| elegant-snyder.92-205-25-11.plesk.page/ |  92.205.25.11 | 301 Moved Permanently | 162 B |
URL HTTP/1.1elegant-snyder.92-205-25-11.plesk.page/ IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 07 Jan 2023 03:02:32 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://elegant-snyder.92-205-25-11.plesk.page/
|
|
| r3.o.lencr.org/ |  95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash326898eb925368408f6f42ee173b9d89 b8b20ee34b7e7b139e7729b8e46a54ea25f54ac8 96c2c75f700ab55649882111713ca3cfb2eaf08e404c2bc245a641dc12ae168a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "96C2C75F700AB55649882111713CA3CFB2EAF08E404C2BC245A641DC12AE168A"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15001
Expires: Sat, 07 Jan 2023 07:12:33 GMT
Date: Sat, 07 Jan 2023 03:02:32 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash516b9d6951b09439a51d5284994ed92f 5c78edb38bae36caa8e2db8ed6635a32e46c91dd eaaf4ebc59d2a06d02b552154c5adb7c713ffc4a7f5caabcff1c2b4cd6ec5c7b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EAAF4EBC59D2A06D02B552154C5ADB7C713FFC4A7F5CAABCFF1C2B4CD6EC5C7B"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5402
Expires: Sat, 07 Jan 2023 04:32:34 GMT
Date: Sat, 07 Jan 2023 03:02:32 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 07 Jan 2023 02:48:05 GMT
content-type: application/json
age: 867
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash600f7ba6e1a6fbbd176cd2df19b1e4d9 cdd72b25fd91ee980aba193b12e890096e4fe852 860214860947dfbe26099f018747154823b175fceb2821a390cc655da191a6d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "860214860947DFBE26099F018747154823B175FCEB2821A390CC655DA191A6D0"
Last-Modified: Thu, 05 Jan 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9275
Expires: Sat, 07 Jan 2023 05:37:07 GMT
Date: Sat, 07 Jan 2023 03:02:32 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashb1fcd419a4245617397846e8d17233f6 2a037ce244587640b27ead9a0ec2af4f862d91b2 e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: rdxtij+4Tmoz5FvOXKpDOD/vBPD69O+b4EMxmx2GLKoGMemI9+M1NSQDL7cH1pdz4yuc+ClZkm4d7TnhLcxlxA==
x-amz-request-id: MS2CF5HVK5WYG8BK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 07 Jan 2023 03:02:26 GMT
age: 6
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:32 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashe83368350903b180e63204f9ec91143d 684527b005ea866193a3715924e270a846b307d4 bcbba99ee9ae4906a9b8662fb0eb9c333034b11b6c4c7c5aaa58d1a763a738bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCBBA99EE9AE4906A9B8662FB0EB9C333034B11B6C4C7C5AAA58D1A763A738BB"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21593
Expires: Sat, 07 Jan 2023 09:02:26 GMT
Date: Sat, 07 Jan 2023 03:02:33 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 07 Jan 2023 02:33:39 GMT
age: 1734
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash43c8442b7447debab97b0f6bc973e23a 38a5f1869cff7f6ddbfd3a24e57a3da7851ba3b0 4eb7adc914570287dde1317395d1d95b07271c8fe20b97a8928025c292c47dba
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4711
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 03:02:33 GMT
Last-Modified: Sat, 07 Jan 2023 01:44:02 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 35.162.234.4 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.162.234.4:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: T36nmHYFwInuGqbLX9lWpg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: opqTEcq+X5DTyG4AH9R+k2Sk3X0=
|
|
| firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221673060277326%22 | 35.241.9.150 | 200 OK | 22 kB |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221673060277326%22 IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (21675), with no line terminators Hasha6b60524a2f52058240d6a4e60bb9715 b7a03c6a6a3b17ca58e01ecab9ddf5e5132b8753 906d303b6b051ef46675d25266cff7d940891900da8b01c6eff09f938269d18f
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221673060277326%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 21675
via: 1.1 google
date: Sat, 07 Jan 2023 03:02:03 GMT
last-modified: Sat, 07 Jan 2023 02:57:57 GMT
content-type: application/json
age: 31
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashcc829d885101bccdfcb65501f428d51c c561b12e8399fc2bd3b4e99e36ccb6a0139336cb 12e4f659e1406f68760926775011c9151e09b1c380da0cbd2228177c41708939
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12E4F659E1406F68760926775011C9151E09B1C380DA0CBD2228177C41708939"
Last-Modified: Sat, 07 Jan 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21598
Expires: Sat, 07 Jan 2023 09:02:32 GMT
Date: Sat, 07 Jan 2023 03:02:34 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash11aea3c23fce2f77cadf7a551f4e8b17 4963aafedcf3fc5f28f1b4a6b0212abfd5526702 d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15191
Expires: Sat, 07 Jan 2023 07:15:45 GMT
Date: Sat, 07 Jan 2023 03:02:34 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash11aea3c23fce2f77cadf7a551f4e8b17 4963aafedcf3fc5f28f1b4a6b0212abfd5526702 d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15191
Expires: Sat, 07 Jan 2023 07:15:45 GMT
Date: Sat, 07 Jan 2023 03:02:34 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash11aea3c23fce2f77cadf7a551f4e8b17 4963aafedcf3fc5f28f1b4a6b0212abfd5526702 d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15191
Expires: Sat, 07 Jan 2023 07:15:45 GMT
Date: Sat, 07 Jan 2023 03:02:34 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash11aea3c23fce2f77cadf7a551f4e8b17 4963aafedcf3fc5f28f1b4a6b0212abfd5526702 d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15191
Expires: Sat, 07 Jan 2023 07:15:45 GMT
Date: Sat, 07 Jan 2023 03:02:34 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hash11aea3c23fce2f77cadf7a551f4e8b17 4963aafedcf3fc5f28f1b4a6b0212abfd5526702 d2ada7d592878b58921cd0568efa62abefd7423d40bec16133886e2c67a791b3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2ADA7D592878B58921CD0568EFA62ABEFD7423D40BEC16133886E2C67A791B3"
Last-Modified: Fri, 06 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15191
Expires: Sat, 07 Jan 2023 07:15:45 GMT
Date: Sat, 07 Jan 2023 03:02:34 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1970bdac-3b6b-435a-8842-b9f3926d8831.jpeg | 34.120.237.76 | 200 OK | 12 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1970bdac-3b6b-435a-8842-b9f3926d8831.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashbfcf48fe2526a5e5c258c32099c71fd8 d65e224952502f5abc15f2a017d685f900d696cf 8bda5701785693f200f49dbe39d9523e123b3c599889ee26bc7ab10b159b3a4d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1970bdac-3b6b-435a-8842-b9f3926d8831.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12334
x-amzn-requestid: 57a281c2-b266-41d8-bf3f-47cbbbecee77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eGCNVHxnIAMFzoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b24a55-4760ddad29c658ed555e62ac;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 03:07:01 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: q6haURIZ6SEyJ9Zdp7RWanL7OnmBUfZlnuTtYTPrfujCkCiNR3xwwQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 9825a45e2b387a61504c0c3df20048ee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 22:20:40 GMT
age: 16914
etag: "d65e224952502f5abc15f2a017d685f900d696cf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32750e1f-43b2-4ea2-9562-1ec8c85222fe.jpeg | 34.120.237.76 | 200 OK | 8.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32750e1f-43b2-4ea2-9562-1ec8c85222fe.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash05977aeaee3d020a9e54b103bff0072e 74f544d78132f079b849fc2ef613a892c515378f 72b0b5e6ed8685fa24bd66e4173db1701b4a48b3df15c86228b833e615935da8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F32750e1f-43b2-4ea2-9562-1ec8c85222fe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8704
x-amzn-requestid: 1a997886-3172-4ba2-967d-328539cf685c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eVxErFfVoAMFhYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b89550-7c30a3ff5d97f8b421776fb5;Sampled=0
x-amzn-remapped-date: Fri, 06 Jan 2023 21:40:32 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: CKplX8NiGi4DVG0lwV2LILGwKdV6wOzThlE7SEjStyLgYQieTmJfPw==
via: 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 5c7981a979abd51ba7e5ca7d464fd048.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 21:47:57 GMT
age: 18877
etag: "74f544d78132f079b849fc2ef613a892c515378f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a51093b-a234-4694-9280-6ea68de36744.jpeg | 34.120.237.76 | 200 OK | 5.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a51093b-a234-4694-9280-6ea68de36744.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb970a91b8b2e02c08da490ad7a897a79 0b25447121c9d5d1c276cde893549234ab1d0448 e528ef574f793d899cd41ec3d2f954bc1a3658f4c8faedc04206aaf0c530e2e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7a51093b-a234-4694-9280-6ea68de36744.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5815
x-amzn-requestid: c2634739-191d-47c0-98bb-2c91f0d7e5ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: d_-8mEtSoAMF1Fg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63afdeb6-55946d3d7784a69409205dfc;Sampled=0
x-amzn-remapped-date: Sat, 31 Dec 2022 07:03:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -th5qESR6innpF94Jxt76YClWg6POsf_bL0RBQBRgIhcrNCR6S88rQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 04:04:50 GMT
age: 82664
etag: "0b25447121c9d5d1c276cde893549234ab1d0448"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg | 34.120.237.76 | 200 OK | 5.6 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe832123ea0c92a446b5894e75efc86ae bb438ca635b43819701067ef07a3d910ad29a0c7 e1b0c6cd873f304de15664f96af6b6914e13fbbfb3e2179ba43369e116446773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f37a3ca-5b31-4876-bbcd-442c1f718b3c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5578
x-amzn-requestid: 93353c3e-1b26-424c-b4c6-0d113703edd6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eFvpBFGvIAMFobw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b22c9f-1d07cff31ae39320693642f0;Sampled=0
x-amzn-remapped-date: Mon, 02 Jan 2023 01:00:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: skIlgzeKmjJ2Wsx2QeubgMvO7chgpPNZYqW4E_xhRgkCtDEhAfBp4w==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 07:33:22 GMT
age: 70152
etag: "bb438ca635b43819701067ef07a3d910ad29a0c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae19b7ca-4dfd-4eb2-9016-efe102832200.jpeg | 34.120.237.76 | 200 OK | 6.7 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae19b7ca-4dfd-4eb2-9016-efe102832200.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5da8730bc434765cb6905cfb77bb16e4 fb0f2ec5d9e45af3c7bbe49cda08b4bcb841268b 986df029801bcf98f587f7a502b4f6aba9660c9230fbda8f073ed01bcf967e1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae19b7ca-4dfd-4eb2-9016-efe102832200.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6716
x-amzn-requestid: b3538bab-5780-4adb-84fe-5d67be71edb5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eKsTpGSIoAMF6VA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63b4274a-30a59f80542f1ec6796c474d;Sampled=0
x-amzn-remapped-date: Tue, 03 Jan 2023 13:02:02 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: abPNUKvrq2f1xNTuEvhREe_dBR9tk0vnsQp3v37AbKNm04BlDKvBsQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 8cb7de37a1655236518810d0aabb8656.cloudfront.net (CloudFront), 1.1 google
date: Fri, 06 Jan 2023 21:49:18 GMT
age: 18796
etag: "fb0f2ec5d9e45af3c7bbe49cda08b4bcb841268b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| elegant-snyder.92-205-25-11.plesk.page/ | 92.205.25.11 | 301 Moved Permanently | 4.8 kB |
URL HTTP/2elegant-snyder.92-205-25-11.plesk.page/ IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash4ac8905d1d5c1d4287877b2cd12c578f 3dba315adee4a143e7368e64c52c8766895a754c 7c19db731473111c9e8a0d939b1204b59e11a887cd90774b48d3dfa974cb491d
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 07 Jan 2023 03:02:34 GMT
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://badekumas.com/
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/csshero-static-style-manufacturer.css?ver=2 | 92.205.25.11 | 200 OK | 15 B |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/csshero-static-style-manufacturer.css?ver=2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeASCII text, with no line terminators Hash0e95b00d49ca5571d4820b4d06544824 3c6601b155eab3256dea60aa453ae2fdb1e46c28 94c733997ad8618a9f01c59a4d466172f77561fa15ebe253df787bf75167c0e3
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/2022/05/csshero-static-style-manufacturer.css?ver=2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
content-length: 15
x-accel-version: 0.01
last-modified: Fri, 13 May 2022 12:45:37 GMT
etag: "f-5dee40d16582c"
accept-ranges: bytes
access-control-allow-origin: *
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/flags/gb.91f20023.png | 92.205.25.11 | 200 OK | 15 kB |
URL HTTP/2badekumas.com/wp-content/uploads/flags/gb.91f20023.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data Hashe54cdcad7f06d6931ab4a3ef0b90f0e3 097887e31ad50ac97ed33ec25bd0637cdbba558c e09ed9ad1d83d464ebc7d3abf189ad0af486b3e64c57d75581adb379482bad9c
GET /wp-content/uploads/flags/gb.91f20023.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 15410
last-modified: Tue, 23 Aug 2022 13:16:12 GMT
etag: "6304d31c-3c32"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash623e85ff33837eb6c59e11ae2759237a cea1948490802e652e7f6678dc76694e0d6ab61a 1fb30f3579d3277435c860f472008bea3680db1202d838ad4669d943ec88ba65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 03:02:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| badekumas.com/wp-content/uploads/2022/09/cropped-bade-logo-kopya.png | 92.205.25.11 | 200 OK | 98 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/09/cropped-bade-logo-kopya.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 5395 x 1487, 8-bit/color RGBA, non-interlaced\012- data Hash9fa34f1804e0c8c0701edc376b463ca7 0483db56cfaede5aa4e3e98002ead70c99ebd433 3710719fd92c3ee8ca1d6bd233aa0c46f3f5becea07d1c888b6440d59723697b
GET /wp-content/uploads/2022/09/cropped-bade-logo-kopya.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 97879
last-modified: Thu, 01 Sep 2022 09:57:22 GMT
etag: "63108202-17e57"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash623e85ff33837eb6c59e11ae2759237a cea1948490802e652e7f6678dc76694e0d6ab61a 1fb30f3579d3277435c860f472008bea3680db1202d838ad4669d943ec88ba65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 03:02:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| badekumas.com/wp-content/uploads/flags/ru.png | 92.205.25.11 | 200 OK | 52 kB |
URL HTTP/2badekumas.com/wp-content/uploads/flags/ru.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data Hash5d0a62cb92b121bb038a8c4dfffca3b1 21f6538f9a7cc63fa2273a9d4e9a1b5e85b90ab9 15d64864898d7307e8371af88a3e93e6069f9d3cd141ad44f8f625fef78b3249
GET /wp-content/uploads/flags/ru.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 52010
last-modified: Tue, 23 Aug 2022 13:15:58 GMT
etag: "6304d30e-cb2a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashe83368350903b180e63204f9ec91143d 684527b005ea866193a3715924e270a846b307d4 bcbba99ee9ae4906a9b8662fb0eb9c333034b11b6c4c7c5aaa58d1a763a738bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCBBA99EE9AE4906A9B8662FB0EB9C333034B11B6C4C7C5AAA58D1A763A738BB"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21589
Expires: Sat, 07 Jan 2023 09:02:26 GMT
Date: Sat, 07 Jan 2023 03:02:37 GMT
Connection: keep-alive
|
|
| badekumas.com/wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview.png | 92.205.25.11 | 200 OK | 23 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data Hash5081306bbf176417266dc678c3dee3c9 0d05f4d1f60e69bc38f7c43014cc48a13b2e08df 41079f01ec4de7d5ae53d4f5a296bccbfbf30e4e1ad719e0cb1e1e015e5326e1
GET /wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 22704
last-modified: Mon, 27 Jun 2022 14:17:36 GMT
etag: "62b9bc00-58b0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview-150x150.png | 92.205.25.11 | 200 OK | 20 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview-150x150.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash09f0b4798ce59afbe64cfa2e5265e9f4 baead6842550ebafd8eeb7bf9b468b9e24d5b629 2733e9bc210409dc2ef18b41e102b727eee3fcb2edd2a1770c4280a70da93ab7
GET /wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview-150x150.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 20119
last-modified: Mon, 27 Jun 2022 14:17:36 GMT
etag: "62b9bc00-4e97"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/thumbnail-removebg-preview.png | 92.205.25.11 | 200 OK | 44 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/thumbnail-removebg-preview.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 348 x 196, 8-bit/color RGBA, non-interlaced\012- data Hashe89bb467fc7df42c470dbbb6cfa6e24b ae68eab47fd96ce12d19c8fa8659806efbdd5d46 23b820530a01fe40fa55080e2f0b436e4183fd7af2e1b9bcefe750147e92056f
GET /wp-content/uploads/2022/05/thumbnail-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 43567
last-modified: Thu, 26 May 2022 08:07:07 GMT
etag: "628f352b-aa2f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashe83368350903b180e63204f9ec91143d 684527b005ea866193a3715924e270a846b307d4 bcbba99ee9ae4906a9b8662fb0eb9c333034b11b6c4c7c5aaa58d1a763a738bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCBBA99EE9AE4906A9B8662FB0EB9C333034B11B6C4C7C5AAA58D1A763A738BB"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21589
Expires: Sat, 07 Jan 2023 09:02:26 GMT
Date: Sat, 07 Jan 2023 03:02:37 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 95.101.11.115 | 200 OK | 503 B |
IP95.101.11.115:0 ASN#20940 Akamai International B.V.
Hashe83368350903b180e63204f9ec91143d 684527b005ea866193a3715924e270a846b307d4 bcbba99ee9ae4906a9b8662fb0eb9c333034b11b6c4c7c5aaa58d1a763a738bb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BCBBA99EE9AE4906A9B8662FB0EB9C333034B11B6C4C7C5AAA58D1A763A738BB"
Last-Modified: Wed, 04 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21589
Expires: Sat, 07 Jan 2023 09:02:26 GMT
Date: Sat, 07 Jan 2023 03:02:37 GMT
Connection: keep-alive
|
|
| badekumas.com/wp-content/uploads/2022/05/certification-40-200-200-removebg-preview.png | 92.205.25.11 | 200 OK | 30 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/certification-40-200-200-removebg-preview.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data Hash32b30d5e15521ecf80df6c47e4b7cb0f a9a6dbd5c16da45b1f6bce099e48450bb28ed18f afb4e7514b06429ff0734fd39a606bfb9a9d19c427cc1b7d31f6e04d4a6594e4
GET /wp-content/uploads/2022/05/certification-40-200-200-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 29849
last-modified: Thu, 26 May 2022 08:19:55 GMT
etag: "628f382b-7499"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2021/02/izmir_ticaret_odasi-logo-FAD961111B-seeklogo.com_-1-150x150.png | 92.205.25.11 | 200 OK | 20 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2021/02/izmir_ticaret_odasi-logo-FAD961111B-seeklogo.com_-1-150x150.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash8a5b249d90e32b62e91ab32d62b08fa2 9108ba8d5ae6f63c2bf576c4a04bf0677c4a3a04 84a356b1c0ed43a802e8e7c58224e99ee6675e50609d752eea3f38c88ba7e7ef
GET /wp-content/uploads/2021/02/izmir_ticaret_odasi-logo-FAD961111B-seeklogo.com_-1-150x150.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 20511
last-modified: Fri, 13 May 2022 12:13:01 GMT
etag: "627e4b4d-501f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2021/02/eib-logo-1-150x150.jpg | 92.205.25.11 | 200 OK | 3.2 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2021/02/eib-logo-1-150x150.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data Hash46f6208591009f834134c28dc146a9a6 3e2d49933f8a43cab3a2b7170080ce2138951bee 977dc36126adba371e47ae92035de6a250361128065766c9a1b52cb72f845f9c
GET /wp-content/uploads/2021/02/eib-logo-1-150x150.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 3170
last-modified: Fri, 13 May 2022 12:13:02 GMT
etag: "627e4b4e-c62"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/QPc9Ejc6_400x400-150x150.jpg | 92.205.25.11 | 200 OK | 4.1 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/QPc9Ejc6_400x400-150x150.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data Hashdd84a55573e09ee1317c66b1ff5298ac 8be95fd386f2d6fc41e34a41be6d7965c2ef48d7 2c73e70c636b313895a88d6370c37fd9d62580572bd9e6b9fccf91574b0064e3
GET /wp-content/uploads/2022/05/QPc9Ejc6_400x400-150x150.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 4131
last-modified: Wed, 18 May 2022 06:51:14 GMT
etag: "62849762-1023"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/certification-40-200-200-removebg-preview-150x150.png | 92.205.25.11 | 200 OK | 23 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/certification-40-200-200-removebg-preview-150x150.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hashf6360acb1a39a26d9552b7404506394a a5fa5592ea32b90f07921d92fc79c1e6d3534e19 a97374c7a7b0e82ea01aa7b40dc3bb3aa45e436fde6ede4ae7eaeaae07bf5734
GET /wp-content/uploads/2022/05/certification-40-200-200-removebg-preview-150x150.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 22650
last-modified: Thu, 26 May 2022 08:19:55 GMT
etag: "628f382b-587a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/Foursource-logo-420x280-300x200-1-150x150.jpg | 92.205.25.11 | 200 OK | 5.9 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/Foursource-logo-420x280-300x200-1-150x150.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data Hash8e1da4fd68386cff7e6d38632b6db909 417092315ea587fce3b742123208924c834b78a2 91166185808c699ee35f97c7dca6a9a008a2f6365c8e083afac4da600c88223b
GET /wp-content/uploads/2022/05/Foursource-logo-420x280-300x200-1-150x150.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 5850
last-modified: Wed, 18 May 2022 06:50:25 GMT
etag: "62849731-16da"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/371-removebg-preview.png | 92.205.25.11 | 200 OK | 113 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/371-removebg-preview.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 883 x 283, 8-bit/color RGBA, non-interlaced\012- data Size113 kB (113318 bytes) Hash072c2fea8df97e9e766aec25a8b8213b 5595ffdde6cf206fe8847012b5b2717c8982b961 9112c562f92b174391375cadeb811800e39c4df7ff97e69d20ce90f142097777
GET /wp-content/uploads/2022/05/371-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 113318
last-modified: Thu, 26 May 2022 07:52:44 GMT
etag: "628f31cc-1baa6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/ecolabel-005-removebg-preview.png | 92.205.25.11 | 200 OK | 85 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/ecolabel-005-removebg-preview.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 577 x 433, 8-bit/color RGBA, non-interlaced\012- data Hash441f38ae4c5a65a22ac4450538be78f0 e6fcdd0dcc324eed154d0b2603d81dbe29415c8f 563aa0d20a59d49b99d056c37621048503c44f77d4c6f99220ff7976ac533afe
GET /wp-content/uploads/2022/05/ecolabel-005-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 85159
last-modified: Thu, 26 May 2022 08:19:18 GMT
etag: "628f3806-14ca7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2022/05/gots-logo_rgb_2018_transp_72dpi-d4465ef0.png | 92.205.25.11 | 200 OK | 6.9 kB |
URL HTTP/2elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2022/05/gots-logo_rgb_2018_transp_72dpi-d4465ef0.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data Hash642baf98f45cd8d21887d220d508a7d9 87df9e100b57703eb2c70ce8e1dcc0aa5f6143dc ca54b69d22db92b7446fe5b18f681a8ed8cc91d59f0dac32bbf8e1b579399394
GET /wp-content/uploads/2022/05/gots-logo_rgb_2018_transp_72dpi-d4465ef0.png HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 6853
last-modified: Mon, 23 May 2022 14:22:02 GMT
etag: "628b988a-1ac5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/GOTS-SERTFIKA-1.jpg | 92.205.25.11 | 200 OK | 277 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/GOTS-SERTFIKA-1.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1653x2338, components 3\012- data Size277 kB (277255 bytes) Hashd840dfe19f526bc1d204bda0644ac0df 34d3c517cd491a541dceb539a1a7c4f4df606680 0d411f171c9b7c17b2473fd63a5676535ced2928d1e6b40d7c24efa7b7e3e25b
GET /wp-content/uploads/2022/05/GOTS-SERTFIKA-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 277255
last-modified: Wed, 18 May 2022 06:40:40 GMT
etag: "628494e8-43b07"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2021/02/LOGOMUZ.png | 92.205.25.11 | 200 OK | 11 kB |
URL HTTP/2elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2021/02/LOGOMUZ.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 297 x 75, 8-bit/color RGBA, non-interlaced\012- data Hash12627d301c82af9d7100210f4a1ed071 e1501e54f0f23427ea29452369b7c07ee36dd461 7795055ccac88a455166002340a3684220c4005b23763493a90bb2b200c8d83c
GET /wp-content/uploads/2021/02/LOGOMUZ.png HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/png
content-length: 10966
last-modified: Thu, 12 May 2022 07:05:57 GMT
etag: "627cb1d5-2ad6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash623e85ff33837eb6c59e11ae2759237a cea1948490802e652e7f6678dc76694e0d6ab61a 1fb30f3579d3277435c860f472008bea3680db1202d838ad4669d943ec88ba65
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 03:02:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| badekumas.com/wp-content/uploads/2022/05/RCS-SERTIFIKA-1.jpg | 92.205.25.11 | 200 OK | 287 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/RCS-SERTIFIKA-1.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1653x2338, components 3\012- data Size287 kB (286764 bytes) Hashd5059778bd55986abe0167d9140e8e43 5e315113dc18ddba74c5a613b609017066b8b462 65afee7a6eb5104d24d2aa3a21c1073484876f5b5d0f3231c242d1abcd77742b
GET /wp-content/uploads/2022/05/RCS-SERTIFIKA-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 286764
last-modified: Wed, 18 May 2022 06:42:38 GMT
etag: "6284955e-4602c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/OCS-SERTIFIKA-1.jpg | 92.205.25.11 | 200 OK | 281 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/OCS-SERTIFIKA-1.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1653x2338, components 3\012- data Size281 kB (280746 bytes) Hashe209ac465511f62f0ba9563436d1accc 419e9583ddda2d56eb34045fdc1afd8bea070e91 eb206e6816d6a3135267f260133aba64fc443d3143519f2ec7810bac9b3cb076
GET /wp-content/uploads/2022/05/OCS-SERTIFIKA-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 280746
last-modified: Wed, 18 May 2022 06:41:21 GMT
etag: "62849511-448aa"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/GRS-SERTIFIKA-1.jpg | 92.205.25.11 | 200 OK | 275 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/GRS-SERTIFIKA-1.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1653x2338, components 3\012- data Size275 kB (275265 bytes) Hashf2f06ab022e01f3f57ed57c8e395e482 acc33d17976cd9c494884ab879cdc08f97c94a42 7f4b2fabfc90647f36fa183d296bb69b4504be07b96f728e0933ef8f8bad7120
GET /wp-content/uploads/2022/05/GRS-SERTIFIKA-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 275265
last-modified: Wed, 18 May 2022 06:40:58 GMT
etag: "628494fa-43341"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/2022OK1048_BADE-KUMAS-TEKSTIL-KONFESIYON-TURIZM_page-0001.jpg | 92.205.25.11 | 200 OK | 666 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/2022OK1048_BADE-KUMAS-TEKSTIL-KONFESIYON-TURIZM_page-0001.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1240x1754, components 3\012- data Size666 kB (665496 bytes) Hash3cdd1f4f2386e778e5f1dcf1b1169957 99b08e1dd3e6df4b2f3ac18a131086e1ab53c646 c165d4c741a387d6b18884eb69bf2df652a96b907f260daecd44ac8cfdf7b8cb
GET /wp-content/uploads/2022/05/2022OK1048_BADE-KUMAS-TEKSTIL-KONFESIYON-TURIZM_page-0001.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 665496
last-modified: Thu, 26 May 2022 08:35:12 GMT
etag: "628f3bc0-a2798"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/6231f79c-d4f5-aa6f-6037-97d1-8ed8c48f.jpeg | 92.205.25.11 | 200 OK | 460 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/6231f79c-d4f5-aa6f-6037-97d1-8ed8c48f.jpeg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, baseline, precision 8, 900x1600, components 3\012- data Size460 kB (459573 bytes) Hasha65d1ebbd05ff11e6d522506fc12d392 e5b2d0503b514ac2107f856e50f8d47a3e450259 06a3ec8be6769d9303bbf8612ef4b369e27455ec245ca25a82457d9ab584713c
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/2022/05/6231f79c-d4f5-aa6f-6037-97d1-8ed8c48f.jpeg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 459573
last-modified: Fri, 13 May 2022 07:08:27 GMT
etag: "627e03eb-70335"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/622f507f-9717-8c0c-0191-89a0-8fcb2a82.jpg | 92.205.25.11 | 200 OK | 485 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/622f507f-9717-8c0c-0191-89a0-8fcb2a82.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, baseline, precision 8, 768x768, components 3\012- data Size485 kB (485150 bytes) Hashf0b275451787fb8d7aef5a56b221204e befa2a67eed8a75922d97520f76088ebd4c7484e 649ecd85ebd289c31f7634341ff3bfdea8d4befe8a190a4920f66063de8add82
GET /wp-content/uploads/2022/05/622f507f-9717-8c0c-0191-89a0-8fcb2a82.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 485150
last-modified: Fri, 13 May 2022 07:10:40 GMT
etag: "627e0470-7671e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash8b64a17d9b8c33515817fc19dd6f60d7 a752305109964bc1ef3537debed9c40c44198cea 8f7b7d229100176e82780eb0c3808b410b078025237210d8b5037c30ac3b0987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 03:02:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| badekumas.com/wp-content/uploads/2022/05/2019OK1631_BADE-KUMAS-TEKSTILL-KONFEKSIYON-TURIZM_page-0001.jpg | 92.205.25.11 | 200 OK | 471 B |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/2019OK1631_BADE-KUMAS-TEKSTILL-KONFEKSIYON-TURIZM_page-0001.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
Hash8b64a17d9b8c33515817fc19dd6f60d7 a752305109964bc1ef3537debed9c40c44198cea 8f7b7d229100176e82780eb0c3808b410b078025237210d8b5037c30ac3b0987
GET /wp-content/uploads/2022/05/2019OK1631_BADE-KUMAS-TEKSTILL-KONFEKSIYON-TURIZM_page-0001.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 759180
last-modified: Thu, 26 May 2022 08:35:00 GMT
etag: "628f3bb4-b958c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/622b07ed-beed-adf2-6661-90dd-78b5b302-1.jpg | 92.205.25.11 | 200 OK | 972 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/622b07ed-beed-adf2-6661-90dd-78b5b302-1.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, baseline, precision 8, 1000x1206, components 3\012- data Size972 kB (972125 bytes) Hash3dc780e8bc20875d0e8f7e5029acf1a5 6035fcd43ce25670da803bb1458eda27ccb6e57c 53e76e3376858972c5380837ae9460ab7dd0ea4d6b1a635e67714d02e26b9b10
GET /wp-content/uploads/2022/05/622b07ed-beed-adf2-6661-90dd-78b5b302-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 972125
last-modified: Fri, 13 May 2022 07:17:39 GMT
etag: "627e0613-ed55d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 216.58.207.227 | 200 OK | 45 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data Hash565ce506190ad3af920b40baf1794cec ad3cba5d06100e09449a864d3b5e58403b478b3d 8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://badekumas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 02 Jan 2023 18:52:41 GMT
expires: Tue, 02 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 374996
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 216.58.207.227 | 200 OK | 31 kB |
URL HTTP/2fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data Hash3fe71527811fbfedd2c07962e1bc49e7 f63e158a0480c5d711b5e268db0e75e57d87a8a5 24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://badekumas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Jan 2023 13:33:13 GMT
expires: Sat, 06 Jan 2024 13:33:13 GMT
cache-control: public, max-age=31536000
age: 48564
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 | 216.58.207.227 | 200 OK | 36 kB |
URL HTTP/2fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 35904, version 1.0\012- data Hashc26b97e7f5bb7a34d190703522d75e16 69d9e5aea0544dbaf9b78c1b65139c03eceece8f 96217f1d27fb909f92b4a6b35a0d3d6775f2f0b4d136d27aee88547d3ed87357
GET /s/nunito/v25/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://badekumas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35904
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Jan 2023 13:33:15 GMT
expires: Sat, 06 Jan 2024 13:33:15 GMT
cache-control: public, max-age=31536000
age: 48562
last-modified: Mon, 18 Jul 2022 19:34:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofIO-aBXso.woff2 | 216.58.207.227 | 200 OK | 33 kB |
URL HTTP/2fonts.gstatic.com/s/nunito/v25/XRXV3I6Li01BKofIO-aBXso.woff2 IP216.58.207.227:0
File typeWeb Open Font Format (Version 2), TrueType, length 32720, version 1.0\012- data Hash272ba1c184e00d2f0280ebcba62a1a17 d359beb5700a9216c4d9dc7ad590790ec09cc748 89def7428656f40331c1430ee1dc1846ed1e30d7001707b548f9f816d27264a5
GET /s/nunito/v25/XRXV3I6Li01BKofIO-aBXso.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://badekumas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 32720
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 06 Jan 2023 07:32:25 GMT
expires: Sat, 06 Jan 2024 07:32:25 GMT
cache-control: public, max-age=31536000
age: 70212
last-modified: Mon, 18 Jul 2022 19:31:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hash8b64a17d9b8c33515817fc19dd6f60d7 a752305109964bc1ef3537debed9c40c44198cea 8f7b7d229100176e82780eb0c3808b410b078025237210d8b5037c30ac3b0987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 07 Jan 2023 03:02:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| badekumas.com/wp-content/uploads/2022/05/6229adfd-38f3-5f48-6a79-9909-6d7c2bcd.jpg | 92.205.25.11 | 200 OK | 972 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/6229adfd-38f3-5f48-6a79-9909-6d7c2bcd.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, baseline, precision 8, 1000x1198, components 3\012- data Size972 kB (971700 bytes) Hashf826485d0a0c15c1c72227bc7cd2f06f d36df57459299ca38eebd97ad6fbdf374a100279 f23808fcf021e6295543fdb5027d326b03415787b413c35080754eab698c0bd5
GET /wp-content/uploads/2022/05/6229adfd-38f3-5f48-6a79-9909-6d7c2bcd.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 971700
last-modified: Fri, 13 May 2022 07:18:17 GMT
etag: "627e0639-ed3b4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/6228a12f-cc57-e06e-04b2-f0bc-c87ceb3a.jpg | 92.205.25.11 | 200 OK | 659 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/6228a12f-cc57-e06e-04b2-f0bc-c87ceb3a.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, baseline, precision 8, 1000x1110, components 3\012- data Size659 kB (658882 bytes) Hashddabf13c3c3b7c45f1b48665b724db78 b3b63de79b548dd6a483f7aa7fe862c907811f46 290a8c2031b141a19be63058a648d2322f72bc4cd2fa6c4ef92d46979dabb4ec
GET /wp-content/uploads/2022/05/6228a12f-cc57-e06e-04b2-f0bc-c87ceb3a.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 658882
last-modified: Fri, 13 May 2022 07:58:41 GMT
etag: "627e0fb1-a0dc2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/themes/manufacturer/fonts/fonts/themify.woff | 92.205.25.11 | 200 OK | 56 kB |
URL HTTP/2badekumas.com/wp-content/themes/manufacturer/fonts/fonts/themify.woff IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeWeb Open Font Format, CFF, length 56108, version 1.0\012- data Hasha1ecc3b826d01251edddf29c3e4e1e97 9394f35bd2addd24666b79bfc36d4f9d247cb01d 0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/manufacturer/fonts/fonts/themify.woff HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://badekumas.com/wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/font-woff
content-length: 56108
last-modified: Thu, 12 May 2022 07:11:31 GMT
etag: "627cb323-db2c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/6228a4a2-ce5a-65e0-acd3-6b28-7d736fd2.jpg | 92.205.25.11 | 200 OK | 989 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/6228a4a2-ce5a-65e0-acd3-6b28-7d736fd2.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, baseline, precision 8, 1000x1310, components 3\012- data Size989 kB (988878 bytes) Hashe2db778ad81c8c663070a3d37fd9fe53 7d959a18b7a93d119a5bdcede7f65dda0c04396b fffb448beae22c5dde201276e4499ddd4967e05ae5d1edbf4d78463790d64ccd
GET /wp-content/uploads/2022/05/6228a4a2-ce5a-65e0-acd3-6b28-7d736fd2.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 988878
last-modified: Fri, 13 May 2022 07:35:11 GMT
etag: "627e0a2f-f16ce"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 | 92.205.25.11 | 200 OK | 84 kB |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeWeb Open Font Format (Version 2), TrueType, length 84508, version 1.0\012- data Hash53820ed72e47259e4da471321b703876 8e195a9780c786c0a44b77798578908079bae4e0 02571d9d533a23c1b743c04f0248a0e5f40e86c1da19b229123f50773e4d03cd
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: font/woff2
content-length: 84508
last-modified: Thu, 12 May 2022 07:14:56 GMT
etag: "627cb3f0-14a1c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 | 92.205.25.11 | 200 OK | 78 kB |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeWeb Open Font Format (Version 2), TrueType, length 78460, version 331.-31392\012- data Hashf075c50f89795e4cdb4d45b51f1a6800 f726c4275bb494a045fde059175f072de06c01df 71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: font/woff2
content-length: 78460
last-modified: Thu, 12 May 2022 07:15:00 GMT
etag: "627cb3f4-1327c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/62299a47-4f55-de58-cffc-04de-4da814ed.jpg | 92.205.25.11 | 200 OK | 919 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/62299a47-4f55-de58-cffc-04de-4da814ed.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, baseline, precision 8, 1000x1142, components 3\012- data Size919 kB (918878 bytes) Hash45cd63267637d6b888e26ae738f4969c 05b4caa6cc04c1bfa91f8269a7dfd8e4077558a4 28dda3804bf0079bd305e796416f9992474cd23084018107d93b10a645e8b232
GET /wp-content/uploads/2022/05/62299a47-4f55-de58-cffc-04de-4da814ed.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 918878
last-modified: Fri, 13 May 2022 07:29:25 GMT
etag: "627e08d5-e055e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.0.0 | 92.205.25.11 | 200 OK | 84 kB |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.0.0 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeUnicode text, UTF-8 text, with very long lines (65534), with no line terminators Hashb39dbddba5f8f075ae2ef07f55843f91 e97e5f3f9d1321c4604a495bcc7494fca9798703 e357c6a29611f6caa3e8252f3aa9695a185f25148bae85c9346b9f3841d7d740
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.0.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:13:22 GMT
etag: W/"627cb392-29568"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/banner3-1600x793.jpg | 92.205.25.11 | 200 OK | 189 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/banner3-1600x793.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1600x793, components 3\012- data Size189 kB (189049 bytes) Hash3e12e48e123b644bc32ab7ed719a4afe 45e4274ccff724b8916a52e139dc48ca7d7f18b8 93077bc2f59889ea59c20d12410382de3c3dc467b58f528a8248a309c10038c7
GET /wp-content/uploads/2022/05/banner3-1600x793.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 189049
last-modified: Fri, 13 May 2022 10:52:35 GMT
etag: "627e3873-2e279"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2018/07/orjgnalll.gif | 92.205.25.11 | 200 OK | 16 MB |
URL HTTP/2elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2018/07/orjgnalll.gif IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeGIF image data, version 89a, 1000 x 563\012- data Size16 MB (16374657 bytes) Hash9f8c0ac949b0fc7520a38f93f399619d 7e1dabbdd9d41a1e58f4101ffe6552573c3fc1dc a0941cc4ae49aa66a001897d3cc92f35b6514e28f02e318c927fb06d6d90c7c2
GET /wp-content/uploads/2018/07/orjgnalll.gif HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/gif
content-length: 16374657
last-modified: Thu, 12 May 2022 07:06:39 GMT
etag: "627cb1ff-f9db81"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/4-40386_photo-wallpaper-lights-europe-planet-earth-planet-earth.jpg | 92.205.25.11 | 200 OK | 382 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/4-40386_photo-wallpaper-lights-europe-planet-earth-planet-earth.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1332x850, components 3\012- data Size382 kB (381996 bytes) Hash1c7163463b36b26103ac6b0bd4ce0198 38e92110a001f399e910319a0a34985f7ac2822f d9074f7d52b7a8462eb9a38bc2b301ef62a80c45eaf75cfccb9642c148d353d9
GET /wp-content/uploads/2022/05/4-40386_photo-wallpaper-lights-europe-planet-earth-planet-earth.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 381996
last-modified: Fri, 13 May 2022 11:48:12 GMT
etag: "627e457c-5d42c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/62289bd5-7738-f696-e5f1-e3b8-0c4657c5.jpg | 92.205.25.11 | 200 OK | 863 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/62289bd5-7738-f696-e5f1-e3b8-0c4657c5.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, baseline, precision 8, 1000x1075, components 3\012- data Size863 kB (863271 bytes) Hasha44daaa29fb9b4c9185dac5ecd0f4119 1b2493571ae24289f434b370543098b550db1ffb a7c0b8e3728da0b1777c0eee1a1637e812a04ef554c2a50f1f72caf7851b47a7
GET /wp-content/uploads/2022/05/62289bd5-7738-f696-e5f1-e3b8-0c4657c5.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 863271
last-modified: Fri, 13 May 2022 07:59:45 GMT
etag: "627e0ff1-d2c27"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-includes/css/dashicons.min.css?ver=6.1.1 | 92.205.25.11 | 200 OK | 424 kB |
URL HTTP/2badekumas.com/wp-includes/css/dashicons.min.css?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeASCII text, with very long lines (58981) Size424 kB (423805 bytes) Hashdedaad000b0f03e1a2140028f5da4069 7b2e521d0ce5037697374629987c301401d31581 0a096e50c03037cc29d60d974f2303cc3f94b3ad4da48749b4f4630513f3388a
GET /wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:02:32 GMT
etag: W/"627cb108-e688"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/cropped-bade-logo-1-192x192.png | 92.205.25.11 | 200 OK | 1.1 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/cropped-bade-logo-1-192x192.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data Hashae2363141a83cee56c6b2af50ff26ae5 22dfbc23464899bcee317ec764f5881f772baa20 c5ef6e209c307e3d1dc2fff73b739abc83a4645ba6bfc98ea3edc09639c13a3e
GET /wp-content/uploads/2022/05/cropped-bade-logo-1-192x192.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:39 GMT
content-type: image/png
content-length: 1113
last-modified: Tue, 31 May 2022 09:02:20 GMT
etag: "6295d99c-459"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/cropped-bade-logo-1-32x32.png | 92.205.25.11 | 200 OK | 452 B |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/cropped-bade-logo-1-32x32.png IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typePNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data Hash0702cded77475942103470dadba6ffae 8c24a558abf8ef49fc5f656548e2441c90f18222 64c40a62363388702d6991187403e1c426aaedd9a74ac1e1d52ac3b228d4dff4
GET /wp-content/uploads/2022/05/cropped-bade-logo-1-32x32.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:40 GMT
content-type: image/png
content-length: 452
x-accel-version: 0.01
last-modified: Tue, 31 May 2022 09:02:20 GMT
etag: "1c4-5e04b07bcee81"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=4.9.2 | 92.205.25.11 | 200 OK | 719 kB |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=4.9.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeASCII text, with very long lines (6758), with no line terminators Size719 kB (718599 bytes) Hash17ec85b2f501581856186a093f940548 1c75d53248e7794617b2113cb6b18a110116d84c 585a559006094713b87930e42b825bb9c9e82a2cf98e0c0c3f84d8ae1b50c221
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:09:32 GMT
etag: W/"627cb2ac-1a66"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/621cfc08-f591-aa26-31a0-6090-7cd6d94f.jpg | 92.205.25.11 | 200 OK | 695 kB |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/621cfc08-f591-aa26-31a0-6090-7cd6d94f.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
File typeJPEG image data, baseline, precision 8, 1000x1050, components 3\012- data Size695 kB (695318 bytes) Hash87e994d0c4540287f9626901bf258340 fbb7f460ec91ad27b54637e363cce8a4b895b845 a0546604e29ed5ca493347af9b58da614a05beff3bcd14b4c5684901acfe3580
GET /wp-content/uploads/2022/05/621cfc08-f591-aa26-31a0-6090-7cd6d94f.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 695318
last-modified: Fri, 13 May 2022 09:19:53 GMT
etag: "627e22b9-a9c16"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.0.0 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.0.0 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.0.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:13:22 GMT
etag: W/"627cb392-ccd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:14:57 GMT
etag: W/"2a3-5decb50b970c5"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:14:58 GMT
etag: W/"29d-5decb50c56b40"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:08:59 GMT
etag: W/"627cb28b-fd92"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:52 GMT
etag: W/"627cb374-736"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/ | 92.205.25.11 | 200 OK | 0 B |
IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:35 GMT
content-type: text/html; charset=UTF-8
link: <https://badekumas.com/wp-json/>; rel="https://api.w.org/", <https://badekumas.com/wp-json/wp/v2/pages/1170>; rel="alternate"; type="application/json", <https://badekumas.com/>; rel=shortlink
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:05:20 GMT
etag: W/"627cb1b0-4c83"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:04:01 GMT
etag: W/"627cb161-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/elementor/css/post-103.css?ver=1656484790 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/uploads/elementor/css/post-103.css?ver=1656484790 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/uploads/elementor/css/post-103.css?ver=1656484790 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Wed, 29 Jun 2022 06:39:50 GMT
etag: W/"62bbf3b6-16ea"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:14:57 GMT
etag: W/"627cb3f1-684e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/?wc-ajax=get_refreshed_fragments | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/?wc-ajax=get_refreshed_fragments IP92.205.25.11:0 ASN#21499 Host Europe GmbH
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://badekumas.com
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:38 GMT
content-type: application/json; charset=UTF-8
access-control-allow-origin: https://badekumas.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.css?ver=1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.css?ver=1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.css?ver=1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Tue, 31 May 2022 06:47:44 GMT
etag: W/"e2-5e04926574dca"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/themes/manufacturer/style.css?ver=6.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/themes/manufacturer/style.css?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/manufacturer/style.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:03:35 GMT
etag: W/"627cb147-3fb1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/themes/manufacturer/js/manufacturer_script.js?ver=1673060555 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/themes/manufacturer/js/manufacturer_script.js?ver=1673060555 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/manufacturer/js/manufacturer_script.js?ver=1673060555 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:05:21 GMT
etag: W/"627cb1b1-120d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=6.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:59 GMT
etag: W/"627cb303-5ea"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.9.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.9.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:47 GMT
etag: W/"627cb36f-b7a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:27 GMT
etag: W/"627cb35b-709"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-includes/css/classic-themes.min.css?ver=1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-includes/css/classic-themes.min.css?ver=1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 05:16:37 GMT
etag: W/"d9-5ec75f1e90e29"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.5.6 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.5.6 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.5.6 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:10:34 GMT
etag: W/"308-5decb410b2b52"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:08:55 GMT
etag: W/"627cb287-1c173"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/elementor/css/post-78.css?ver=1662026463 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/uploads/elementor/css/post-78.css?ver=1662026463 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/elementor/css/post-78.css?ver=1662026463 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 01 Sep 2022 10:01:03 GMT
etag: W/"631082df-11ad"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/themes/manufacturer/css/responsive.css?ver=1673060555 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/themes/manufacturer/css/responsive.css?ver=1673060555 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/manufacturer/css/responsive.css?ver=1673060555 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:05:19 GMT
etag: W/"627cb1af-3443"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/skroll-r.js?ver=0.6.30 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/skroll-r.js?ver=0.6.30 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor-sm-widgets/assets/js/skroll-r.js?ver=0.6.30 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:31 GMT
etag: W/"627cb2e7-6263"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:25 GMT
etag: W/"627cb359-2a6f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 01:24:52 GMT
etag: W/"628d8564-48b9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/621d066d-7d97-0c83-a39f-247b-9cdb77fc.jpg | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/621d066d-7d97-0c83-a39f-247b-9cdb77fc.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/uploads/2022/05/621d066d-7d97-0c83-a39f-247b-9cdb77fc.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 1287925
last-modified: Fri, 13 May 2022 09:18:28 GMT
etag: "627e2264-13a6f5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:28 GMT
etag: W/"627cb35c-a12"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:08:58 GMT
etag: W/"627cb28a-1212"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:12:25 GMT
etag: W/"627cb359-4824"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:14:58 GMT
etag: W/"627cb3f2-e238"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:14:59 GMT
etag: W/"627cb3f3-3acf"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:08:53 GMT
etag: W/"627cb285-37c8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:05:12 GMT
etag: W/"627cb1a8-609e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/62289ad6-9474-4ed5-6dc4-2b4c-34ab66c1.jpg | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/62289ad6-9474-4ed5-6dc4-2b4c-34ab66c1.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/uploads/2022/05/62289ad6-9474-4ed5-6dc4-2b4c-34ab66c1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 1428810
last-modified: Fri, 13 May 2022 09:15:56 GMT
etag: "627e21cc-15cd4a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/621cfea8-6849-0cc7-3a4e-7689-ff93b474.jpg | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/621cfea8-6849-0cc7-3a4e-7689-ff93b474.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/uploads/2022/05/621cfea8-6849-0cc7-3a4e-7689-ff93b474.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 1301417
last-modified: Fri, 13 May 2022 09:19:17 GMT
etag: "627e2295-13dba9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/essential-addons-elementor/assets/css/lity.min.css?ver=6.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/essential-addons-elementor/assets/css/lity.min.css?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/essential-addons-elementor/assets/css/lity.min.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:11:03 GMT
etag: W/"627cb307-b1d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/elementor/css/post-1170.css?ver=1656487506 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/uploads/elementor/css/post-1170.css?ver=1656487506 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/elementor/css/post-1170.css?ver=1656487506 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Wed, 29 Jun 2022 07:25:06 GMT
etag: W/"62bbfe52-57dd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:29 GMT
etag: W/"627cb35d-2fa6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 05:16:38 GMT
etag: W/"6361fd36-53c0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.9.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.9.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:48 GMT
etag: W/"627cb370-bdd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:08:53 GMT
etag: W/"627cb285-780"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/essential-addons-elementor/assets/css/essential-addons-elementor.css?ver=6.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/essential-addons-elementor/assets/css/essential-addons-elementor.css?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/essential-addons-elementor/assets/css/essential-addons-elementor.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:11:03 GMT
etag: W/"627cb307-1e490"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/themes/manufacturer/css/manufacturer_style.css?ver=1673060555 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/themes/manufacturer/css/manufacturer_style.css?ver=1673060555 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/themes/manufacturer/css/manufacturer_style.css?ver=1673060555 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:05:20 GMT
etag: W/"627cb1b0-257bb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/themes/manufacturer/js/navigation.js?ver=20151215 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/themes/manufacturer/js/navigation.js?ver=20151215 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/manufacturer/js/navigation.js?ver=20151215 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:05:21 GMT
etag: W/"627cb1b1-bbd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:50 GMT
etag: W/"627cb372-255e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/elementor/css/post-1.css?ver=1612200241 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/uploads/elementor/css/post-1.css?ver=1612200241 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/elementor/css/post-1.css?ver=1612200241 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:06:06 GMT
etag: W/"3b2-5decb310d6cc5"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/themes/manufacturer/js/skip-link-focus-fix.js?ver=20151215 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/themes/manufacturer/js/skip-link-focus-fix.js?ver=20151215 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/manufacturer/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:05:21 GMT
etag: W/"2d3-5decb2e68c9b1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/bade-kumas.mp4 | 92.205.25.11 | 206 Partial Content | 0 B |
URL HTTP/2badekumas.com/bade-kumas.mp4 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /bade-kumas.mp4 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: video/mp4
content-length: 47432912
last-modified: Mon, 23 May 2022 14:59:15 GMT
etag: "628ba143-2d3c4d0"
x-powered-by: PleskLin
content-range: bytes 0-47432911/47432912
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/essential-addons-elementor/assets/slick/slick.css?ver=6.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/essential-addons-elementor/assets/slick/slick.css?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/essential-addons-elementor/assets/slick/slick.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:11:04 GMT
etag: W/"627cb308-130c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=4.9.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=4.9.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:09:34 GMT
etag: W/"627cb2ae-44e7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=4.9.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=4.9.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:09:33 GMT
etag: W/"627cb2ad-f42f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:08:59 GMT
etag: W/"627cb28b-13c43"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CNunito%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&subset=latin-ext&ver=6.1.1 | 142.250.74.74 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CNunito%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&subset=latin-ext&ver=6.1.1 IP142.250.74.74:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CNunito%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&subset=latin-ext&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 07 Jan 2023 03:02:37 GMT
date: Sat, 07 Jan 2023 03:02:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/css/owl.carousel.min.css?ver=2.3.4 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/css/owl.carousel.min.css?ver=2.3.4 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor-sm-widgets/assets/css/owl.carousel.min.css?ver=2.3.4 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:10:30 GMT
etag: W/"627cb2e6-d17"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.5.6 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.5.6 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.5.6 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:10:35 GMT
etag: W/"627cb2eb-1248f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.9.2 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.9.2 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:46 GMT
etag: W/"627cb36e-809"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:29 GMT
etag: W/"627cb35d-21f91"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:09:01 GMT
etag: W/"627cb28d-9188"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=6.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:10:59 GMT
etag: W/"627cb303-4e1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:14:58 GMT
etag: W/"2a5-5decb50bf9707"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 05:16:38 GMT
etag: W/"6361fd36-15e54"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/instafeed.min.js?ver=1.9.3 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/instafeed.min.js?ver=1.9.3 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/elementor-sm-widgets/assets/js/instafeed.min.js?ver=1.9.3 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:31 GMT
etag: W/"627cb2e7-1a80"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 05:15:51 GMT
etag: W/"63747207-172a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/scripts.js?ver=1673060555 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/scripts.js?ver=1673060555 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/elementor-sm-widgets/assets/js/scripts.js?ver=1673060555 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:31 GMT
etag: W/"627cb2e7-34b8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/owl.carousel.min.js?ver=2.3.4 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/owl.carousel.min.js?ver=2.3.4 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/plugins/elementor-sm-widgets/assets/js/owl.carousel.min.js?ver=2.3.4 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:31 GMT
etag: W/"627cb2e7-ad3b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:10:30 GMT
etag: W/"627cb2e6-b802"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:14:56 GMT
etag: W/"627cb3f0-42b4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.1.1 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.1.1 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:36 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:14:57 GMT
etag: W/"627cb3f1-e7d0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.5.6 | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.5.6 IP92.205.25.11:0 ASN#21499 Host Europe GmbH
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.5.6 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:34 GMT
etag: W/"627cb2ea-5cb7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open%20Sans:700,400%7CNunito:700,400&display=swap&ver=1653551160 | 142.250.74.74 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Open%20Sans:700,400%7CNunito:700,400&display=swap&ver=1653551160 IP142.250.74.74:0
GET /css?family=Open%20Sans:700,400%7CNunito:700,400&display=swap&ver=1653551160 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 07 Jan 2023 03:02:37 GMT
date: Sat, 07 Jan 2023 03:02:37 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| badekumas.com/wp-content/uploads/2022/05/621d0ff3-e6ac-df3a-99f9-586c-5fbe9aea.jpg | 92.205.25.11 | 200 OK | 0 B |
URL HTTP/2badekumas.com/wp-content/uploads/2022/05/621d0ff3-e6ac-df3a-99f9-586c-5fbe9aea.jpg IP92.205.25.11:0 ASN#21499 Host Europe GmbH
GET /wp-content/uploads/2022/05/621d0ff3-e6ac-df3a-99f9-586c-5fbe9aea.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 07 Jan 2023 03:02:37 GMT
content-type: image/jpeg
content-length: 1059273
last-modified: Fri, 13 May 2022 09:16:38 GMT
etag: "627e21f6-1029c9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|