elegant-snyder.92-205-25-11.plesk.page/
92.205.25.11301 Moved Permanently 162 B URL HTTP/1.1 elegant-snyder.92-205-25-11.plesk.page/
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 14:31:29 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://elegant-snyder.92-205-25-11.plesk.page/
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3862
Expires: Thu, 24 Nov 2022 15:35:52 GMT
Date: Thu, 24 Nov 2022 14:31:30 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5641
Cache-Control: max-age=164022
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:31:30 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 12:05:12 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12420
Expires: Thu, 24 Nov 2022 17:58:30 GMT
Date: Thu, 24 Nov 2022 14:31:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 14:18:58 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 752
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: gf91++sfGqZgd92JaRraFdcgRkh4G8WQWQcGGQ2bOOHDV960DxSRq9YPa/F4+Jp5LfrOf4OiDwM=
x-amz-request-id: F0F7GM8MV8GH0XPE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 13:40:25 GMT
age: 3065
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:30 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5e20ac8d8f1ab3bcc3f6a379d399a602
22c6c3d1896e1a4037ab2198bbca8a9cc595901c
2a3f5ac4bf1064998b1998780c0b8bdf70476d67e8757a2eb520db99f2cd3b3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A3F5AC4BF1064998B1998780C0B8BDF70476D67E8757A2EB520DB99F2CD3B3E"
Last-Modified: Wed, 23 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21592
Expires: Thu, 24 Nov 2022 20:31:22 GMT
Date: Thu, 24 Nov 2022 14:31:30 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 14:11:11 GMT
cache-control: public,max-age=3600
age: 1219
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4551
Cache-Control: max-age=157870
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:31:30 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 10:22:40 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
54.187.71.185101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.71.185:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XwjtSOLWoK2MSrNUclWNfA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4kDN0n9TIpzdmnjIHxKnImFPmRg=
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6c5ac3fc5a8cfa285f9186fdd7c8eea4
555485167dd4c1a6532962e516622ccb0ca4d4e4
f527432c3672448b4c6094ae0b1773bf9216560b8b75595e87aba34be6916f04
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F527432C3672448B4C6094AE0B1773BF9216560B8B75595E87ABA34BE6916F04"
Last-Modified: Thu, 24 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 24 Nov 2022 20:31:32 GMT
Date: Thu, 24 Nov 2022 14:31:32 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15721
Expires: Thu, 24 Nov 2022 18:53:33 GMT
Date: Thu, 24 Nov 2022 14:31:32 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15721
Expires: Thu, 24 Nov 2022 18:53:33 GMT
Date: Thu, 24 Nov 2022 14:31:32 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15721
Expires: Thu, 24 Nov 2022 18:53:33 GMT
Date: Thu, 24 Nov 2022 14:31:32 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15721
Expires: Thu, 24 Nov 2022 18:53:33 GMT
Date: Thu, 24 Nov 2022 14:31:32 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15721
Expires: Thu, 24 Nov 2022 18:53:33 GMT
Date: Thu, 24 Nov 2022 14:31:32 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b4157f2c5c3c77ce699324ecb08f47c7
a7d9135f9d01ba13c3cdaf8b038c70212f159297
2305f7afee95bb34d9e8dbff571c6b146ba7b694be96e9e925c32d1f41785916
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d85d03d-8fcf-42f4-bada-e7f488f04307.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7462
x-amzn-requestid: 1f6fb14d-83e0-43d3-9dab-5bc83af1a7c4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwV3HV9oAMFs9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9425-634d43db6308e0be596aa5a0;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GW5UTfY7-TwPWTno9z1e21a2cA9fmU7GfHFYWdL-zQvMLxeq-S9Trg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 22:08:16 GMT
age: 58996
etag: "a7d9135f9d01ba13c3cdaf8b038c70212f159297"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9d93b2a6875d446c3467eb49767eef5
303c571b13b05fcf27ee1159d8fdf6369aaef0a2
2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 4d94ce1b-d18f-43b8-bb4d-e7093f9bea42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvd2G9UIAMFrEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5f2-64a570135be59b83031811da;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:04:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JygkDI7XSvlgurUTot874ZAXlOIqnv4cntMQ55IvHVqw93JBcksZjQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:10:24 GMT
age: 26468
etag: "303c571b13b05fcf27ee1159d8fdf6369aaef0a2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 92c78302bcce1568eb6a5563100b932c
43d1dec7fc06879988c9c3cadd800cc8145df988
0dda9914306c8e3a7ea75eade8e762652d93907dd6c5a8cc81707d6d8098b60a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca5cb469-21a0-420a-875c-a81635b33f53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7993
x-amzn-requestid: 9f0ff853-4819-47cd-959d-658401ea5748
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCsG5mIAMFqAQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-1c48b9223684f2942f8dd42d;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YJuHCuUgkLuFFiQUlrPWgv9grHznufMTU08hi4ZMpQTBmou6BGWrhQ==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:47:52 GMT
age: 60220
etag: "43d1dec7fc06879988c9c3cadd800cc8145df988"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DYBcunpyI0FBJsJGh1kKpFI3X8kzCkO3mCxzUtWnaMKBT-Bv-zkq3Q==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:59:18 GMT
age: 59534
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0856fdb55f19f03a1bec38b3d6e0ac77
89accd230fba95fe0049678070817b36ead015fa
17c6e6f9bb8f4261fff2dc2a43ed994986418761624b8afead768e89927594f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5070
x-amzn-requestid: d86d95ad-9b78-4047-82e7-04e83a97e330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwViF1GIAMF_PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9423-10809ba1634776171cf79cb8;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: rrs7G6Wto6iY0rT6KsKwKAOPJjehXqD0jHZrR_eaiqpepQILFr7Dtw==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:07 GMT
age: 60145
etag: "89accd230fba95fe0049678070817b36ead015fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
34.120.237.76200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 05:04:28 GMT
age: 34024
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/csshero-static-style-manufacturer.css?ver=2
92.205.25.11200 OK 15 B URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/csshero-static-style-manufacturer.css?ver=2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with no line terminators
Hash 0e95b00d49ca5571d4820b4d06544824
3c6601b155eab3256dea60aa453ae2fdb1e46c28
94c733997ad8618a9f01c59a4d466172f77561fa15ebe253df787bf75167c0e3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/05/csshero-static-style-manufacturer.css?ver=2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
content-length: 15
x-accel-version: 0.01
last-modified: Fri, 13 May 2022 12:45:37 GMT
etag: "f-5dee40d16582c"
accept-ranges: bytes
access-control-allow-origin: *
x-powered-by: PleskLin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:31:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:31:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
badekumas.com/wp-content/uploads/flags/gb.91f20023.png
92.205.25.11200 OK 15 kB URL HTTP/2 badekumas.com/wp-content/uploads/flags/gb.91f20023.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash e54cdcad7f06d6931ab4a3ef0b90f0e3
097887e31ad50ac97ed33ec25bd0637cdbba558c
e09ed9ad1d83d464ebc7d3abf189ad0af486b3e64c57d75581adb379482bad9c
GET /wp-content/uploads/flags/gb.91f20023.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 15410
last-modified: Tue, 23 Aug 2022 13:16:12 GMT
etag: "6304d31c-3c32"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/09/cropped-bade-logo-kopya.png
92.205.25.11200 OK 98 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/09/cropped-bade-logo-kopya.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 5395 x 1487, 8-bit/color RGBA, non-interlaced\012- data
Hash 9fa34f1804e0c8c0701edc376b463ca7
0483db56cfaede5aa4e3e98002ead70c99ebd433
3710719fd92c3ee8ca1d6bd233aa0c46f3f5becea07d1c888b6440d59723697b
GET /wp-content/uploads/2022/09/cropped-bade-logo-kopya.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 97879
last-modified: Thu, 01 Sep 2022 09:57:22 GMT
etag: "63108202-17e57"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/flags/ru.png
92.205.25.11200 OK 52 kB URL HTTP/2 badekumas.com/wp-content/uploads/flags/ru.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 512 x 512, 8-bit colormap, non-interlaced\012- data
Hash 5d0a62cb92b121bb038a8c4dfffca3b1
21f6538f9a7cc63fa2273a9d4e9a1b5e85b90ab9
15d64864898d7307e8371af88a3e93e6069f9d3cd141ad44f8f625fef78b3249
GET /wp-content/uploads/flags/ru.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 52010
last-modified: Tue, 23 Aug 2022 13:15:58 GMT
etag: "6304d30e-cb2a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/371-removebg-preview.png
92.205.25.11200 OK 113 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/371-removebg-preview.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 883 x 283, 8-bit/color RGBA, non-interlaced\012- data
Size 113 kB (113318 bytes)
Hash 072c2fea8df97e9e766aec25a8b8213b
5595ffdde6cf206fe8847012b5b2717c8982b961
9112c562f92b174391375cadeb811800e39c4df7ff97e69d20ce90f142097777
GET /wp-content/uploads/2022/05/371-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 113318
last-modified: Thu, 26 May 2022 07:52:44 GMT
etag: "628f31cc-1baa6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/thumbnail-removebg-preview.png
92.205.25.11200 OK 44 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/thumbnail-removebg-preview.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 348 x 196, 8-bit/color RGBA, non-interlaced\012- data
Hash e89bb467fc7df42c470dbbb6cfa6e24b
ae68eab47fd96ce12d19c8fa8659806efbdd5d46
23b820530a01fe40fa55080e2f0b436e4183fd7af2e1b9bcefe750147e92056f
GET /wp-content/uploads/2022/05/thumbnail-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 43567
last-modified: Thu, 26 May 2022 08:07:07 GMT
etag: "628f352b-aa2f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview.png
92.205.25.11200 OK 23 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 5081306bbf176417266dc678c3dee3c9
0d05f4d1f60e69bc38f7c43014cc48a13b2e08df
41079f01ec4de7d5ae53d4f5a296bccbfbf30e4e1ad719e0cb1e1e015e5326e1
GET /wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 22704
last-modified: Mon, 27 Jun 2022 14:17:36 GMT
etag: "62b9bc00-58b0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/certification-40-200-200-removebg-preview.png
92.205.25.11200 OK 30 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/certification-40-200-200-removebg-preview.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 32b30d5e15521ecf80df6c47e4b7cb0f
a9a6dbd5c16da45b1f6bce099e48450bb28ed18f
afb4e7514b06429ff0734fd39a606bfb9a9d19c427cc1b7d31f6e04d4a6594e4
GET /wp-content/uploads/2022/05/certification-40-200-200-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 29849
last-modified: Thu, 26 May 2022 08:19:55 GMT
etag: "628f382b-7499"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5e20ac8d8f1ab3bcc3f6a379d399a602
22c6c3d1896e1a4037ab2198bbca8a9cc595901c
2a3f5ac4bf1064998b1998780c0b8bdf70476d67e8757a2eb520db99f2cd3b3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A3F5AC4BF1064998B1998780C0B8BDF70476D67E8757A2EB520DB99F2CD3B3E"
Last-Modified: Wed, 23 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21589
Expires: Thu, 24 Nov 2022 20:31:22 GMT
Date: Thu, 24 Nov 2022 14:31:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5e20ac8d8f1ab3bcc3f6a379d399a602
22c6c3d1896e1a4037ab2198bbca8a9cc595901c
2a3f5ac4bf1064998b1998780c0b8bdf70476d67e8757a2eb520db99f2cd3b3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A3F5AC4BF1064998B1998780C0B8BDF70476D67E8757A2EB520DB99F2CD3B3E"
Last-Modified: Wed, 23 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21589
Expires: Thu, 24 Nov 2022 20:31:22 GMT
Date: Thu, 24 Nov 2022 14:31:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5e20ac8d8f1ab3bcc3f6a379d399a602
22c6c3d1896e1a4037ab2198bbca8a9cc595901c
2a3f5ac4bf1064998b1998780c0b8bdf70476d67e8757a2eb520db99f2cd3b3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A3F5AC4BF1064998B1998780C0B8BDF70476D67E8757A2EB520DB99F2CD3B3E"
Last-Modified: Wed, 23 Nov 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21589
Expires: Thu, 24 Nov 2022 20:31:22 GMT
Date: Thu, 24 Nov 2022 14:31:33 GMT
Connection: keep-alive
badekumas.com/wp-content/uploads/2022/05/2022OK1048_BADE-KUMAS-TEKSTIL-KONFESIYON-TURIZM_page-0001.jpg
92.205.25.11200 OK 666 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/2022OK1048_BADE-KUMAS-TEKSTIL-KONFESIYON-TURIZM_page-0001.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 1240x1754, components 3\012- data
Size 666 kB (665496 bytes)
Hash 3cdd1f4f2386e778e5f1dcf1b1169957
99b08e1dd3e6df4b2f3ac18a131086e1ab53c646
c165d4c741a387d6b18884eb69bf2df652a96b907f260daecd44ac8cfdf7b8cb
GET /wp-content/uploads/2022/05/2022OK1048_BADE-KUMAS-TEKSTIL-KONFESIYON-TURIZM_page-0001.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 665496
last-modified: Thu, 26 May 2022 08:35:12 GMT
etag: "628f3bc0-a2798"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/certification-40-200-200-removebg-preview-150x150.png
92.205.25.11200 OK 23 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/certification-40-200-200-removebg-preview-150x150.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash f6360acb1a39a26d9552b7404506394a
a5fa5592ea32b90f07921d92fc79c1e6d3534e19
a97374c7a7b0e82ea01aa7b40dc3bb3aa45e436fde6ede4ae7eaeaae07bf5734
GET /wp-content/uploads/2022/05/certification-40-200-200-removebg-preview-150x150.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 22650
last-modified: Thu, 26 May 2022 08:19:55 GMT
etag: "628f382b-587a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/Foursource-logo-420x280-300x200-1-150x150.jpg
92.205.25.11200 OK 5.9 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/Foursource-logo-420x280-300x200-1-150x150.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 8e1da4fd68386cff7e6d38632b6db909
417092315ea587fce3b742123208924c834b78a2
91166185808c699ee35f97c7dca6a9a008a2f6365c8e083afac4da600c88223b
GET /wp-content/uploads/2022/05/Foursource-logo-420x280-300x200-1-150x150.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 5850
last-modified: Wed, 18 May 2022 06:50:25 GMT
etag: "62849731-16da"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/QPc9Ejc6_400x400-150x150.jpg
92.205.25.11200 OK 4.1 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/QPc9Ejc6_400x400-150x150.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash dd84a55573e09ee1317c66b1ff5298ac
8be95fd386f2d6fc41e34a41be6d7965c2ef48d7
2c73e70c636b313895a88d6370c37fd9d62580572bd9e6b9fccf91574b0064e3
GET /wp-content/uploads/2022/05/QPc9Ejc6_400x400-150x150.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 4131
last-modified: Wed, 18 May 2022 06:51:14 GMT
etag: "62849762-1023"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview-150x150.png
92.205.25.11200 OK 20 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview-150x150.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 09f0b4798ce59afbe64cfa2e5265e9f4
baead6842550ebafd8eeb7bf9b468b9e24d5b629
2733e9bc210409dc2ef18b41e102b727eee3fcb2edd2a1770c4280a70da93ab7
GET /wp-content/uploads/2022/06/0e6b59b60b4ba2bab6fcc05900fd04bb-certification-87-200-200-removebg-preview-150x150.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 20119
last-modified: Mon, 27 Jun 2022 14:17:36 GMT
etag: "62b9bc00-4e97"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/ecolabel-005-removebg-preview.png
92.205.25.11200 OK 85 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/ecolabel-005-removebg-preview.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 577 x 433, 8-bit/color RGBA, non-interlaced\012- data
Hash 441f38ae4c5a65a22ac4450538be78f0
e6fcdd0dcc324eed154d0b2603d81dbe29415c8f
563aa0d20a59d49b99d056c37621048503c44f77d4c6f99220ff7976ac533afe
GET /wp-content/uploads/2022/05/ecolabel-005-removebg-preview.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 85159
last-modified: Thu, 26 May 2022 08:19:18 GMT
etag: "628f3806-14ca7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/GOTS-SERTFIKA-1.jpg
92.205.25.11200 OK 277 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/GOTS-SERTFIKA-1.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1653x2338, components 3\012- data
Size 277 kB (277255 bytes)
Hash d840dfe19f526bc1d204bda0644ac0df
34d3c517cd491a541dceb539a1a7c4f4df606680
0d411f171c9b7c17b2473fd63a5676535ced2928d1e6b40d7c24efa7b7e3e25b
GET /wp-content/uploads/2022/05/GOTS-SERTFIKA-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 277255
last-modified: Wed, 18 May 2022 06:40:40 GMT
etag: "628494e8-43b07"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/GRS-SERTIFIKA-1.jpg
92.205.25.11200 OK 275 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/GRS-SERTIFIKA-1.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1653x2338, components 3\012- data
Size 275 kB (275265 bytes)
Hash f2f06ab022e01f3f57ed57c8e395e482
acc33d17976cd9c494884ab879cdc08f97c94a42
7f4b2fabfc90647f36fa183d296bb69b4504be07b96f728e0933ef8f8bad7120
GET /wp-content/uploads/2022/05/GRS-SERTIFIKA-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 275265
last-modified: Wed, 18 May 2022 06:40:58 GMT
etag: "628494fa-43341"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2021/02/izmir_ticaret_odasi-logo-FAD961111B-seeklogo.com_-1-150x150.png
92.205.25.11200 OK 20 kB URL HTTP/2 badekumas.com/wp-content/uploads/2021/02/izmir_ticaret_odasi-logo-FAD961111B-seeklogo.com_-1-150x150.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 8a5b249d90e32b62e91ab32d62b08fa2
9108ba8d5ae6f63c2bf576c4a04bf0677c4a3a04
84a356b1c0ed43a802e8e7c58224e99ee6675e50609d752eea3f38c88ba7e7ef
GET /wp-content/uploads/2021/02/izmir_ticaret_odasi-logo-FAD961111B-seeklogo.com_-1-150x150.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 20511
last-modified: Fri, 13 May 2022 12:13:01 GMT
etag: "627e4b4d-501f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2021/02/eib-logo-1-150x150.jpg
92.205.25.11200 OK 3.2 kB URL HTTP/2 badekumas.com/wp-content/uploads/2021/02/eib-logo-1-150x150.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 46f6208591009f834134c28dc146a9a6
3e2d49933f8a43cab3a2b7170080ce2138951bee
977dc36126adba371e47ae92035de6a250361128065766c9a1b52cb72f845f9c
GET /wp-content/uploads/2021/02/eib-logo-1-150x150.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 3170
last-modified: Fri, 13 May 2022 12:13:02 GMT
etag: "627e4b4e-c62"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/RCS-SERTIFIKA-1.jpg
92.205.25.11200 OK 287 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/RCS-SERTIFIKA-1.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1653x2338, components 3\012- data
Size 287 kB (286764 bytes)
Hash d5059778bd55986abe0167d9140e8e43
5e315113dc18ddba74c5a613b609017066b8b462
65afee7a6eb5104d24d2aa3a21c1073484876f5b5d0f3231c242d1abcd77742b
GET /wp-content/uploads/2022/05/RCS-SERTIFIKA-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 286764
last-modified: Wed, 18 May 2022 06:42:38 GMT
etag: "6284955e-4602c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:31:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
badekumas.com/wp-content/uploads/2022/05/OCS-SERTIFIKA-1.jpg
92.205.25.11200 OK 281 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/OCS-SERTIFIKA-1.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1653x2338, components 3\012- data
Size 281 kB (280746 bytes)
Hash e209ac465511f62f0ba9563436d1accc
419e9583ddda2d56eb34045fdc1afd8bea070e91
eb206e6816d6a3135267f260133aba64fc443d3143519f2ec7810bac9b3cb076
GET /wp-content/uploads/2022/05/OCS-SERTIFIKA-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 280746
last-modified: Wed, 18 May 2022 06:41:21 GMT
etag: "62849511-448aa"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2022/05/gots-logo_rgb_2018_transp_72dpi-d4465ef0.png
92.205.25.11200 OK 6.9 kB URL HTTP/2 elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2022/05/gots-logo_rgb_2018_transp_72dpi-d4465ef0.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 642baf98f45cd8d21887d220d508a7d9
87df9e100b57703eb2c70ce8e1dcc0aa5f6143dc
ca54b69d22db92b7446fe5b18f681a8ed8cc91d59f0dac32bbf8e1b579399394
GET /wp-content/uploads/2022/05/gots-logo_rgb_2018_transp_72dpi-d4465ef0.png HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 6853
last-modified: Mon, 23 May 2022 14:22:02 GMT
etag: "628b988a-1ac5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2021/02/LOGOMUZ.png
92.205.25.11200 OK 11 kB URL HTTP/2 elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2021/02/LOGOMUZ.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 297 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 12627d301c82af9d7100210f4a1ed071
e1501e54f0f23427ea29452369b7c07ee36dd461
7795055ccac88a455166002340a3684220c4005b23763493a90bb2b200c8d83c
GET /wp-content/uploads/2021/02/LOGOMUZ.png HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 10966
last-modified: Thu, 12 May 2022 07:05:57 GMT
etag: "627cb1d5-2ad6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/themes/manufacturer/fonts/fonts/themify.woff
92.205.25.11200 OK 56 kB URL HTTP/2 badekumas.com/wp-content/themes/manufacturer/fonts/fonts/themify.woff
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type Web Open Font Format, CFF, length 56108, version 1.0\012- data
Hash a1ecc3b826d01251edddf29c3e4e1e97
9394f35bd2addd24666b79bfc36d4f9d247cb01d
0db5c5a1475eb7a3e5028983ea1e642d1b2c00faff6a250a37502b0f3832a4a7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/manufacturer/fonts/fonts/themify.woff HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://badekumas.com/wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/font-woff
content-length: 56108
last-modified: Thu, 12 May 2022 07:11:31 GMT
etag: "627cb323-db2c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0
92.205.25.11200 OK 84 kB URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type Web Open Font Format (Version 2), TrueType, length 84508, version 1.0\012- data
Hash 53820ed72e47259e4da471321b703876
8e195a9780c786c0a44b77798578908079bae4e0
02571d9d533a23c1b743c04f0248a0e5f40e86c1da19b229123f50773e4d03cd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.10.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: font/woff2
content-length: 84508
last-modified: Thu, 12 May 2022 07:14:56 GMT
etag: "627cb3f0-14a1c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:31:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:31:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.1.1
92.205.25.11200 OK 13 kB URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (59158)
Hash 90af8e883d471d7f7afa84e5189b5a49
a79623575b7be4fd15cc250db98558cb0a0f7f80
1b07057cf099d3fe3f3a497cd6f23ff1e2d156b73717f2feb0694288a3cbdc0b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:14:57 GMT
etag: W/"627cb3f1-e7d0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/elementor/css/post-1.css?ver=1612200241
92.205.25.11200 OK 754 B URL HTTP/2 badekumas.com/wp-content/uploads/elementor/css/post-1.css?ver=1612200241
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (946), with no line terminators
Hash 449027d9b967e8d7051ef30d672644fd
d629bd36c04a1bb642c03de599839bea494dd892
73b71e54cd8eadb5bd2037b8e900e509c42ed842bae8148fc61bba0c60372b23
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-1.css?ver=1612200241 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:06:06 GMT
etag: W/"3b2-5decb310d6cc5"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
216.58.207.195200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://badekumas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 05:42:51 GMT
expires: Fri, 24 Nov 2023 05:42:51 GMT
cache-control: public, max-age=31536000
age: 31722
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1
92.205.25.11200 OK 2.9 kB URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (10019)
Hash 7cbe9b742209876a4c38e33ea4677502
0d6cefcc4fadb84fea00ed9f5e560449a640f812
78a1eae78d23a23d2a04410156d0c780a5e2cef3196f01e3ea94dd2cc92c1a8e
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:12:25 GMT
etag: W/"627cb359-4824"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1
92.205.25.11200 OK 47 kB URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (37217)
Hash ad886270df127a56f7ab8694f9c1dc09
bdf1b6899f5e7c1397b6a7b99ea6054b9d410e54
e30233e71d24c8d09907237fef4e1c28181ea5c261c56b7aae29f3bd6a663641
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/preloaded-elements-handlers.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:09:01 GMT
etag: W/"627cb28d-9188"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
216.58.207.195200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP 216.58.207.195:0
File type Web Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data
Hash 3fe71527811fbfedd2c07962e1bc49e7
f63e158a0480c5d711b5e268db0e75e57d87a8a5
24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://badekumas.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 18:57:58 GMT
expires: Tue, 21 Nov 2023 18:57:58 GMT
cache-control: public, max-age=31536000
age: 243215
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
badekumas.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
92.205.25.11200 OK 37 kB URL HTTP/2 badekumas.com/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (15660)
Hash dbc1b1edc58ae2583e679433819e3e34
e9e12f27f6f5a5d00385f7c18258450ee987deb7
19c53ebdf9c66b17dbd4ea7ca23e45e1b328c3c20ba2162b41ceb77d48cad482
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 01:24:52 GMT
etag: W/"628d8564-48b9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 14:31:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
badekumas.com/wp-content/uploads/2022/05/indir-1-768x455.png
92.205.25.11200 OK 389 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/indir-1-768x455.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 768 x 455, 8-bit/color RGBA, non-interlaced\012- data
Size 389 kB (388702 bytes)
Hash e86d3e7a14b6961d090db44803a7d417
24343a3be99a7510699f89e808acd40f123b0531
407ed34ddafedd95e07764bc1f3fc3a5bea08a8c2b115825bab229e0a6c6e0d9
GET /wp-content/uploads/2022/05/indir-1-768x455.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/png
content-length: 388702
last-modified: Fri, 13 May 2022 11:56:35 GMT
etag: "627e4773-5ee5e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/6231f79c-d4f5-aa6f-6037-97d1-8ed8c48f.jpeg
92.205.25.11200 OK 460 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/6231f79c-d4f5-aa6f-6037-97d1-8ed8c48f.jpeg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, baseline, precision 8, 900x1600, components 3\012- data
Size 460 kB (459573 bytes)
Hash a65d1ebbd05ff11e6d522506fc12d392
e5b2d0503b514ac2107f856e50f8d47a3e450259
06a3ec8be6769d9303bbf8612ef4b369e27455ec245ca25a82457d9ab584713c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2022/05/6231f79c-d4f5-aa6f-6037-97d1-8ed8c48f.jpeg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 459573
last-modified: Fri, 13 May 2022 07:08:27 GMT
etag: "627e03eb-70335"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/622f507f-9717-8c0c-0191-89a0-8fcb2a82.jpg
92.205.25.11200 OK 485 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/622f507f-9717-8c0c-0191-89a0-8fcb2a82.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, baseline, precision 8, 768x768, components 3\012- data
Size 485 kB (485150 bytes)
Hash f0b275451787fb8d7aef5a56b221204e
befa2a67eed8a75922d97520f76088ebd4c7484e
649ecd85ebd289c31f7634341ff3bfdea8d4befe8a190a4920f66063de8add82
GET /wp-content/uploads/2022/05/622f507f-9717-8c0c-0191-89a0-8fcb2a82.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 485150
last-modified: Fri, 13 May 2022 07:10:40 GMT
etag: "627e0470-7671e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/622b07ed-beed-adf2-6661-90dd-78b5b302-1.jpg
92.205.25.11200 OK 972 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/622b07ed-beed-adf2-6661-90dd-78b5b302-1.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, baseline, precision 8, 1000x1206, components 3\012- data
Size 972 kB (972125 bytes)
Hash 3dc780e8bc20875d0e8f7e5029acf1a5
6035fcd43ce25670da803bb1458eda27ccb6e57c
53e76e3376858972c5380837ae9460ab7dd0ea4d6b1a635e67714d02e26b9b10
GET /wp-content/uploads/2022/05/622b07ed-beed-adf2-6661-90dd-78b5b302-1.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 972125
last-modified: Fri, 13 May 2022 07:17:39 GMT
etag: "627e0613-ed55d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/6229adfd-38f3-5f48-6a79-9909-6d7c2bcd.jpg
92.205.25.11200 OK 972 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/6229adfd-38f3-5f48-6a79-9909-6d7c2bcd.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, baseline, precision 8, 1000x1198, components 3\012- data
Size 972 kB (971700 bytes)
Hash f826485d0a0c15c1c72227bc7cd2f06f
d36df57459299ca38eebd97ad6fbdf374a100279
f23808fcf021e6295543fdb5027d326b03415787b413c35080754eab698c0bd5
GET /wp-content/uploads/2022/05/6229adfd-38f3-5f48-6a79-9909-6d7c2bcd.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 971700
last-modified: Fri, 13 May 2022 07:18:17 GMT
etag: "627e0639-ed3b4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/essential-addons-elementor/assets/css/lity.min.css?ver=6.1.1
92.205.25.11200 OK 660 kB URL HTTP/2 badekumas.com/wp-content/plugins/essential-addons-elementor/assets/css/lity.min.css?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (2782)
Size 660 kB (659683 bytes)
Hash 5b6be9ff356c9c9b01d3c3b0b0779ad0
fba7e63ebadfb0ec3707733e622c28355cf064c6
fc36dbe8a0043a5b8fb67051b705028898a2c824c818197d724bd57828f3b94e
GET /wp-content/plugins/essential-addons-elementor/assets/css/lity.min.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:11:03 GMT
etag: W/"627cb307-b1d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/6228a4a2-ce5a-65e0-acd3-6b28-7d736fd2.jpg
92.205.25.11200 OK 989 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/6228a4a2-ce5a-65e0-acd3-6b28-7d736fd2.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, baseline, precision 8, 1000x1310, components 3\012- data
Size 989 kB (988878 bytes)
Hash e2db778ad81c8c663070a3d37fd9fe53
7d959a18b7a93d119a5bdcede7f65dda0c04396b
fffb448beae22c5dde201276e4499ddd4967e05ae5d1edbf4d78463790d64ccd
GET /wp-content/uploads/2022/05/6228a4a2-ce5a-65e0-acd3-6b28-7d736fd2.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 988878
last-modified: Fri, 13 May 2022 07:35:11 GMT
etag: "627e0a2f-f16ce"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/62299a47-4f55-de58-cffc-04de-4da814ed.jpg
92.205.25.11200 OK 919 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/62299a47-4f55-de58-cffc-04de-4da814ed.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, baseline, precision 8, 1000x1142, components 3\012- data
Size 919 kB (918878 bytes)
Hash 45cd63267637d6b888e26ae738f4969c
05b4caa6cc04c1bfa91f8269a7dfd8e4077558a4
28dda3804bf0079bd305e796416f9992474cd23084018107d93b10a645e8b232
GET /wp-content/uploads/2022/05/62299a47-4f55-de58-cffc-04de-4da814ed.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 918878
last-modified: Fri, 13 May 2022 07:29:25 GMT
etag: "627e08d5-e055e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/ezgif-4-4baff99bc6.jpg
92.205.25.11200 OK 68 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/ezgif-4-4baff99bc6.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Converted from WebP to JPG using ezgif.com", baseline, precision 8, 925x540, components 3\012- data
Hash 7c9caf313d01179c6586c1950efaca0a
dc7c645ecafa2f5c687427a0b2f9e3bc2fd1a6de
6d3d7ae2597e87c2bf2f7a27434c9a7f6202cd2172654d0370371354535641e4
GET /wp-content/uploads/2022/05/ezgif-4-4baff99bc6.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 67592
last-modified: Fri, 13 May 2022 10:50:48 GMT
etag: "627e3808-10808"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=6.1.1
92.205.25.11200 OK 190 kB URL HTTP/2 badekumas.com/wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (1249), with no line terminators
Size 190 kB (189471 bytes)
Hash 92e96e2d8a325a54b0b57506f1d12654
6652de57326b084c32d1b2bdf9d96ae251cef8d4
83d3662bea26557e2160a9d4bd88fc796e8a4bf7a1099f0ae44143a4708ed270
GET /wp-content/plugins/stm-gdpr-compliance/assets/css/styles.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:10:59 GMT
etag: W/"627cb303-4e1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/4-40386_photo-wallpaper-lights-europe-planet-earth-planet-earth.jpg
92.205.25.11200 OK 382 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/4-40386_photo-wallpaper-lights-europe-planet-earth-planet-earth.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1332x850, components 3\012- data
Size 382 kB (381996 bytes)
Hash 1c7163463b36b26103ac6b0bd4ce0198
38e92110a001f399e910319a0a34985f7ac2822f
d9074f7d52b7a8462eb9a38bc2b301ef62a80c45eaf75cfccb9642c148d353d9
GET /wp-content/uploads/2022/05/4-40386_photo-wallpaper-lights-europe-planet-earth-planet-earth.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 381996
last-modified: Fri, 13 May 2022 11:48:12 GMT
etag: "627e457c-5d42c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/62289bd5-7738-f696-e5f1-e3b8-0c4657c5.jpg
92.205.25.11200 OK 863 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/62289bd5-7738-f696-e5f1-e3b8-0c4657c5.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type JPEG image data, baseline, precision 8, 1000x1075, components 3\012- data
Size 863 kB (863271 bytes)
Hash a44daaa29fb9b4c9185dac5ecd0f4119
1b2493571ae24289f434b370543098b550db1ffb
a7c0b8e3728da0b1777c0eee1a1637e812a04ef554c2a50f1f72caf7851b47a7
GET /wp-content/uploads/2022/05/62289bd5-7738-f696-e5f1-e3b8-0c4657c5.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 863271
last-modified: Fri, 13 May 2022 07:59:45 GMT
etag: "627e0ff1-d2c27"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0
92.205.25.11200 OK 1.1 MB URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (17030)
Size 1.1 MB (1062542 bytes)
Hash 971236a212031b94d497ed8a3b0b14e9
ccd92004bec18c596a9652d5a743dd1bad6e1ca0
8b82d9fdd7f1086ad39209b6367cf356597f5b379457ccf39600c56adf3fb174
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.10.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:14:56 GMT
etag: W/"627cb3f0-42b4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=4.9.2
92.205.25.11200 OK 1.4 MB URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=4.9.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type Unicode text, UTF-8 text, with very long lines (62497), with no line terminators
Size 1.4 MB (1437057 bytes)
Hash 2e0913f3d369fe7c52f634d4f6ab728e
c43948751602752ad52528644670f11b34b43a7f
433da4976e4cab5b75af2496d5fb602cb75f3b022ce0f9472ec66f22202002b2
GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:09:33 GMT
etag: W/"627cb2ad-f42f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/elementor/css/post-103.css?ver=1656484790
92.205.25.11200 OK 1.3 MB URL HTTP/2 badekumas.com/wp-content/uploads/elementor/css/post-103.css?ver=1656484790
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (2850)
Size 1.3 MB (1302203 bytes)
Hash 959b6e8a92485a00e3c3b52691f17b73
c292c7037995e8ca1c043c5b72e784a060199bd8
ef517a9012887ccc43d6dda857661ff9988087f27e31c2156d9e6f2ff80cc202
GET /wp-content/uploads/elementor/css/post-103.css?ver=1656484790 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Wed, 29 Jun 2022 06:39:50 GMT
etag: W/"62bbf3b6-16ea"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.5.6
92.205.25.11200 OK 1.3 MB URL HTTP/2 badekumas.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.5.6
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Size 1.3 MB (1288185 bytes)
Hash d4b982ef8b4632d118287ab9c259602e
15fb8ea61db0942f5fe3915947d93bc126bd7603
6a072247cf71c872c7f33f768ddd0ed57c3cb276174ac4e6776c218bd3f120b0
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.5.6 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:10:34 GMT
etag: W/"308-5decb410b2b52"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=4.9.2
92.205.25.11200 OK 720 kB URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=4.9.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type Unicode text, UTF-8 text, with very long lines (17637), with no line terminators
Size 720 kB (719911 bytes)
Hash 039bdbc4896bb624491b271bef33c5c6
92452930b0334536f041ccb2eaa50f06673317e7
87f45f3bb0ee6270dc3d38db12c9df15c535f7099f664e002ca3e37f74d3c649
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:09:34 GMT
etag: W/"627cb2ae-44e7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.1.1
92.205.25.11200 OK 699 kB URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type ASCII text, with very long lines (26516)
Size 699 kB (699271 bytes)
Hash 662dbc37803804265e6a5a703ace2417
2cde29eabedc2f20ec358a569ab8e3e634dd3682
ef510a89d424e61a39bf79b7e44e84eb7707da4467ec67d0fc6a0a5ff8d6394c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:14:57 GMT
etag: W/"627cb3f1-684e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/cropped-bade-logo-1-192x192.png
92.205.25.11200 OK 1.1 kB URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/cropped-bade-logo-1-192x192.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash ae2363141a83cee56c6b2af50ff26ae5
22dfbc23464899bcee317ec764f5881f772baa20
c5ef6e209c307e3d1dc2fff73b739abc83a4645ba6bfc98ea3edc09639c13a3e
GET /wp-content/uploads/2022/05/cropped-bade-logo-1-192x192.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:35 GMT
content-type: image/png
content-length: 1113
last-modified: Tue, 31 May 2022 09:02:20 GMT
etag: "6295d99c-459"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/cropped-bade-logo-1-32x32.png
92.205.25.11200 OK 452 B URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/cropped-bade-logo-1-32x32.png
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 0702cded77475942103470dadba6ffae
8c24a558abf8ef49fc5f656548e2441c90f18222
64c40a62363388702d6991187403e1c426aaedd9a74ac1e1d52ac3b228d4dff4
GET /wp-content/uploads/2022/05/cropped-bade-logo-1-32x32.png HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:35 GMT
content-type: image/png
content-length: 452
x-accel-version: 0.01
last-modified: Tue, 31 May 2022 09:02:20 GMT
etag: "1c4-5e04b07bcee81"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2018/07/orjgnalll.gif
92.205.25.11200 OK 16 MB URL HTTP/2 elegant-snyder.92-205-25-11.plesk.page/wp-content/uploads/2018/07/orjgnalll.gif
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
File type GIF image data, version 89a, 1000 x 563\012- data
Size 16 MB (16374657 bytes)
Hash 9f8c0ac949b0fc7520a38f93f399619d
7e1dabbdd9d41a1e58f4101ffe6552573c3fc1dc
a0941cc4ae49aa66a001897d3cc92f35b6514e28f02e318c927fb06d6d90c7c2
GET /wp-content/uploads/2018/07/orjgnalll.gif HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/gif
content-length: 16374657
last-modified: Thu, 12 May 2022 07:06:39 GMT
etag: "627cb1ff-f9db81"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:14:59 GMT
etag: W/"627cb3f3-3acf"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/themes/manufacturer/css/responsive.css?ver=1669300292
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/themes/manufacturer/css/responsive.css?ver=1669300292
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/manufacturer/css/responsive.css?ver=1669300292 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:05:19 GMT
etag: W/"627cb1af-3443"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.9.2
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.9.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:48 GMT
etag: W/"627cb370-bdd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/themes/manufacturer/style.css?ver=6.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/themes/manufacturer/style.css?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/manufacturer/style.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:03:35 GMT
etag: W/"627cb147-3fb1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:29 GMT
etag: W/"627cb35d-21f91"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:28 GMT
etag: W/"627cb35c-a12"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/essential-addons-elementor/assets/slick/slick.css?ver=6.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/essential-addons-elementor/assets/slick/slick.css?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/essential-addons-elementor/assets/slick/slick.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:11:04 GMT
etag: W/"627cb308-130c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/themes/manufacturer/css/manufacturer_style.css?ver=1669300292
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/themes/manufacturer/css/manufacturer_style.css?ver=1669300292
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/themes/manufacturer/css/manufacturer_style.css?ver=1669300292 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:05:20 GMT
etag: W/"627cb1b0-257bb"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-includes/css/dashicons.min.css?ver=6.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-includes/css/dashicons.min.css?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-includes/css/dashicons.min.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:02:32 GMT
etag: W/"627cb108-e688"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/elementor/css/post-1170.css?ver=1656487506
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/uploads/elementor/css/post-1170.css?ver=1656487506
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-1170.css?ver=1656487506 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Wed, 29 Jun 2022 07:25:06 GMT
etag: W/"62bbfe52-57dd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/themes/manufacturer/js/navigation.js?ver=20151215
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/themes/manufacturer/js/navigation.js?ver=20151215
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/manufacturer/js/navigation.js?ver=20151215 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:05:21 GMT
etag: W/"627cb1b1-bbd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/page-links-to/dist/new-tab.js?ver=3.3.5 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:05:12 GMT
etag: W/"627cb1a8-609e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:52 GMT
etag: W/"627cb374-736"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/?wc-ajax=get_refreshed_fragments
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/?wc-ajax=get_refreshed_fragments
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
POST /?wc-ajax=get_refreshed_fragments HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 18
Origin: https://badekumas.com
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:35 GMT
content-type: application/json; charset=UTF-8
access-control-allow-origin: https://badekumas.com
access-control-allow-credentials: true
x-content-type-options: nosniff
x-robots-tag: noindex
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-powered-by: PHP/7.3.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-includes/css/classic-themes.min.css?ver=1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-includes/css/classic-themes.min.css?ver=1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 05:16:37 GMT
etag: W/"d9-5ec75f1e90e29"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/scripts.js?ver=1669300292
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/scripts.js?ver=1669300292
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/elementor-sm-widgets/assets/js/scripts.js?ver=1669300292 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:31 GMT
etag: W/"627cb2e7-34b8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:14:58 GMT
etag: W/"29d-5decb50c56b40"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.3.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:08:53 GMT
etag: W/"627cb285-37c8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.9.2
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.9.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:47 GMT
etag: W/"627cb36f-b7a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/themes/manufacturer/fonts/themify-icons.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:05:20 GMT
etag: W/"627cb1b0-4c83"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=6.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/stm-gdpr-compliance/assets/js/scripts.js?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:59 GMT
etag: W/"627cb303-5ea"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:08:59 GMT
etag: W/"627cb28b-13c43"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.5.6
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.5.6
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.5.6 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:10:35 GMT
etag: W/"627cb2eb-1248f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.css?ver=1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.css?ver=1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.css?ver=1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Tue, 31 May 2022 06:47:44 GMT
etag: W/"e2-5e04926574dca"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/elementor/css/post-78.css?ver=1662026463
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/uploads/elementor/css/post-78.css?ver=1662026463
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/elementor/css/post-78.css?ver=1662026463 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 01 Sep 2022 10:01:03 GMT
etag: W/"631082df-11ad"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/themes/manufacturer/js/skip-link-focus-fix.js?ver=20151215
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/themes/manufacturer/js/skip-link-focus-fix.js?ver=20151215
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/manufacturer/js/skip-link-focus-fix.js?ver=20151215 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:05:21 GMT
etag: W/"2d3-5decb2e68c9b1"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.0.0
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.0.0
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/vendors-style.css?ver=4.0.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:13:22 GMT
etag: W/"627cb392-ccd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/themes/manufacturer/js/manufacturer_script.js?ver=1669300292
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/themes/manufacturer/js/manufacturer_script.js?ver=1669300292
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/manufacturer/js/manufacturer_script.js?ver=1669300292 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:05:21 GMT
etag: W/"627cb1b1-120d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
elegant-snyder.92-205-25-11.plesk.page/
92.205.25.11301 Moved Permanently 0 B URL HTTP/2 elegant-snyder.92-205-25-11.plesk.page/
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: elegant-snyder.92-205-25-11.plesk.page
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 24 Nov 2022 14:31:31 GMT
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://badekumas.com/
x-powered-by: PHP/7.4.33, PleskLin
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=4.9.2
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=4.9.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:09:32 GMT
etag: W/"627cb2ac-1a66"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:04:01 GMT
etag: W/"627cb161-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/jquery-numerator/jquery-numerator.min.js?ver=0.2.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:27 GMT
etag: W/"627cb35b-709"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/widgets_style.css?ver=1.0.7
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/widgets_style.css?ver=1.0.7
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-sm-widgets/assets/widgets_style.css?ver=1.0.7 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:04:51 GMT
etag: W/"627cb193-c54e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.70 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:50 GMT
etag: W/"627cb372-255e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.5.6
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.5.6
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/header-footer-elementor/inc/js/frontend.js?ver=1.5.6 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:34 GMT
etag: W/"627cb2ea-5cb7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/owl.carousel.min.js?ver=2.3.4
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/owl.carousel.min.js?ver=2.3.4
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/elementor-sm-widgets/assets/js/owl.carousel.min.js?ver=2.3.4 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:31 GMT
etag: W/"627cb2e7-ad3b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 05:16:38 GMT
etag: W/"6361fd36-15e54"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 05:16:38 GMT
etag: W/"6361fd36-53c0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:29 GMT
etag: W/"627cb35d-2fa6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/css/owl.carousel.min.css?ver=2.3.4
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/css/owl.carousel.min.css?ver=2.3.4
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-sm-widgets/assets/css/owl.carousel.min.css?ver=2.3.4 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:10:30 GMT
etag: W/"627cb2e6-d17"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/instafeed.min.js?ver=1.9.3
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/instafeed.min.js?ver=1.9.3
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/elementor-sm-widgets/assets/js/instafeed.min.js?ver=1.9.3 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:31 GMT
etag: W/"627cb2e7-1a80"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/regular.min.css?ver=5.15.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:14:58 GMT
etag: W/"2a5-5decb50bf9707"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/uploads/2022/05/2019OK1631_BADE-KUMAS-TEKSTILL-KONFEKSIYON-TURIZM_page-0001.jpg
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/uploads/2022/05/2019OK1631_BADE-KUMAS-TEKSTILL-KONFEKSIYON-TURIZM_page-0001.jpg
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/uploads/2022/05/2019OK1631_BADE-KUMAS-TEKSTILL-KONFEKSIYON-TURIZM_page-0001.jpg HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: image/jpeg
content-length: 759180
last-modified: Thu, 26 May 2022 08:35:00 GMT
etag: "628f3bb4-b958c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open%20Sans:700,400%7CNunito:700,400&display=swap&ver=1653551160
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open%20Sans:700,400%7CNunito:700,400&display=swap&ver=1653551160
IP 142.250.74.10:0
GET /css?family=Open%20Sans:700,400%7CNunito:700,400&display=swap&ver=1653551160 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 24 Nov 2022 14:31:33 GMT
date: Thu, 24 Nov 2022 14:31:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CNunito%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&subset=latin-ext&ver=6.1.1
142.250.74.10200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CNunito%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&subset=latin-ext&ver=6.1.1
IP 142.250.74.10:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7COpen+Sans%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CNunito%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&subset=latin-ext&ver=6.1.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 24 Nov 2022 14:31:33 GMT
date: Thu, 24 Nov 2022 14:31:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.8.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:25 GMT
etag: W/"627cb359-2a6f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:08:55 GMT
etag: W/"627cb287-1c173"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:08:58 GMT
etag: W/"627cb28a-1212"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 05:15:51 GMT
etag: W/"63747207-172a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.0.0
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.0.0
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/packages/woocommerce-blocks/build/style.css?ver=4.0.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:13:22 GMT
etag: W/"627cb392-29568"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-sm-widgets/assets/fonts/icons.css?ver=1.0 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:10:30 GMT
etag: W/"627cb2e6-b802"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.9.2
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.9.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=4.9.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:12:46 GMT
etag: W/"627cb36e-809"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/bade-kumas.mp4
92.205.25.11206 Partial Content 0 B URL HTTP/2 badekumas.com/bade-kumas.mp4
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /bade-kumas.mp4 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Thu, 24 Nov 2022 14:31:34 GMT
content-type: video/mp4
content-length: 47432912
last-modified: Mon, 23 May 2022 14:59:15 GMT
etag: "628ba143-2d3c4d0"
x-powered-by: PleskLin
content-range: bytes 0-47432911/47432912
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/skroll-r.js?ver=0.6.30
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor-sm-widgets/assets/js/skroll-r.js?ver=0.6.30
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor-sm-widgets/assets/js/skroll-r.js?ver=0.6.30 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:10:31 GMT
etag: W/"627cb2e7-6263"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:14:58 GMT
etag: W/"627cb3f2-e238"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/essential-addons-elementor/assets/css/essential-addons-elementor.css?ver=6.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/essential-addons-elementor/assets/css/essential-addons-elementor.css?ver=6.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/essential-addons-elementor/assets/css/essential-addons-elementor.css?ver=6.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:11:03 GMT
etag: W/"627cb307-1e490"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
x-accel-version: 0.01
last-modified: Thu, 12 May 2022 07:14:57 GMT
etag: W/"2a3-5decb50b970c5"
access-control-allow-origin: *
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.1.1 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: application/javascript
last-modified: Thu, 12 May 2022 07:08:59 GMT
etag: W/"627cb28b-fd92"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
badekumas.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2
92.205.25.11200 OK 0 B URL HTTP/2 badekumas.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2
IP 92.205.25.11:0
ASN #21499 Host Europe GmbH
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.3.2 HTTP/1.1
Host: badekumas.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://badekumas.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 14:31:33 GMT
content-type: text/css
last-modified: Thu, 12 May 2022 07:08:53 GMT
etag: W/"627cb285-780"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2