.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Mon, 22 Apr 2019 20:06:26 GMT
etag: "8dbf-5872400d66e0a"
accept-ranges: bytes
content-length: 36287
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/pcms.login/user.login.css
200 OK 6.8 kB URL HTTP/2 www.igraonice.hr/extensions/js/pcms.login/user.login.css
IP
File type ASCII text, with CRLF line terminators
Hash b4549d6ccc8691a3d82ccef1b3c6aa19
a5673cccfb0ec1f407f70b1d4a389d1e623c92c9
401a75e92bfce528c47df0b328af936ac53fe36ab707ec789fab8f5334c0e647
GET /extensions/js/pcms.login/user.login.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "1a7a-583c3bc66d8a9"
accept-ranges: bytes
content-length: 6778
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/pcms.login/user.login.js
200 OK 758 B URL HTTP/2 www.igraonice.hr/extensions/js/pcms.login/user.login.js
IP
File type ASCII text, with CRLF line terminators
Hash 62317ca3f13ed0f48f5366ead4ad2578
3cf38f718fb7bb2c126c63028212054a1931efbf
6f7090f56802e93c8759beda512914a48f260e0a77360c102b9b39fc0792238b
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/pcms.login/user.login.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "2f6-583c3bc66e84a"
accept-ranges: bytes
content-length: 758
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/password_strength/password_strength_plugin.js
200 OK 6.2 kB URL HTTP/2 www.igraonice.hr/extensions/js/password_strength/password_strength_plugin.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 57e0ab9ad7427a8ad9303f67f70452ec
3187249b1ca980755a2ffc239faf7e7583722e76
0e1537938bda3f811577806aa60101a590d98ecfb17ed3a3ecac2b1ba1c7f7a5
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/password_strength/password_strength_plugin.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "1864-583c3bc66f01a"
accept-ranges: bytes
content-length: 6244
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/password_strength/style.css
200 OK 1.5 kB URL HTTP/2 www.igraonice.hr/extensions/js/password_strength/style.css
IP
File type ASCII text, with CRLF line terminators
Hash 88b2371564b51ff2afd2f2235489e53d
139cd40a22ce5f6efb58cb43348621118eb6faed
bd8a6d38c0c13f6c023db97524182b6e43eb1db73efe716d1e51a1d8a0c66c05
GET /extensions/js/password_strength/style.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "5de-583c3bc66f402"
accept-ranges: bytes
content-length: 1502
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.messi/messi.js
200 OK 9.5 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.messi/messi.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 5289d2c7b35e7ea8226ea310ec3a50bf
0181551aafccd30a21d890bb5252039d6cbed7f9
bd056563345b683e3dd405e4f09142219e4b7288632c323586e4f8d14aa45522
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.messi/messi.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "2529-583c3bc578662"
accept-ranges: bytes
content-length: 9513
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?hl=hr
200 OK 555 B URL HTTP/2 www.google.com/recaptcha/api.js?hl=hr
IP
File type ASCII text, with very long lines (850), with no line terminators
Hash d9360e3e46abedd2578dcbd052be0a24
b3642f7651fc3ac606fd5420e1fe564ca387db49
3813239f11ec6689836c9bfa11bdc302255439456af7e42525ce5be97f67fd4d
GET /recaptcha/api.js?hl=hr HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 16 Nov 2022 17:25:36 GMT
date: Wed, 16 Nov 2022 17:25:36 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 555
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.messi/messi.css
200 OK 17 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.messi/messi.css
IP
File type ASCII text, with very long lines (312), with CRLF line terminators
Hash 6c6100a2d3ea4f0f2812f5446235e6b3
f9b664e53f2010fca1d364ac969bd07248d4eb9b
8bdb896fc9d4ccbfde24a6b875fee6ca59cf425e087565ae05acd7f439177fce
GET /extensions/js/jquery.messi/messi.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "427b-583c3bc579603"
accept-ranges: bytes
content-length: 17019
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.dcmegamenu/jquery.dcmegamenu.custom.js
200 OK 138 B URL HTTP/2 www.igraonice.hr/extensions/js/jquery.dcmegamenu/jquery.dcmegamenu.custom.js
IP
File type ASCII text, with CRLF line terminators
Hash 983c361b969d42117bdbbe29eb1411e3
c94839333544486ad0db2ca8d0caeee803c1f522
90b6f9a966941663ab06c5141d3991a20ecfb3fc5b4460603205c9c96ab5d6fe
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.dcmegamenu/jquery.dcmegamenu.custom.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "8a-583c3bc53ade8"
accept-ranges: bytes
content-length: 138
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.dcmegamenu/jquery.dcmegamenu.1.3.3.js
200 OK 7.0 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.dcmegamenu/jquery.dcmegamenu.1.3.3.js
IP
File type ASCII text, with CRLF line terminators
Hash fd0e018b8af9903658b3f9906265604f
895ad887bd0ffbff84d7c8709594fa06f6059956
6430be970d28725ec0eb96c634e427c75f7b79d43cd14799db7c05e268886468
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.dcmegamenu/jquery.dcmegamenu.1.3.3.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "1b4b-583c3bc53a618"
accept-ranges: bytes
content-length: 6987
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1b43631817b375ad10d08b6fd9ff9249
ca2988f207b07f60e4204c701e127f84a69a5446
d61ac811e9c087f7fe5a9baeaf3065ac313c1e777f169cf91516ef4b83304f1f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8f69270501ab9db87293d702ce920198
56fff336cbae9601613470a96b470f677ca63fdb
00159fa0d3a7a8d9bd203a80c02dcd295e04ad152f4f05230222a9d71c1773b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jqueryui/1.10.2/jquery-ui.min.js
200 OK 61 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jqueryui/1.10.2/jquery-ui.min.js
IP
File type ASCII text, with very long lines (32127)
Hash a4fae3bd93aeeff434297afd1aee71fa
fc48093eea0f31043d6e4b863d74c001ebba7688
c425c0431c3199eaa90590fcf017a18f35226445bd531ffcf0aa7dd0d100e42d
GET /ajax/libs/jqueryui/1.10.2/jquery-ui.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 60637
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Nov 2022 12:29:31 GMT
expires: Fri, 10 Nov 2023 12:29:31 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 536165
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.dcmegamenu/jquery.dcmegamenu.css
200 OK 8.1 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.dcmegamenu/jquery.dcmegamenu.css
IP
File type ASCII text, with very long lines (676), with CRLF line terminators
Hash 1d81ee51c4f6138d6c9f4ba25f9098e6
0f4dc25432e4aa84542a9bd5eacb93a94c5e78e4
eec05006e00b6679b19200c46014b70cb352ac9026facf118d1a70b3c780d2f4
GET /extensions/js/jquery.dcmegamenu/jquery.dcmegamenu.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "1fa9-583c3bc5436a4"
accept-ranges: bytes
content-length: 8105
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.bxslider/bx-custom.js
200 OK 480 B URL HTTP/2 www.igraonice.hr/extensions/js/jquery.bxslider/bx-custom.js
IP
File type ASCII text, with CRLF line terminators
Hash bd4e5cefee60c7290dbc3d31533d79bb
7c95fafb62591ea242b852eef582c3d2986d52e9
20c79a6d33088a32d61ffe751f009b56fc152e0ce5d8d8a953433bbaed6245a7
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.bxslider/bx-custom.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "1e0-583c3bc68f3c7"
accept-ranges: bytes
content-length: 480
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.bxslider/jquery.bxslider.css
200 OK 4.0 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.bxslider/jquery.bxslider.css
IP
File type ASCII text, with CRLF line terminators
Hash 6539acc54958d527a74fbebf967a5eb1
397c5ed3eb96091a3b34594c12e5d0755586c0b1
84a31b771e1929b8ebbcf00018c1db81cc7f3ca1d6c52cba7c1aaad7c2acc7ac
GET /extensions/js/jquery.bxslider/jquery.bxslider.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "fa8-583c3bc68efdf"
accept-ranges: bytes
content-length: 4008
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.social/jquery.social.custom.css
200 OK 540 B URL HTTP/2 www.igraonice.hr/extensions/js/jquery.social/jquery.social.custom.css
IP
File type ASCII text, with CRLF line terminators
Hash a5c7144dc5d829a813831192b4c01ea0
1e2750e458c556027ea8b595f58bd5ac9722d546
6c2ef7af2a35c39f6df349c05bd0ce30f8bf11c2f410a395f200c0c48dde4331
GET /extensions/js/jquery.social/jquery.social.custom.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "21c-583c3bc55193a"
accept-ranges: bytes
content-length: 540
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.social/jquery.social.custom.js
200 OK 1.3 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.social/jquery.social.custom.js
IP
File type ASCII text, with CRLF line terminators
Hash 919597ce9446561930f63b127d04421c
2d33f5bb5ef4c61a73f897be3e3e6b74b1d9eb30
9e6e6f4b823dc10b304be87d0839b0bbf7100d636d53e44e9df6b87348989a77
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.social/jquery.social.custom.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "503-583c3bc553c63"
accept-ranges: bytes
content-length: 1283
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/to-top/to-top-script.js
200 OK 308 B URL HTTP/2 www.igraonice.hr/extensions/js/to-top/to-top-script.js
IP
File type ASCII text, with CRLF line terminators
Hash 3241d57576ca8b90b8bb45ba6fd3ca94
59bae422d8ec7e43e72cec97cc3206a0cca8ecad
3ecb6b60bc7b93a814b166175653c1aa30d287d3c21bb62376da02ab76b5370b
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/to-top/to-top-script.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "134-583c3bc556b44"
accept-ranges: bytes
content-length: 308
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/to-top/jquery.ui.totop.js
200 OK 1.9 kB URL HTTP/2 www.igraonice.hr/extensions/js/to-top/jquery.ui.totop.js
IP
File type HTML document, ASCII text, with CRLF line terminators
Hash 9d138dba82d033f5aa0d668e881b3f1f
325e210474be0d834e0b19d683cb4ef8d7194b03
add5c1ea7702dab0408225947e0ee73a8b8a75e2982b2c031e0cf031d9718c14
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/to-top/jquery.ui.totop.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "73c-583c3bc556b44"
accept-ranges: bytes
content-length: 1852
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/to-top/ui.totop.css
200 OK 801 B URL HTTP/2 www.igraonice.hr/extensions/js/to-top/ui.totop.css
IP
File type ASCII text, with CRLF line terminators
Hash e2128671f866b5aeb09986b67ec88ae2
b3eaa1a22497b5afb5b995288bc8b5b7cb5b3a73
b5ca26cfd4705a13eac677d677343126f29a95876cf0481dff62d5b1fdb85355
GET /extensions/js/to-top/ui.totop.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "321-583c3bc555ba4"
accept-ranges: bytes
content-length: 801
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.dcmegamenu/jquery.hoverIntent.minified.js
200 OK 1.6 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.dcmegamenu/jquery.hoverIntent.minified.js
IP
File type ASCII text, with very long lines (1287), with CRLF line terminators
Hash f0a69d33c04a63185b58203497e9b16b
3a560aeeca92058811e63eda8471d2cd338b4dee
6c870f5b427f065a49166da9126175a718ca748e3b65d7aea05966d6decea637
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.dcmegamenu/jquery.hoverIntent.minified.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:45 GMT
etag: "65f-583c3bc53a230"
accept-ranges: bytes
content-length: 1631
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
use.fontawesome.com/releases/v5.6.3/css/all.css
200 OK 12 kB URL HTTP/2 use.fontawesome.com/releases/v5.6.3/css/all.css
IP
File type ASCII text, with very long lines (53592), with no line terminators
Hash 1689faefd29471964005ddfd4f32ed2c
32e74355def490c278774f9746be69fe3a1130f4
429e619992aa3708650e4c3e00c3daa1eb01f07dc7583fa48029422a9b8bfbe0
GET /releases/v5.6.3/css/all.css HTTP/1.1
Host: use.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.igraonice.hr
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
content-type: text/css
x-amz-id-2: Jlkg96AuX/I0yLNOsYlOMqEjTJEn2xwieuW3F4qc9BPUMliqRtAcgW7pnDk0u1Bt6Fab4/EKRBE=
x-amz-request-id: Q9PNJVTR47T5AZHB
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:44:33 GMT
etag: W/"dc93d584e41f8417f6b7163320d34329"
cache-control: max-age=31556926
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=in9%2Fl6rCG7rUmMsqH1CJg3o%2F%2F%2Bn2Hc%2BquzMtvSMT5jlraYApsHB2KQJ4YBKLm7DKCDk3NjXEp20tS1hBFZKCgXAml0t4P3yvywhrFsjwomNLTj6xLOaG5chu1%2B1S2FaVy29%2FS9GH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76b1ed455ba9e664-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.ibb.co/FYpj8WL/izdvojeno-jumbo-loyalty.png
200 OK 162 kB URL HTTP/2 i.ibb.co/FYpj8WL/izdvojeno-jumbo-loyalty.png
IP
File type PNG image data, 600 x 130, 8-bit/color RGBA, non-interlaced\012- data
Size 162 kB (162369 bytes)
Hash 3755780711da46da6bbfdb6a36923d83
65bacb8cf67a7c3e471fee7c1a1d6ed43fba3aab
cb8890567435613a4cdcf1452d6f5bb85798e60f9f6a77bc2fea115e53879231
GET /FYpj8WL/izdvojeno-jumbo-loyalty.png HTTP/1.1
Host: i.ibb.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 16 Nov 2022 17:25:36 GMT
content-type: image/png
content-length: 162369
last-modified: Sat, 22 Aug 2020 15:42:51 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.bxslider/jquery.bxslider.js
200 OK 52 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.bxslider/jquery.bxslider.js
IP
File type ASCII text, with CRLF line terminators
Hash d23b0cbf04524b7b7b27652e8af20b02
6915882fd15ae02c13d05acec12e94cdc26fcf26
80e09f8b92b6c1baa23a15873508282cc667bb7693bb7b1cc800d65f6e231364
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.bxslider/jquery.bxslider.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "cad0-583c3bc68f3c7"
accept-ranges: bytes
content-length: 51920
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald:400,300,700&subset=latin,latin-ext
200 OK 1.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Oswald:400,300,700&subset=latin,latin-ext
IP
Hash cb99db343527ec55d19db9261da35072
5e98e6ddf3eabb3635c477b6de51d6df5750c28a
56a905024c075980aeeb89ecd087576178bc5401126edc651ded8f5f6219071c
GET /css?family=Oswald:400,300,700&subset=latin,latin-ext HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 16 Nov 2022 17:25:36 GMT
date: Wed, 16 Nov 2022 17:25:36 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.slick.menu/jquery.slicknav.js
200 OK 16 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.slick.menu/jquery.slicknav.js
IP
File type ASCII text, with very long lines (348), with CRLF line terminators
Hash 6b76a9cbd9a5d9106bcf23e70642407c
5211149af0c1576db3a0b700f3443ebf8109baed
1745479779e5f1a651548694c615c06cfe617303885cd9a847548c09840855a4
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.slick.menu/jquery.slicknav.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "3e47-583c3bc65e28b"
accept-ranges: bytes
content-length: 15943
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.slick.menu/slicknav.css
200 OK 3.6 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.slick.menu/slicknav.css
IP
File type ASCII text, with CRLF line terminators
Hash 6dcddef83a29e58a1ec3b596a3b82fd8
e332e5e86f611d6d532442e4eb84bd1c9462ea67
b1cea6545db4ecfb440481a06d69a2ca7b44b8bc61d7012a973f84b11c04976b
GET /extensions/js/jquery.slick.menu/slicknav.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "deb-583c3bc65dea3"
accept-ranges: bytes
content-length: 3563
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.classie/classie.js
200 OK 2.0 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.classie/classie.js
IP
File type ASCII text, with CRLF line terminators
Hash 18bab40d11a681539647258dde241e6f
138eb531d1bc59421d0c4b1a6ef150919c1d85f2
ae0cb1df38550895bed03aac78fd08e7cd0f5d3b05a9dbb68fa33a1405049ce0
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.classie/classie.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "7a2-583c3bc66c139"
accept-ranges: bytes
content-length: 1954
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.slick.menu/nav-slick-custom.js
200 OK 65 B URL HTTP/2 www.igraonice.hr/extensions/js/jquery.slick.menu/nav-slick-custom.js
IP
File type ASCII text, with CRLF line terminators
Hash a151c4a8ba3d021d279a8e099cfb408a
d4a874100c4a05e1b89624f75051db59a2d9d07f
acf7351a4a20ca736754d303e9c09227f8190e0f6237716c125bdafb64d66226
Analyzer Verdict Alert fortinet Malware
GET /extensions/js/jquery.slick.menu/nav-slick-custom.js HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "41-583c3bc65dea3"
accept-ranges: bytes
content-length: 65
vary: User-Agent
cache-control: max-age=28800
content-type: application/javascript
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 005be9d34c8a56a463519a6d311aba7a
f4bdd0803f2d1886e7619048e35baafca52d5ee5
42ea479086c7c846af6ee65f9db72446b8aeb032c04ea2b552513944dd606c58
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=160762
Date: Wed, 16 Nov 2022 17:25:36 GMT
Etag: "6374d6aa-1d7"
Expires: Fri, 18 Nov 2022 14:04:58 GMT
Last-Modified: Wed, 16 Nov 2022 12:25:14 GMT
Server: ECS (nyb/1D04)
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dJ1jicIDhp9nibclrJcuaD2UJLXbGFdbWpGkHguiqojuSAI3_gFwOw==
Age: 5984
www.igraonice.hr/templates/css/media_queries.css
200 OK 8.5 kB URL HTTP/2 www.igraonice.hr/templates/css/media_queries.css
IP
File type ASCII text, with CRLF line terminators
Hash 20bc1a4f46a6c7b2b26e721daebdf6b9
2d67d6625c32a26cb999acaf1f1804f6f245022a
a0c29c7da804e26ae5c32a869e0a4a5d84a541bf00b8fefea1fe34e77a160aee
GET /templates/css/media_queries.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Mon, 22 Apr 2019 20:07:03 GMT
etag: "215b-58724031174fa"
accept-ranges: bytes
content-length: 8539
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/social_networks/linkedin.png
200 OK 710 B URL HTTP/2 www.igraonice.hr/templates/img/social_networks/linkedin.png
IP
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash ad906634d6001326fce184f44cac6b94
1de09ed0b26fc2bdba5c186e963929702d688762
897edc57b1b940dbad5c26da981808577f7d93df225f157243be5d23d35b31b9
GET /templates/img/social_networks/linkedin.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "2c6-583c3bc693a19"
accept-ranges: bytes
content-length: 710
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/social_networks/twitter.png
200 OK 750 B URL HTTP/2 www.igraonice.hr/templates/img/social_networks/twitter.png
IP
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 4c978b5c06b51b4a0b9ca03b1c0cf4c9
3f5d2d745d0de3d1904b8f3131571cf9d88ba6c5
d314887d0bb8f9a9c634270251f746a86642e512508f9a3b25505230a158c672
GET /templates/img/social_networks/twitter.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "2ee-583c3bc697c83"
accept-ranges: bytes
content-length: 750
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/social_networks/facebook.png
200 OK 485 B URL HTTP/2 www.igraonice.hr/templates/img/social_networks/facebook.png
IP
File type PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash 062d7d9deeb98a18479f24ec20b03886
c24a5e33f944f86adb9fde8baa62df8816abb157
1fe268384b84cc110f7fbc1aa8380f936a227132af369c0c9ea6d0e037b0d7c7
GET /templates/img/social_networks/facebook.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "1e5-583c3bc693a19"
accept-ranges: bytes
content-length: 485
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/torte.jpg
200 OK 8.4 kB URL HTTP/2 www.igraonice.hr/templates/img/torte.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x69, components 3\012- data
Hash 7eae02dc359e4a001bf74be6ee856bef
9ba766a189ce4d4bcae30f221ac984ce08cf2b93
62df35ce0dc227a4e584d0c516e0065c8b4566a9abd64e5eefdd66164382f0b0
GET /templates/img/torte.jpg HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "20f6-583c3bc6ad834"
accept-ranges: bytes
content-length: 8438
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/jpeg
X-Firefox-Spdy: h2
s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js
200 OK 143 kB URL HTTP/1.1 s3.amazonaws.com/downloads.mailchimp.com/js/mc-validate.js
IP
File type ASCII text, with very long lines (32132)
Size 143 kB (143249 bytes)
Hash 6465dd4a8331265e6629cd069e03504c
581e1ae78452c7433d842af8e83afcebe36f17a6
b15aceb04dbf5604df5617cfe984f48479cb131c1df02825d1c24e9f35d01857
GET /downloads.mailchimp.com/js/mc-validate.js HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: cVTQNevHH39EDd1bcZFbojINGuXcPo2FVQGGPVxMzqNc8huUVORvoWjW1hwbVoI/IxKLunJJpzI=
x-amz-request-id: Q9PRFF9XN3JHNVHK
Date: Wed, 16 Nov 2022 17:25:37 GMT
Last-Modified: Mon, 20 Aug 2018 17:42:38 GMT
ETag: "6465dd4a8331265e6629cd069e03504c"
Cache-Control: public,max-age=2592000
Accept-Ranges: bytes
Content-Type: application/javascript
Server: AmazonS3
Content-Length: 143249
www.igraonice.hr/templates/css/style.css
200 OK 47 kB URL HTTP/2 www.igraonice.hr/templates/css/style.css
IP
File type ASCII text, with CRLF line terminators
Hash 905ca856bcb92b0474a47f6a34e27d1b
86aef23df99eaea6a90f82aae0a26a97b0e07871
9faa5de4592f03347ccc4e48445a48b5dbda54e65ce45f9f502c5f8185173f4e
GET /templates/css/style.css HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Wed, 26 Jun 2019 20:58:05 GMT
etag: "b8f8-58c404d3c0fd2"
accept-ranges: bytes
content-length: 47352
vary: User-Agent
cache-control: max-age=28800
content-type: text/css
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/site/1-igraonicehr-logo.png
200 OK 25 kB URL HTTP/2 www.igraonice.hr/media/images/site/1-igraonicehr-logo.png
IP
File type PNG image data, 250 x 74, 8-bit/color RGBA, non-interlaced\012- data
Hash 55c46c913af54872f7f4c5ae1da50dd4
b693bfb6f054f5f66be811b8ef43ab72460108b8
5bd1ce7923c4c9de35b4cfc07c288dc09eaa5a5b218540ea9cb6459567182b0f
GET /media/images/site/1-igraonicehr-logo.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:51 GMT
etag: "61d5-583c3bcb98acd"
accept-ranges: bytes
content-length: 25045
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f65bbeba59ba5e31638a17325798582f
4e544597bb0593697cec412fb97217899add2d96
adc5670dce70829fcd1edfa5c47f3bf14ee0ee7eb1e090a62818e679b91585d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f65bbeba59ba5e31638a17325798582f
4e544597bb0593697cec412fb97217899add2d96
adc5670dce70829fcd1edfa5c47f3bf14ee0ee7eb1e090a62818e679b91585d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f65bbeba59ba5e31638a17325798582f
4e544597bb0593697cec412fb97217899add2d96
adc5670dce70829fcd1edfa5c47f3bf14ee0ee7eb1e090a62818e679b91585d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f65bbeba59ba5e31638a17325798582f
4e544597bb0593697cec412fb97217899add2d96
adc5670dce70829fcd1edfa5c47f3bf14ee0ee7eb1e090a62818e679b91585d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
200 OK 25 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 25372, version 1.0\012- data
Hash fe424f96cb627d8b835cb001af17f56e
c5b4368fed99812a99036fba86d01367b5549505
35c92598a5f32c018dc630f57b183b0284c211ce9c222e5b36840a62115262f1
GET /s/oswald/v49/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.igraonice.hr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25372
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 21:14:39 GMT
expires: Tue, 14 Nov 2023 21:14:39 GMT
cache-control: public, max-age=31536000
age: 159058
last-modified: Mon, 18 Jul 2022 19:24:05 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752Fz8Ghe4.woff2
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/oswald/v49/TK3iWkUHHAIjg752Fz8Ghe4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20164, version 1.0\012- data
Hash f49d37ca1e3a24edd721d525bd1a5415
2b3efcadb02e456cda9f2645711ae533f0ffb50f
c25293f4637ada03ea626b30464dbfdf00eb1aa827fbdc6e68f1025361e15358
GET /s/oswald/v49/TK3iWkUHHAIjg752Fz8Ghe4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.igraonice.hr
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 20164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 21:24:35 GMT
expires: Tue, 14 Nov 2023 21:24:35 GMT
cache-control: public, max-age=31536000
age: 158462
last-modified: Mon, 18 Jul 2022 19:13:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f65bbeba59ba5e31638a17325798582f
4e544597bb0593697cec412fb97217899add2d96
adc5670dce70829fcd1edfa5c47f3bf14ee0ee7eb1e090a62818e679b91585d6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.igraonice.hr/templates/js/browser-css-fix.php
200 OK 79 kB URL HTTP/2 www.igraonice.hr/templates/js/browser-css-fix.php
IP
Hash 2e4e4d3d737f9815a6bb90b8539626fd
2c46f2b829c89c358a8e69360a91c3d68c05e168
c5552af0ef56c59c35ea0ad193a7b1ad95eb97a99d823d56a80f783102c7b90e
Analyzer Verdict Alert fortinet Malware
GET /templates/js/browser-css-fix.php HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-powered-by: PHP/5.6.40
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-frame-options: POWERCMS
x-ua-compatible: IE=edge;FF=3;OtherUA=4
x-content-type-options: nosniff
last-modified: Wed, 16 Nov 2022 17:25:36 GMT
vary: User-Agent
content-type: text/html; charset=utf-8
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/modules/slider/thumbs/600-330/slider.png
200 OK 45 kB URL HTTP/2 www.igraonice.hr/media/images/modules/slider/thumbs/600-330/slider.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 600x330, components 3\012- data
Hash 44f71482495ad13ff97a91b85db2a9bf
5253b0ef391ef50e480d773f3d0e513e79b802fe
cf0db0a001e1e5012c4de639c9c9569bd40f8ce4d739cf24edd22b4a87fbe2f5
GET /media/images/modules/slider/thumbs/600-330/slider.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sat, 22 Aug 2020 16:01:50 GMT
etag: "b05a-5ad7978ae45f4"
accept-ranges: bytes
content-length: 45146
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3429
Expires: Wed, 16 Nov 2022 18:22:46 GMT
Date: Wed, 16 Nov 2022 17:25:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3429
Expires: Wed, 16 Nov 2022 18:22:46 GMT
Date: Wed, 16 Nov 2022 17:25:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3429
Expires: Wed, 16 Nov 2022 18:22:46 GMT
Date: Wed, 16 Nov 2022 17:25:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3429
Expires: Wed, 16 Nov 2022 18:22:46 GMT
Date: Wed, 16 Nov 2022 17:25:37 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9426341bb128c1b6ba16e64df78152b4
08859a30ed6dee233cde4d77f2a04f058991502b
209a0520d5fb1eeb6dfa7d2f4c334a7109cc885cf4be8605bfe5a8f52232306d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "209A0520D5FB1EEB6DFA7D2F4C334A7109CC885CF4BE8605BFE5A8F52232306D"
Last-Modified: Tue, 15 Nov 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3429
Expires: Wed, 16 Nov 2022 18:22:46 GMT
Date: Wed, 16 Nov 2022 17:25:37 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e399ef-c649-4728-84e9-6fea03ea9b5a.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e399ef-c649-4728-84e9-6fea03ea9b5a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ae0ab55e0e77a4265808a6689f25cbc3
187e6b340b43eb1aa0c724b749db7c20a486706a
3881e5ad44b9b2fae82510794af43d14e304ce624f26f66523f85d58fea063dc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F18e399ef-c649-4728-84e9-6fea03ea9b5a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9625
x-amzn-requestid: 9bd72b4a-2ac0-423f-b0e2-73fd51e02e97
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYEBHTjIAMFvOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406e6-57f5412d5eca6d640a0f590d;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:46 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qWuPuzaXg4Cfowj2mJuTEUIH3UVCely6rXVpbiNGxIDgBAt38UOBxw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:54:50 GMT
etag: "187e6b340b43eb1aa0c724b749db7c20a486706a"
content-type: image/jpeg
age: 70247
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cd5bdc050716bb76afe8090fc81617e7
5109c156b180727767fc03c411190ccc0d3fb5fc
9b13e7838946c6654dda17886c2ca8d42de934acb93f4bddb1008dfa1bd1ea99
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af930b9-b854-4316-8425-07c6aa06477a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11715
x-amzn-requestid: 20e508bd-6568-4225-9bee-c683a49d44f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bdMhUHkpIAMFfJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ec13b-7dc726b94a37fc667e2e6646;Sampled=0
x-amzn-remapped-date: Fri, 11 Nov 2022 21:40:11 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ZLWa-RphwZqiAmeqffmEE8Mmfsfs9ZYz0bmANBEc5Ru1--VKDL4Fsw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 22:17:19 GMT
age: 68898
etag: "5109c156b180727767fc03c411190ccc0d3fb5fc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30efee28-35ab-4b55-b685-02cbd4c5c8c8.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30efee28-35ab-4b55-b685-02cbd4c5c8c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b31091803f98744f4da3b311467300a7
d829c5d23a494bc901d925dd02b84c470a0de479
c1cb88b82d8b5a82019da970f812cd31e13086c2da8498a21a57e7238aa34fe8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F30efee28-35ab-4b55-b685-02cbd4c5c8c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8971
x-amzn-requestid: b5dd68c5-7146-4d31-a7fd-4ac4c474119a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bnb6bGeyoAMFV9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6372d9dc-2ca4003e65d69039389bc676;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 00:14:20 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 8TqIvhJUq_yG_iMFds_btqtYsrNzoaZeIQgOP0-Kc60yuQFOPYEXRA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 09:04:35 GMT
age: 30062
etag: "d829c5d23a494bc901d925dd02b84c470a0de479"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b00960f-2d08-4518-83c0-1d7f0f3c973c.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b00960f-2d08-4518-83c0-1d7f0f3c973c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 53d2d9380ba28ed0656b54c22bc56766
757f8e6306effbab70d99757c5672564cfc9f623
6d6c41527ae28cdce016470ec1eb87e0ed384f3ef721838724f29845f3bd8dac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3b00960f-2d08-4518-83c0-1d7f0f3c973c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8990
x-amzn-requestid: cb142f4b-787e-4b3c-9d75-72579105db60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYFOHi8IAMFpDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406ee-504a14105d2be58b1ce71c18;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: K-Js3sppuhzF03KF0M0wVw5GCSaq5VfHDbzU2DyEwjiARRDsccGYbQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:54:54 GMT
etag: "757f8e6306effbab70d99757c5672564cfc9f623"
content-type: image/jpeg
age: 70243
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F520b9f3d-222d-4840-bd88-673cedf9b5fc.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F520b9f3d-222d-4840-bd88-673cedf9b5fc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a698bf97cc6c0c464ed1a2b2adb1c1d3
a3977e8cde4b6ad7ef2e75a477e71b7bbbec21f0
64d52d8983b2bf30b9b1f260b8d6534664024b8dfda0da273307ee510ed33aad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F520b9f3d-222d-4840-bd88-673cedf9b5fc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4919
x-amzn-requestid: aae0d2da-e891-40a6-bd83-8942fc3ef0c0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bqYFFEnxoAMFdCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637406ed-6ff1cc593aa1c934659030db;Sampled=0
x-amzn-remapped-date: Tue, 15 Nov 2022 21:38:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: EoSIjUgouoxAtnpWMBPNTjLfmm_Anv7R5mYNdb5Ik9RrgxJg_nZ1rQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 b23fb37cd7fff033ab21e3284f558a28.cloudfront.net (CloudFront), 1.1 google
date: Tue, 15 Nov 2022 21:48:37 GMT
age: 70620
etag: "a3977e8cde4b6ad7ef2e75a477e71b7bbbec21f0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0be1985-4e6e-4cc3-9b6e-2fc0d94bc02b.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0be1985-4e6e-4cc3-9b6e-2fc0d94bc02b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 96b4478c098865b0d19738098db61d64
0e18a8c51596c8a4d84a142a57ffe376294833cc
9c9e433cf8f2167e4cfc3cff247eee85ebb9977e338e6e144acaea830db17c2c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc0be1985-4e6e-4cc3-9b6e-2fc0d94bc02b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5749
x-amzn-requestid: ee63924c-be5c-4f48-9fe0-cc2ba3f93ab8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bX5qxHgWoAMFiZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636ca311-32c6916d41247a9b563c952f;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 07:06:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5hBm4pVThVud5Nr3ReI8uRgqhR3MVsqS4qGEcE5Wrs3pqzyMgH2CRg==
via: 1.1 33d72803ad26b392c1b578a2b1276580.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 16 Nov 2022 05:57:01 GMT
age: 41316
etag: "0e18a8c51596c8a4d84a142a57ffe376294833cc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.gstatic.com/mapspro/_/ss/k=mapspro.gmeviewer.h3uxRJ6-CPM.L.F4.O/d=0/rs=ABjfnFXuc0lYgvx7jCy-AcJlibTGxS-B2Q
200 OK 42 kB URL HTTP/2 www.gstatic.com/mapspro/_/ss/k=mapspro.gmeviewer.h3uxRJ6-CPM.L.F4.O/d=0/rs=ABjfnFXuc0lYgvx7jCy-AcJlibTGxS-B2Q
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 27113dccde0352a8ff26aef2919f234f
c3c85a0114877ed457dba82077bc2bbb7d3a1f78
49f2dbcedb3769dff875b86e5151fcfb091e01f50c3b05e5a2dd6ce818c954d9
GET /mapspro/_/ss/k=mapspro.gmeviewer.h3uxRJ6-CPM.L.F4.O/d=0/rs=ABjfnFXuc0lYgvx7jCy-AcJlibTGxS-B2Q HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-mapspro
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="geo-mapspro"
report-to: {"group":"geo-mapspro","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-mapspro"}]}
content-length: 41991
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 20:55:48 GMT
expires: Tue, 14 Nov 2023 20:55:48 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 17 Oct 2022 21:39:55 GMT
content-type: text/css; charset=UTF-8
age: 160189
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/mapspro/_/js/k=mapspro.gmeviewer.hr.gcREpcuVdPs.O/d=0/rs=ABjfnFU5XB5Kc95c1Snp89SvpR4k_lpCIQ/m=gmeviewer_base
200 OK 240 kB URL HTTP/2 www.gstatic.com/mapspro/_/js/k=mapspro.gmeviewer.hr.gcREpcuVdPs.O/d=0/rs=ABjfnFU5XB5Kc95c1Snp89SvpR4k_lpCIQ/m=gmeviewer_base
IP
File type ASCII text, with very long lines (654)
Size 240 kB (239805 bytes)
Hash 8ff20744807598b796a7188785758859
87a6eaecf21d73b18b95699233ec673245068d98
6ff0fdefc9f62fbcd43ee9ada85edf22d2491a5d6e20d2217610322eeb2ebd7e
GET /mapspro/_/js/k=mapspro.gmeviewer.hr.gcREpcuVdPs.O/d=0/rs=ABjfnFU5XB5Kc95c1Snp89SvpR4k_lpCIQ/m=gmeviewer_base HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-mapspro
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="geo-mapspro"
report-to: {"group":"geo-mapspro","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-mapspro"}]}
content-length: 239805
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 14 Nov 2022 22:30:19 GMT
expires: Tue, 14 Nov 2023 22:30:19 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 10 Nov 2022 04:34:30 GMT
content-type: text/javascript; charset=UTF-8
age: 154518
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:34:08 GMT
expires: Thu, 09 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 597089
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 18:53:49 GMT
expires: Thu, 09 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 599508
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
mt.googleapis.com/vt/icon/name=icons/onion/SHARED-mymaps-pin-container-bg_4x.png,icons/onion/SHARED-mymaps-pin-container_4x.png,icons/onion/1899-blank-shape_pin_4x.png&highlight=ff000000,0288D1&scale=2.0
200 OK 980 B URL HTTP/2 mt.googleapis.com/vt/icon/name=icons/onion/SHARED-mymaps-pin-container-bg_4x.png,icons/onion/SHARED-mymaps-pin-container_4x.png,icons/onion/1899-blank-shape_pin_4x.png&highlight=ff000000,0288D1&scale=2.0
IP
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 1c35128c26299a39bcaae4acb9c04f0c
527082158709755f24753d2e926030d50df97a88
e2d09246c364f928ce2aed8cc7e36ba71301f8104d3f027be10b1a493b0983ef
GET /vt/icon/name=icons/onion/SHARED-mymaps-pin-container-bg_4x.png,icons/onion/SHARED-mymaps-pin-container_4x.png,icons/onion/1899-blank-shape_pin_4x.png&highlight=ff000000,0288D1&scale=2.0 HTTP/1.1
Host: mt.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-security-policy: script-src 'none'; object-src 'none'; base-uri 'none'
x-content-type-options: nosniff
x-server-version-bin: CggIBBC0pMqbBg==
server: scaffolding on HTTPServer2
content-length: 980
x-xss-protection: 0
x-frame-options: SAMEORIGIN
date: Tue, 15 Nov 2022 17:37:06 GMT
expires: Sun, 30 Jul 2023 22:27:28 GMT
cache-control: public, max-age=22222222
content-type: image/png
age: 85711
server-timing: gfet4t7; dur=0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Nov 2022 14:07:32 GMT
expires: Thu, 16 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 11886
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/igraonice-ftlogo.png
200 OK 10 kB URL HTTP/2 www.igraonice.hr/templates/img/igraonice-ftlogo.png
IP
File type PNG image data, 138 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash 7337b51b10b32e9f2bdbf9d0f5ca604f
5534bacd693ed2fc19d3002b3b17632fe2e5ffb9
2f7a7c356b9458d8a859ee267c74fb84d015707c45b7a6064f5eca61850ca05e
GET /templates/img/igraonice-ftlogo.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "2885-583c3bc697c83"
accept-ranges: bytes
content-length: 10373
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/modules/news/articles/thumbs/320-240/jumbo-loyalty-program.png
200 OK 20 kB URL HTTP/2 www.igraonice.hr/media/images/modules/news/articles/thumbs/320-240/jumbo-loyalty-program.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality", baseline, precision 8, 320x240, components 3\012- data
Hash 6416641f1af204cfc603dc05598844c5
8b390b37d339dd772cf25f0a8a34d4a96f367217
87b7dff2ce47314536aae546262d9babf887dcd39b75f06691cb696ca177f047
GET /media/images/modules/news/articles/thumbs/320-240/jumbo-loyalty-program.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sat, 22 Aug 2020 16:06:40 GMT
etag: "4cad-5ad7989eb277f"
accept-ranges: bytes
content-length: 19629
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/creditcard/american.png
200 OK 2.2 kB URL HTTP/2 www.igraonice.hr/templates/img/creditcard/american.png
IP
File type PNG image data, 52 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash eed5e03299b2b146819fd390f5dd8960
b6e1a46abcc7ba75715cd6563cc3424dc2933d9a
2b17b14067eb7a0e629cb1798027cf2084597d6c571cf873dafd114db9f2c18d
GET /templates/img/creditcard/american.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "8a8-583c3bc6b8419"
accept-ranges: bytes
content-length: 2216
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/creditcard/diners.png
200 OK 3.7 kB URL HTTP/2 www.igraonice.hr/templates/img/creditcard/diners.png
IP
File type PNG image data, 52 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 9637f50c585b2e9e8a409262739d6795
e2097a9b7fe0e093f40be000ebde45258607e0ab
67fa74bcf3777aa3405af40b0c9818ce60345d32e3484f293419cd839e6010fa
GET /templates/img/creditcard/diners.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "e70-583c3bc6b7860"
accept-ranges: bytes
content-length: 3696
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/creditcard/visa-electron.png
200 OK 1.8 kB URL HTTP/2 www.igraonice.hr/templates/img/creditcard/visa-electron.png
IP
File type PNG image data, 52 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 3e04b590111ddd7f2b674802daf2e344
a8bddcd3506e5639c5e783447581c4d5c5a33df6
28eaaf910efbc4f44efde4205059f599ad6f881f4d9387c0cebd473aeffeba40
GET /templates/img/creditcard/visa-electron.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "723-583c3bc6b8801"
accept-ranges: bytes
content-length: 1827
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/freind_novival.png
200 OK 8.3 kB URL HTTP/2 www.igraonice.hr/templates/img/freind_novival.png
IP
File type PNG image data, 150 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash 409d19bec42340573417a12ea294d4c5
58ec9831c62e5e114674cbf8a116e82e9a1738fb
0c873583d52a2dc462694f90b12bef8a3abc3fa28f1f166c028d5e1b96f4ae67
GET /templates/img/freind_novival.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "2077-583c3bc6bf564"
accept-ranges: bytes
content-length: 8311
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/creditcard/mastercard.png
200 OK 1.8 kB URL HTTP/2 www.igraonice.hr/templates/img/creditcard/mastercard.png
IP
File type PNG image data, 52 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash b93b5572a7522cff4d790421e58b2722
3ed8c2f625b4f596ea63cd774920972fbae43d9d
9965b6fca7a0c7ddc2019482e8f321e030a1750d54214f7610634d1f0c730136
GET /templates/img/creditcard/mastercard.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "72e-583c3bc6b514f"
accept-ranges: bytes
content-length: 1838
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/creditcard/rba-rate.png
200 OK 4.0 kB URL HTTP/2 www.igraonice.hr/templates/img/creditcard/rba-rate.png
IP
File type PNG image data, 52 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f71f649f100897f74b09f152e1e66f00
89477963a56accac53928bb46332ccafa71ebc2a
1ec0c52d68a2c404ca92863aef839f3ee5f636f956e56d49310ffede890e0a8a
GET /templates/img/creditcard/rba-rate.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "f98-583c3bc6b514f"
accept-ranges: bytes
content-length: 3992
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/creditcard/maestro.png
200 OK 1.9 kB URL HTTP/2 www.igraonice.hr/templates/img/creditcard/maestro.png
IP
File type PNG image data, 52 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 3cb96c1d3512b559f837d82885e0bca1
be454daa845eabb8d193508951a7f0427b73b375
88f3be344c42ee744127dcbd847e4e95d999afc8992771191ed5c5f1a2339d1e
GET /templates/img/creditcard/maestro.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "77a-583c3bc6b35f7"
accept-ranges: bytes
content-length: 1914
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/freind_jezik.png
200 OK 14 kB URL HTTP/2 www.igraonice.hr/templates/img/freind_jezik.png
IP
File type PNG image data, 150 x 58, 8-bit/color RGBA, non-interlaced\012- data
Hash d88fd23f668721f47709bc3463038d9a
71650c0886ac5bc7fffbb234fd26106f7771a4b5
ecca0844880af23baf0553cdd0230308b1584470f2895648b5a13c0e7a0b0b11
GET /templates/img/freind_jezik.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "352d-583c3bc6ad834"
accept-ranges: bytes
content-length: 13613
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2
200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 11800, version 1.0\012- data
Hash e36fccd06262bef92e7a9841e2202225
b907dd02819497b3942220e0aa160c167195506b
7f1c829b0c90fd664a03bb714a74f7d35d9e38ee1687104abc8ad5bd9c8ccb6c
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11800
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 18:48:10 GMT
expires: Thu, 09 Nov 2023 18:48:10 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:25:05 GMT
content-type: font/woff2
age: 599848
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssl.gstatic.com/ui/v1/star/star4.png
200 OK 355 B URL HTTP/2 ssl.gstatic.com/ui/v1/star/star4.png
IP
File type gzip compressed data, max compression\012- data
Hash 87536625b540b23c9894e560512ee613
9b3c47be2f31dd5b480702249db0b91bfcc8df28
1d79a9791fd6bc9b3ab7079009c8d552b18c09f5b5606ee3387bf95a578b9b90
GET /ui/v1/star/star4.png HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.gstatic.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Origin
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gstatic-ui-assets
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="gstatic-ui-assets"
report-to: {"group":"gstatic-ui-assets","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gstatic-ui-assets"}]}
content-length: 294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 12 Nov 2022 01:57:22 GMT
expires: Sun, 12 Nov 2023 01:57:22 GMT
cache-control: public, max-age=31536000
age: 401296
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
200 OK 12 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 11872, version 1.0\012- data
Hash 87ace20058325aa069320aa4af875dff
b743548770c46d905ae1ba06310bc001c587fe8e
3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 19:35:48 GMT
expires: Thu, 09 Nov 2023 19:35:48 GMT
cache-control: public, max-age=31536000
age: 596990
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/modules/news/articles/thumbs/320-240/otvorena-je-nova-jumbo-igraonica.png
200 OK 121 kB URL HTTP/2 www.igraonice.hr/media/images/modules/news/articles/thumbs/320-240/otvorena-je-nova-jumbo-igraonica.png
IP
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 121 kB (121212 bytes)
Hash 5a588e31e4f86acd92e3bda30c282fed
4473f21ef9d489c4a66d8b74e6209399677d18c4
adc3f230bf0bb5a51b5ef867a5ae803fcbc2e39f10713e4f0047eb51ac6b5d90
GET /media/images/modules/news/articles/thumbs/320-240/otvorena-je-nova-jumbo-igraonica.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Wed, 29 Sep 2021 16:57:53 GMT
etag: "1d97c-5cd253b202640"
accept-ranges: bytes
content-length: 121212
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/strip-bg.jpg
200 OK 1.6 kB URL HTTP/2 www.igraonice.hr/templates/img/strip-bg.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1, components 3\012- data
Hash 62eef9d7c5a9cf354dab1b75018f7ac9
bb1ddb3d012f7bc024154c8ba1b7d8e3b2beaee6
c7e455043f518e6ea8b568b8f807dd10c34bf7092fe1c2dbc9997d61515c6a82
GET /templates/img/strip-bg.jpg HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/templates/css/style.css
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:37 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "640-583c3bc6b12ce"
accept-ranges: bytes
content-length: 1600
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:37 GMT
vary: User-Agent
content-type: image/jpeg
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/modules/slider/thumbs/600-330/cirkus-preseljen-slider.png
200 OK 257 kB URL HTTP/2 www.igraonice.hr/media/images/modules/slider/thumbs/600-330/cirkus-preseljen-slider.png
IP
File type PNG image data, 600 x 330, 8-bit/color RGBA, non-interlaced\012- data
Size 257 kB (257356 bytes)
Hash fb6d91a4db68844a64a137e2075fa9fe
333296482e4e62da5a090fcfbd8cf515870ea5e8
6292a83c921bce87f0f7f4965435e8fa5307faf8c4d45d2f7aac9a58caa67611
GET /media/images/modules/slider/thumbs/600-330/cirkus-preseljen-slider.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Tue, 31 Aug 2021 20:01:33 GMT
etag: "3ed4c-5cae06a922140"
accept-ranges: bytes
content-length: 257356
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/modules/news/articles/thumbs/320-240/gratis-ledo-medo-rodjendanska-torta-u-jungle-play-1.png
200 OK 142 kB URL HTTP/2 www.igraonice.hr/media/images/modules/news/articles/thumbs/320-240/gratis-ledo-medo-rodjendanska-torta-u-jungle-play-1.png
IP
File type PNG image data, 320 x 240, 8-bit/color RGBA, non-interlaced\012- data
Size 142 kB (142373 bytes)
Hash 56e80671c6a806aafecf44f53d78230f
a7a4bef0cce90bbb1d01bc8c6efe153985a51673
b6042c0b4ed68eb58774f85349e5399703a0ae52130dbe34b08ed45ffd9e20ef
GET /media/images/modules/news/articles/thumbs/320-240/gratis-ledo-medo-rodjendanska-torta-u-jungle-play-1.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Wed, 29 Sep 2021 17:26:17 GMT
etag: "22c25-5cd25a0b12040"
accept-ranges: bytes
content-length: 142373
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.bxslider/bx_loader.gif
200 OK 8.6 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.bxslider/bx_loader.gif
IP
File type GIF image data, version 89a, 32 x 32\012- data
Hash 931bdb6b50816b03206c66921760b246
f67f91dafbe0f846c8f8f67a005497d8bdea188a
6d46e2cf165a5a0584afba7bc9663da292ee08c97cfc7613de6013ed05be892a
GET /extensions/js/jquery.bxslider/bx_loader.gif HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/extensions/js/jquery.bxslider/jquery.bxslider.css
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:37 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "2185-583c3bc68f7af"
accept-ranges: bytes
content-length: 8581
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:37 GMT
vary: User-Agent
content-type: image/gif
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/modules/slider/thumbs/600-330/jp1-gratis-ledo-torta.png
200 OK 309 kB URL HTTP/2 www.igraonice.hr/media/images/modules/slider/thumbs/600-330/jp1-gratis-ledo-torta.png
IP
File type PNG image data, 600 x 330, 8-bit/color RGBA, non-interlaced\012- data
Size 309 kB (309126 bytes)
Hash 87973561623f1340d7bec5b8069a1aea
ffd1dfd394bd0280de2ee3e3d11453a359dc0cda
858b495145f91d1c0b01daa2c6bb534420847703f6906dc4fb5faac26b84539c
GET /media/images/modules/slider/thumbs/600-330/jp1-gratis-ledo-torta.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Wed, 29 Sep 2021 17:27:48 GMT
etag: "4b786-5cd25a61dad00"
accept-ranges: bytes
content-length: 309126
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/modules/slider/thumbs/600-330/jumbo-akcija-otvorenja-gratis-pizza-gratis-torta-adresa.png
200 OK 272 kB URL HTTP/2 www.igraonice.hr/media/images/modules/slider/thumbs/600-330/jumbo-akcija-otvorenja-gratis-pizza-gratis-torta-adresa.png
IP
File type PNG image data, 600 x 330, 8-bit/color RGBA, non-interlaced\012- data
Size 272 kB (272094 bytes)
Hash 9edf214313035379467da5c46e5aed78
6516514d76ba2aa03114c8206ce9d6cb1fdaf2ca
61b7fd6c111711026f7f5f8fcf7bc6780ead0d198a08760005ad94188c863a8d
GET /media/images/modules/slider/thumbs/600-330/jumbo-akcija-otvorenja-gratis-pizza-gratis-torta-adresa.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Wed, 29 Sep 2021 16:47:35 GMT
etag: "426de-5cd25164a37c0"
accept-ranges: bytes
content-length: 272094
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/extensions/js/jquery.bxslider/controls.png
200 OK 2.2 kB URL HTTP/2 www.igraonice.hr/extensions/js/jquery.bxslider/controls.png
IP
File type PNG image data, 96 x 63, 8-bit/color RGBA, non-interlaced\012- data
Hash e03595fac8d6654d423f4db7ed6d1c80
62e0fce624381c894c56e1dade3317d5b9a78084
cdb64c135822d35a6b8d8247c43fae7b8e71d5eb83ff70169eeef35d17278dfe
GET /extensions/js/jquery.bxslider/controls.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/extensions/js/jquery.bxslider/jquery.bxslider.css
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:37 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "8b4-583c3bc68f3c7"
accept-ranges: bytes
content-length: 2228
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:37 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/modules/slider/thumbs/600-330/dugave-slider.png
200 OK 323 kB URL HTTP/2 www.igraonice.hr/media/images/modules/slider/thumbs/600-330/dugave-slider.png
IP
File type PNG image data, 600 x 330, 8-bit/color RGBA, non-interlaced\012- data
Size 323 kB (323027 bytes)
Hash 5e420c04dd51e7996c2a3fbb8a646215
275f7c3eef4c37ac5d5e39d02c689aac2df7653b
b02290811705ab37541b8afdc35cd5fe5b8b69155ff5e15fad7b3d60397ed465
GET /media/images/modules/slider/thumbs/600-330/dugave-slider.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Tue, 31 Aug 2021 21:19:21 GMT
etag: "4edd3-5cae180ce2840"
accept-ranges: bytes
content-length: 323027
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/media/images/modules/slider/thumbs/600-330/zdslider.png
200 OK 303 kB URL HTTP/2 www.igraonice.hr/media/images/modules/slider/thumbs/600-330/zdslider.png
IP
File type PNG image data, 600 x 330, 8-bit/color RGBA, non-interlaced\012- data
Size 303 kB (302686 bytes)
Hash 4b50a91e469735cf2c109607ae9acc53
ae36e7d2e252861afeae252ea80819961de54842
8d602590a82f3f78c81544cdab6e85181191e1d0e630dcf3ce5317a3b0a33e88
GET /media/images/modules/slider/thumbs/600-330/zdslider.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:36 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Tue, 31 Aug 2021 19:15:46 GMT
etag: "49e5e-5cadfc6d63c80"
accept-ranges: bytes
content-length: 302686
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:36 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c37604a6880f4afb12af019efeadc20e
9197dfad083403cc25e1a16f5c4953727e97f14e
a03a41326606ebf074cfa18fd8f8311bd78c3292afd1817f6bbd98f99e102e8f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6438
Cache-Control: max-age=149317
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:40 GMT
Etag: "6374a833-1d7"
Expires: Fri, 18 Nov 2022 10:54:17 GMT
Last-Modified: Wed, 16 Nov 2022 09:06:59 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/hr_HR/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/hr_HR/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 959ffd8e07ae22c786b2a727be42ca60
77104bb66a07a4a9890b94248850f8024ee5642b
9e209e1c35f5efeea631ad73306a713fb6be511098b41c225ea4eebb0fb4e018
GET /hr_HR/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 67b6b1dfa7325226bb69f1d74eeb2dca
etag: "ffdbb8eb501ba0287c12f58ac139c1b9"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 16 Nov 2022 17:33:48 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: lZ/9jgeuIseGsqcnvkLKYA==
x-fb-debug: +0bq+W2WmVASQS8c0VHZ4oQsK700n7C4DsPAFhDb5WeLGkXGmYzIcKN2rQD/bVTxbZzkjkmmzv4P5sesn8ePoQ==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1904183273
date: Wed, 16 Nov 2022 17:25:40 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c37604a6880f4afb12af019efeadc20e
9197dfad083403cc25e1a16f5c4953727e97f14e
a03a41326606ebf074cfa18fd8f8311bd78c3292afd1817f6bbd98f99e102e8f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6438
Cache-Control: max-age=149317
Content-Type: application/ocsp-response
Date: Wed, 16 Nov 2022 17:25:40 GMT
Etag: "6374a833-1d7"
Expires: Fri, 18 Nov 2022 10:54:17 GMT
Last-Modified: Wed, 16 Nov 2022 09:06:59 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/hr_HR/sdk.js?hash=f4bf3607d64a1c05bacfd569986c1230
200 OK 87 kB URL HTTP/2 connect.facebook.net/hr_HR/sdk.js?hash=f4bf3607d64a1c05bacfd569986c1230
IP
File type ASCII text, with very long lines (13192)
Hash 99e14a461a8bf0f1f51115a12c1eeec6
aa82ccd40af0f603fc22b3ddf9e78fa77655e963
8d332e9c27ede262d1ca67e8a4cf58969e196788c989d4728c88606296e754ab
GET /hr_HR/sdk.js?hash=f4bf3607d64a1c05bacfd569986c1230 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.igraonice.hr
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 6a5a934afdc7b06fab38c818558435fe
etag: "90ecc6f25facfea0aa1b96508dfb31a1"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 16 Nov 2023 13:13:30 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: meFKRhqL8PH1ERWhLB7uxg==
x-fb-debug: ABfCPKaSzPiKk9K/wQpQju9pjUK37OJwAAyvI/sIaRIYK1O4GUN4ykd0HovbF+b2K4Frmgu+eKTCZE0mXRRoOA==
priority: u=3,i
content-length: 86988
x-fb-trip-id: 1904183273
date: Wed, 16 Nov 2022 17:25:40 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.igraonice.hr/templates/css/icon.png
200 OK 2.7 kB URL HTTP/2 www.igraonice.hr/templates/css/icon.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash b6f7ad976ed9509fa2f0e77ae171ed9c
a36e8939a542cad864e1eafe30d943197cbc691f
d381ecf3c3adf401bbdf4729145209f416b184b915e6f07e608b928bf4164523
GET /templates/css/icon.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:40 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "a62-583c3bc690368"
accept-ranges: bytes
content-length: 2658
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:40 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/header.png
200 OK 531 kB URL HTTP/2 www.igraonice.hr/templates/img/header.png
IP
File type PNG image data, 980 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size 531 kB (531255 bytes)
Hash 4e08484b9004ac88fab78e3bd822e3fb
9a36ba45d5c649180f60899861e99c38dec0a7e3
6b8d463c589ff404334ded189a19215fd2a862286ac57f60a4803343918c288b
GET /templates/img/header.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/templates/css/style.css
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:37 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Mon, 14 Oct 2019 20:31:08 GMT
etag: "81b37-594e4bf6ebeb8"
accept-ranges: bytes
content-length: 531255
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:37 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
www.facebook.com/tr/?id=789369978068999&ev=fb_page_view&dl=https%3A%2F%2Fwww.igraonice.hr%2F&rl=https%3A%2F%2Figraonice.hr%2F&if=false&ts=1668619539818&sw=1280&sh=1024&at=
200 OK 0 B URL HTTP/2 www.facebook.com/tr/?id=789369978068999&ev=fb_page_view&dl=https%3A%2F%2Fwww.igraonice.hr%2F&rl=https%3A%2F%2Figraonice.hr%2F&if=false&ts=1668619539818&sw=1280&sh=1024&at=
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tr/?id=789369978068999&ev=fb_page_view&dl=https%3A%2F%2Fwww.igraonice.hr%2F&rl=https%3A%2F%2Figraonice.hr%2F&if=false&ts=1668619539818&sw=1280&sh=1024&at= HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Wed, 16 Nov 2022 17:25:40 GMT
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yC/l/0,cross/igAefX29xSo.css?_nc_x=Ij3Wp8lg5Kz
200 OK 4.8 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yC/l/0,cross/igAefX29xSo.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4431)
Hash fe41c46d6f55b8120005babec214aba7
de9efe2c23fe4571ec4e4d79715540910f1ee68c
189dd21fd4f97e754fc62a0232f135963aeee9af7728c5f916b2c1ed7c7ff031
GET /rsrc.php/v3/yC/l/0,cross/igAefX29xSo.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 13 Nov 2023 04:45:40 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: /kHEbW9VuBIABbq+whSrpw==
x-fb-debug: zuqXj3/p055t8O4zG0CY8sDA8ScNMCmX1UbbwmwZxAgry2RelcxGQprjPuBTEZgOQ6bjyAsx3rc4oWXHRoJZpw==
content-length: 4792
x-fb-trip-id: 1904183273
date: Wed, 16 Nov 2022 17:25:40 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
200 OK 827 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (724)
Hash 29973cf3b0ef9f16fe31ed981b2f6573
f22eb80b89b5e0ae9ace854aab6676d56eaef6a1
476822c80e0a0ee078edb7a74db59378f8b1d43d2de844e28a9e9c2f68a4c8d8
GET /rsrc.php/v3/ys/l/0,cross/4_8X-2u0CDc.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 03 Nov 2023 20:06:17 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KZc887Dvnxb+Me2YGy9lcw==
x-fb-debug: U8RJgKUtHGLUiQk9HHpA+IRcULT5qX+DuwPkFrA1TVl4/mz6+76fzZ9YDejeZlR7UxuiL1amRZ0p3hU19KekzQ==
priority: u=3,i
content-length: 827
x-fb-trip-id: 1904183273
date: Wed, 16 Nov 2022 17:25:40 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yS/r/DEaHQMKxWBP.js?_nc_x=Ij3Wp8lg5Kz
200 OK 91 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yS/r/DEaHQMKxWBP.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18622)
Hash e939eadda5d7c9dd60450eb6fd816eb0
fd1b642357823cb1b21ae46e5c61a7488e203c1c
4c96ac797fe700732ccba8775a5a630eaafa1f03d81b2a2d48700fb29c3083a6
GET /rsrc.php/v3/yS/r/DEaHQMKxWBP.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Mon, 13 Nov 2023 00:40:06 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 6Tnq3aXXyd1gRQ62/YFusA==
x-fb-debug: ZGkiPC9htvbQfN9ZFpsYXVtS4qzygxZqQ+3H9theQUhSPGMb7wKCJwLwA8PQrk945Ih2wstteMKC4Lo8uTTCjQ==
content-length: 91128
x-fb-trip-id: 1904183273
date: Wed, 16 Nov 2022 17:25:40 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1984)
Hash 16f083b23b565db9d2f20d1ad75933c1
6d74ad139c96b1e3fc9d541419788b5b4893ec9a
36b909cd9132a8996a1bbb221d05217c31506a6951bb408deeea6aa612dc4200
GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 07 Nov 2023 21:29:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: FvCDsjtWXbnS8g0a11kzwQ==
x-fb-debug: 8wfJHm/OTmUimpYLHqmFx0zK7zZKmbhmdxKPRe0Ddb/jB3DBuwry5M4WAMCosSl33thx2iA5vMezBbW00qquSw==
priority: u=3,i
content-length: 1657
x-fb-trip-id: 1904183273
date: Wed, 16 Nov 2022 17:25:40 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz
IP
Hash 9dc68c8f56b118915fd77100873b2baf
d630bee4823abaa46d125d86d29ad4a585683479
a2a51fba0e387bbc47eca329ba0a4579050d35f690e1f65a489aa053876789a4
GET /rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 11 Nov 2023 00:01:03 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 37KShYF/ynsGi6DsmKojkg==
x-fb-debug: R0dyX52wviJShiY2mL8EoglIWwZmdbHHvHXItQSj/bmRbf1oMab4hKDTC6kmg8h9v4JBEf9dSjWdJzowcvMWbA==
priority: u=3,i
content-length: 16262
x-fb-trip-id: 1904183273
date: Wed, 16 Nov 2022 17:25:40 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iErm4/yK/l/hr_HR/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz
200 OK 24 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iErm4/yK/l/hr_HR/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (42099)
Hash fab1ce9ed2a9745f055831829a490b22
376fa73b27f5c517e1a29a00c8df5fb5edae975c
9f6d709e89ef8605c8eb85ed56406a199b0fc80eb27133508ed2f5d0cdd65dc4
GET /rsrc.php/v3iErm4/yK/l/hr_HR/JGSM2yXjSKh.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 15 Nov 2023 02:29:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: +rHOntKpdF8FWDGCmkkLIg==
x-fb-debug: +xXKEKTEWtZdpxvgGdt2wnifpcKCI+Zpx9aw40SwiluSTO08WhZ4kC5mqY2PPCEK67UB508SUqx/JaoyCg2Hbg==
priority: u=3,i
content-length: 23528
x-fb-trip-id: 1904183273
date: Wed, 16 Nov 2022 17:25:40 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.igraonice.hr/templates/img/main-bg.png
200 OK 0 B URL HTTP/2 www.igraonice.hr/templates/img/main-bg.png
IP
GET /templates/img/main-bg.png HTTP/1.1
Host: www.igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/templates/css/style.css
Cookie: PHPSESSID=4tuo3c0sv85lrd70jm29r7hp91; PH_HPXY_CHECK=s1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:37 GMT
server: Apache
x-content-type-options: nosniff
last-modified: Sun, 10 Mar 2019 20:59:46 GMT
etag: "667bb-583c3bc6b1a9e"
accept-ranges: bytes
content-length: 419771
cache-control: max-age=28800
expires: Fri, 16 Dec 2022 17:25:37 GMT
vary: User-Agent
content-type: image/png
X-Firefox-Spdy: h2
igraonice.hr/aut-aut/ut.zip
200 OK 0 B URL HTTP/2 igraonice.hr/aut-aut/ut.zip
IP
Analyzer Verdict Alert fortinet Malware
GET /aut-aut/ut.zip HTTP/1.1
Host: igraonice.hr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Wed, 16 Nov 2022 17:25:35 GMT
server: Apache
x-powered-by: PHP/5.6.40
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0
pragma: no-cache
x-frame-options: POWERCMS
x-ua-compatible: IE=edge;FF=3;OtherUA=4
x-content-type-options: nosniff
last-modified: Wed, 16 Nov 2022 17:25:35 GMT
vary: User-Agent
content-type: text/html; charset=utf-8
set-cookie: PHPSESSID=vpbqoibrijtafhl8g6sksh83f2; path=/
PH_HPXY_CHECK=s1; path=/
X-Firefox-Spdy: h2
www.facebook.com/v3.2/plugins/page.php?app_id=789369978068999&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1745e49af1a4ea%26domain%3Dwww.igraonice.hr%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.igraonice.hr%252Ff21631c9c02dec8%26relation%3Dparent.parent&container_width=300&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Figraonice.hr%2F&locale=hr_HR&sdk=joey&show_facepile=true&width=300
200 OK 0 B URL HTTP/2 www.facebook.com/v3.2/plugins/page.php?app_id=789369978068999&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1745e49af1a4ea%26domain%3Dwww.igraonice.hr%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.igraonice.hr%252Ff21631c9c02dec8%26relation%3Dparent.parent&container_width=300&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Figraonice.hr%2F&locale=hr_HR&sdk=joey&show_facepile=true&width=300
IP
GET /v3.2/plugins/page.php?app_id=789369978068999&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1745e49af1a4ea%26domain%3Dwww.igraonice.hr%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.igraonice.hr%252Ff21631c9c02dec8%26relation%3Dparent.parent&container_width=300&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Figraonice.hr%2F&locale=hr_HR&sdk=joey&show_facepile=true&width=300 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.igraonice.hr/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v9.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: NZIxWk04f+L6pCphqgphZWzLn155DBUBxll3Xr0AhcUJkGeImlGeqOATPX7TqwE6cY7YmbrtSTnJM5uy27rcPQ==
date: Wed, 16 Nov 2022 17:25:40 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
178.218.165.57
23.36.76.226
34.117.237.239
93.184.220.29
31.13.72.12
217.182.228.53
0.0.0.0