{"report_id":"dfc00bac-4003-4b97-ba40-cc51351f2158","version":6,"status":"done","tags":[],"date":"2026-05-18T20:50:15Z","url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":0,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"final":{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"title":"Check prices for sending shipments from DHL Service Point | DHL EXPRESS","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":0,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-22T20:50:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"dhlservicepoint.rs","ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"domain_registered":"2022-07-12","domain_rank":0,"first_seen":"2022-09-12T23:12:30Z","last_seen":"2026-05-18T13:48:21.931612Z","alert_count":84,"request_count":28,"received_data":2430587,"sent_data":34295,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Stimulus","description":"A modest JavaScript framework for the HTML you already have.","website":"https://stimulusjs.org/","common_platform_enumeration":"","icon":"Stimulus.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"cdn.cookielaw.org","ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2011-06-20","domain_rank":2972,"first_seen":"2013-12-28T13:20:36Z","last_seen":"2026-05-18T05:16:58.194775Z","alert_count":0,"request_count":10,"received_data":757906,"sent_data":4977,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-17T22:25:57.974982Z","alert_count":0,"request_count":3,"received_data":981558,"sent_data":1590,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"geolocation.onetrust.com","ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2004-01-12","domain_rank":4022,"first_seen":"2018-02-07T11:23:41Z","last_seen":"2026-05-18T02:05:20.293489Z","alert_count":0,"request_count":1,"received_data":438,"sent_data":493,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"3b9ae41d7782d2b3404ebddb4674975e","sha1":"204b29fe8fa8e7e087e2bce9c4f4965b4020b41e","sha256":"e3f875146ae55550db2fd610f04db5e0f04f9cf3030316c2dbaffa84f48b329e","sha512":"001b3a2cce3b3f3a0e0f153179efcb7f59ee2056f5d92a31c7ae90faf57aa69583760d73c41af96075724f35f093040932c7c8c8f003f9939a68803b023ddad5","ssdeep":"","tlshash":"edb0120fb99c30a37e56206e002e420bb70b1eb707883008a6764df46535259406efd5","size":105,"data":"","first_seen":"2025-04-23T13:42:33.300922Z","last_seen":"2026-07-10T10:42:13.999638Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"4bee8baef2d7cece702bb5ea620dc86d","sha1":"98fea32057442d2554590f7a57249a8cae61b859","sha256":"ae262f86880f693257905d2a77c0ad3b391406592ceaf3f6bce3c8cd5eb906da","sha512":"e70a070b4dbad49034a628137a09c907faab63f9430b63fd9a1cfcbbc505350741ef831afa5a26b0e58f68ce05da7a6d0099e0c272b5a1f039130fef33f3b676","ssdeep":"","tlshash":"f9b0120fbd9c30937e57206d003d420bb60b1ef707583008a6764df42935249406efe6","size":105,"data":"","first_seen":"2024-08-19T16:06:41.012925Z","last_seen":"2026-07-10T10:42:14.027162Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/scripts/modules/application_es6.min.js?v1741105574","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"01ae31799923f81dfdae2216fbc57c9d","sha1":"3d0460b55fae47b253bb973bd28378b2dea3575d","sha256":"66f8e53411a8e9205e5cc3788486c517fdb30b11f1e9e20ab9205d828b3880fa","sha512":"e2a20c178e424ba3a250bc729a35e9384fb0956a0447e4dc7e92a1d7f79f66d477b3051751c49559f25addf6265261accd36d5a9ced14cf2b163522ef39e2f3e","ssdeep":"","tlshash":"6b3144b8f93c987305fd43aea14b65fa81a936ed6d06c018e15d4cc954a8086297593b","size":1601,"data":"","first_seen":"2025-04-04T11:12:55.685143Z","last_seen":"2026-07-27T14:06:41.182997Z","times_seen":131,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/scripts/modules/photoswipe-lightbox.esm.min.js","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b505ee081119c5be142e0dbac4762f99","sha1":"50996ccd34878f848173526bebdc422b5237d28c","sha256":"b82c385604f90cc77082d8e1bd4f5ef7c9d3da62d95dcc3ff1691a4eb0dddd12","sha512":"4bd4645a71a36bce2d5ca1714cdee22d53f7a540ac9dfaa717ed192b60923a1982a9aea5c68bad1d4a22cc1567a8222c1fc1d6edeff7bbd1c438ec25474d532c","ssdeep":"384:GYym0lDcKZyAyHEmlpvGpn1EKWnGQJ4fVlBB6+EV6b324TT+zzIBY:D0lDcK8AyHEY9Gpn1EKuGQJ4fVlB4Bkg","tlshash":"0452a6f573a6c63426ed81d6a017f81ea371b21c5404910c78ac8cdf59a5e8a70babbd","size":14338,"data":"","first_seen":"2024-08-19T16:06:40.943759Z","last_seen":"2026-07-27T14:06:41.1994Z","times_seen":693,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"c683fae566008d12acb21331333d0adf","sha1":"fc1acd64f76a1c79f1ff15e7d7d113b9f26bf3ab","sha256":"9221a8e7fdaf1b0bba838c7fea53c3023660d81b2621ea211724257183d9f320","sha512":"99468a4692a0aa422e263e94006490d9e96bb7b11021828e7072a322c54405afe1c00857226ae6e9f507bda6f57b3b559af27b661c2676a5a00a7a1da080b824","ssdeep":"","tlshash":"ded0122df39c94e8498ab3e71037a719ed03a1e74967501ccd590bf4c034fc16029bd1","size":205,"data":"","first_seen":"2024-08-19T16:06:40.998947Z","last_seen":"2026-07-10T10:42:14.013783Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"af5ce87af2d93d738ee28cf4aacea59d","sha1":"35bf70d80e12514a92bca0e7351aca417fb0967a","sha256":"6639670d09125217c39d33fdb742bef3bdecedec68b03e877684d83e1ffd8ebb","sha512":"4f6e84d68999c71d2a794a8a980c2fc485f24ac8cb67609bf6c441cd440316e42b35b5f3c55750a2228fbe03a9326ef2317d1d15124cc5da8ebe00ef9bfe852a","ssdeep":"","tlshash":"b2d0122df39c94e4898ab3e71437a719ed03a1e74967401ccd180bf4c034fc1602abd5","size":205,"data":"","first_seen":"2024-08-19T16:06:40.995666Z","last_seen":"2026-07-10T10:42:13.997202Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"da04ef523cbef7e02806ee6fc982d34d","sha1":"4f2bb7effd1b49f9a336a82ae6cfa611b4155125","sha256":"a5374be2d1c1968cb436ff521d51a005e2b5a8402267b569d87d3453fd56273c","sha512":"1a02aa3e8fd4525683ad572191bf07f870c326500308d7cc92232dbfabd5ac945ed0dc6cc58d686e611a25882920c7be93ff6b857eab30ebe6ec08cc0655ed68","ssdeep":"","tlshash":"3fd0c92df39d94e4498ab2a61036a715a903a1e74967401ccd180be4c034f816029b91","size":205,"data":"","first_seen":"2025-04-23T13:42:33.293223Z","last_seen":"2026-07-10T10:42:13.998112Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"a858589e053427e39bb7afaa3568c59e","sha1":"ed0ccfe972939ec75f552abc94214acd73c68289","sha256":"cc395b0941bec61eeb16556be76c1519db6776fa25e7a974100f0e052ddbac3a","sha512":"fb23f55206c5cb7f73433a0f5087b6fb6db1e063debbfbaa9c128238e17ccfe289e7804a6f02ee69921d7157f3f701bfe9e443f59b9b3acf0d5e5b0fe14db803","ssdeep":"","tlshash":"2cb0120fbd9c30937e96206d002e420bb70b1eb747483008a6764df46535249416efd5","size":105,"data":"","first_seen":"2025-04-23T13:42:33.271285Z","last_seen":"2026-07-10T10:42:14.009222Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f943c381b86927491cefb2899022a9c","sha1":"ec02de4d3689b7cc01c87953fec0e716b6eb647b","sha256":"82ddb1ae2b33a77d6910b7ad22e7b266909466adc3ca072c8ef2c828b669fdfb","sha512":"33cc306cc2f28745df10230f6713d4e66f8e9a5eea78c2f5873387f7fe1a97d9cc3bef04a24f4163c3e91657b2787742ed9052fd013e869bf3d261a9eff2ea17","ssdeep":"","tlshash":"66b09b9d55e9fd740a023138041f815475053451963a4d80454424a1552d5d520ef5a2","size":118,"data":"","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-07-27T14:06:41.21906Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"3e8e19b3d2292e4994e93bf8a875ba2d","sha1":"4dae1e3ac9cce1229100238ec9eb24bf620fcf4c","sha256":"ec58e2c787e98cf8677899d0992b18f6f3d2c2d12aab1d2f0e44c93c70be4093","sha512":"377372d8541dbbd8461e61ee91fe2e76c4cb0fa94015c1aa26e6264ab1e6f28baeddb54ca277c7e068b5c398566213271019567c098cc68b0db964e9e09b12ac","ssdeep":"","tlshash":"7ed0c92ef39c94e4498ab2a61136a715a90395e7496b401ccd180ae48034f816029b91","size":206,"data":"","first_seen":"2024-08-19T16:06:41.000911Z","last_seen":"2026-07-10T10:42:14.011454Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"345a1337f32ba2c535b2a425acdd65f5","sha1":"83d50681f252c1f8738856eaa7963071df450274","sha256":"ceb133ac4b65aed0ff26239ddf83fa112e818040593e4c9555aa6a0d1244235a","sha512":"91ef4f9a62c5a249263a9d0d97994f7837191d2e39caa8527c095811de06f28fe5f9c04e32840cbb9158a5d55b9c3e4f132bbebfce43b47a01cf8b3649d9aadf","ssdeep":"","tlshash":"96b09288f3130db40ae03b900e9db68570873528c1e2a4711faa310d722898663ac868","size":127,"data":"","first_seen":"2024-10-17T00:34:14.606404Z","last_seen":"2026-06-01T16:49:05.886578Z","times_seen":121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"590e2566bc295b3fda0942720b80e15b","sha1":"ac22200bfb4674ff64aa59515ede3931c7e59562","sha256":"8e11f825d88a7dc3a468b1f138e8e9fc18a5b4dd8b7db5ea7e3dfd7d2e54da59","sha512":"66418c9ebca510c0ead07e4baaaf0c4435ad18064ef20a827f8ce7d3037924a6606a944b8340876e456e62e5448add7d77d78038ff18a6c6116b55caca0bcbea","ssdeep":"","tlshash":"9fe0c0da78510cb674ed06f623f5e519f583220cac096c22cefdca18295c5c748164cc","size":361,"data":"","first_seen":"2026-02-19T04:16:05.165003Z","last_seen":"2026-05-18T20:50:20.943622Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/@googlemaps/markerclustererplus/dist/index.min.js","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d72ff71a3a6b58244d7336469a0d479","sha1":"b2538a481ec947ff6e0ed7ef0a1d4cdfee196bcc","sha256":"cc0b14615ea7ed660d7a101035d077229c1fb59db3f2dab02e764bf82df1ee4a","sha512":"18ef9a5e47c5d49da82c16995cc5f0d55af197576ea8ab672303b03844184a579d94356134270aea7537b71a4f6bf146d5eb5f672312f85cc5fbab72b853d36c","ssdeep":"384:31roYQGOFI2gP5kag7uJf4UZ/Uo6m4Lga5Wy9tVjVCOjHxEBWd/T/vbm2cGyrOO7:lMMXkNUZ8o6ZrLVjMW2BI62gwpLogosE","tlshash":"e603d7c9f691b0604393b1f8013f0a8af33b5c59a86a81ecf655d0e16cb994e507bf39","size":40278,"data":"","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-07-27T14:06:41.153742Z","times_seen":1541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"8c5123c140f4f8e1de54190c0833517a","sha1":"880cc86fe0ee182e371f3f090fbfa89dc4ff3dae","sha256":"48499d3c9d1b9764a47f4828307f59b97aca702cf8dd1c0a148489d4b8c6a8a7","sha512":"da86862fa1f1236471dac795238a14db1f0a8761778c29ba40c83b6858754c91d17edcd8cd54aabf7629edd72b107e9ca2081fa2df5aa8aac3fe2e5971ae3107","ssdeep":"","tlshash":"e2b0120fba9c30937e96206d001d420bb60b2eb70f483008a6764df43535249407efd5","size":104,"data":"","first_seen":"2025-04-23T13:42:33.253212Z","last_seen":"2026-07-10T10:42:14.008668Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"1fd7d10d3af67e9ebd4b9e7ff504d013","sha1":"053ce63c87ab7f15f993d340af90f4f2987225e5","sha256":"38c7a4da535d24c079d75f984a857935120150038f79676b0c16c8c417b80137","sha512":"209b58d526b279fffad2ff67f934fca0b1b6fa835256a516e72582dd916b6b131deb2827aed7e84ac2032afb06abab1ff80e537b847e924f3e8aa8dbf8c06134","ssdeep":"","tlshash":"64b0120fb99c31937e57206d003d421bb60b1eb707483008a6764df42535249406efe6","size":105,"data":"","first_seen":"2024-08-19T16:06:40.997644Z","last_seen":"2026-07-10T10:42:14.026122Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"2d7b46569eaf5caabb64463f346d88f9","sha1":"249daeda7047fd5d7b05069b0b0fdd17cbb01d7d","sha256":"cd787ee46bc2fa10742486d01990767270c0a7e2357577ceff3a72e5786c3e84","sha512":"68ee75cbf9b16b0335a9718c212248f65c8061365e14f10c86295d21dd609dfc39c1cbb71f7bb45c5f05e5241341ba746f51aa7e2b067a7ea71a0b03258e4444","ssdeep":"","tlshash":"ddb0120fb99c30d37e56206d142d420fb60b1ef7074c7008a6764df4253924d406efd9","size":105,"data":"","first_seen":"2026-02-19T04:16:05.178372Z","last_seen":"2026-07-10T10:42:14.029165Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"2b4f350ab194cfd2e0cea353f784c956","sha1":"a97b27ded8f2044dd9e3e207c82d447c08df3201","sha256":"f5a98cd6eb3f45aba5c8c78bf47b9ca90e08e446b7510ad27a431c515bdebe3a","sha512":"2594de1e5bde6c177e27623bdeeb25d8302ed42bc182360ff4a4307e6d0662171d891170efb566e5ad2a38d14ca72cda9317bbcc390a1dac4249ceea502e916b","ssdeep":"","tlshash":"20b0920eb99c30926a562069002d420ab60b5eb707482008a6664de42525249407aae6","size":105,"data":"","first_seen":"2024-08-19T16:06:41.008301Z","last_seen":"2026-07-10T10:42:14.032809Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/scripts/vendor.min.js?v1762424499","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cf1a57a2ae81fbc20dc7c54d00fb6ddf","sha1":"cc7a8089a7c78cbad84d596330fc3781d9f0bba4","sha256":"76b6f731dadd69a37d95610bf6878c062b7c4818442164e23d237a6b90062a2b","sha512":"aa5ea88e8e8042226cc32c831dc3e60993f77ee79073f27cc0af956695f7743864dae83fb6d533ef22030690034f1c1f3bf5bf5226f431085b41d8503e5f447c","ssdeep":"6144:VylqWsMOf9QRZ7TPlxUqKxN9l4LDpAnzz9nC0fOh3Oe:QxsB9nbN9l4LDpAn3HGOe","tlshash":"03842a8d7251b13202eb21aa51af45067336196d740e946cb0a8ccee6d7dd88237ffbd","size":393839,"data":"","first_seen":"2025-11-15T08:44:41.070527Z","last_seen":"2026-07-27T14:06:41.191461Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/scripts/application.min.js?v1750161479","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1bc2f5a8b85b103a4b72203f60f9244e","sha1":"1e1c9250592505d77743c7d89ef737ec823b6ded","sha256":"211030d4ac9ac4e10d06d1101683822c69bc2d4f6145020b4fe7d83c17bdf06a","sha512":"f854ae1b647d5453182691f8d4224d27303f2a3488b7ee0c211853c7fb523f7b839e111b59e2af1283cba1f84b4ad13b8bbaa99986ed6005c07c1f7c2dcebc44","ssdeep":"768:IP7+tn/k8+DAjDfBEo4jDVxaMTd2qWVzHjo+O:Q7+tnM8A4DfuoUPWVD4","tlshash":"bae229d4726025e349f2a13ea4af63483132293676560588b9b985f52c78d8e7333fbd","size":34191,"data":"","first_seen":"2025-06-25T10:41:46.550387Z","last_seen":"2026-07-27T14:06:41.150754Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TGC47K7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40de6707b53734e6fd921d8225e9829a","sha1":"3dea79775ee20829e2e13b34fb079dbdb005fba6","sha256":"c643e7664a9a31b975233a28d8594e535a124e9206441a597a8810e12bcbfd52","sha512":"954a015b89be5514a42f09b2d88a9f77e91464bf42d3a02e15d5f1caf4dd9c0916a636be902815a7b643b2e1b2d36b489f03846623de263e67ae621921301d27","ssdeep":"6144:HNyIQ/jieRh52dx11eheosX3KUo6JiXZA+nJRpt:HNLeRudx1ufpAY","tlshash":"d9b429cdb3ca74628392f478903f018bb57a28e2b44cd899f189c8e42d7465a5277f7d","size":502639,"data":"","first_seen":"2026-05-18T20:50:20.889859Z","last_seen":"2026-05-18T20:50:20.889859Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"7fc91606fe22f9361bb6054213057bfe","sha1":"43c28511b99a6b2ab2b7f9c4dfaf332205702b02","sha256":"faa6fa3258eaec5a4ad7eceb9af9efb11f092e3f813c9b8ad5f77fa7d1fee124","sha512":"cf6dc6b12b8f197c9988b4b741daa1aad93e2c4fa856fb28ae248ff66074630873d7a551e227de570a6e928ee2bf564075734989f9121eb77669c0899bce6490","ssdeep":"","tlshash":"30b0120fb99c30a3be56306d001d420bb60b2eb707883408a6764df42535289406efd5","size":104,"data":"","first_seen":"2024-08-19T16:06:41.004433Z","last_seen":"2026-07-10T10:42:14.024956Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"cbdfb2e318ece08cc8a8fc34edcf4389","sha1":"2d59127d6846c775617f570e9b47ac72c9756e9f","sha256":"442a2ab32f838428deb23b5681e625689948309d73dfbf4d5f2cc5d8c6dacca3","sha512":"20cb49b25bf3bfac23993a723eeccd40be042e6adaa44275ca070cb3a530d4d447488e2ca1b1d5122eb28ea8884e99b706c535c3fd1af12037b708b6bd5f783f","ssdeep":"","tlshash":"cbd0122df39c94e4499ab3e71037a719ad0395e74967501ccd180bf4c035fc16139bd1","size":206,"data":"","first_seen":"2025-04-23T13:42:33.267993Z","last_seen":"2026-07-10T10:42:14.000276Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"b131cef0c43c5cf5188932921e394cd9","sha1":"bd827d985a7896c4cfbe6ae9deff24b98c3a655e","sha256":"be3adef556cf4e6bf087806d04537758ff0822cc9e06c6d4a31135522a561f63","sha512":"7010a8c06afff1557f4407fa74eaf0b6a6f4113e56bd01aa81d1e0ffa5d1d92f1b25f06fbc85456c9ea20d18be26b331824e6f6360541786adddb5d5470e45bf","ssdeep":"","tlshash":"03d0c92df39c94e4498ab2a61036a715a90395e7496b405ccd180ae48034f816429b91","size":206,"data":"","first_seen":"2025-04-23T13:42:33.272688Z","last_seen":"2026-07-10T10:42:14.030824Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"95a0f965260abe7e5d8e851798c8a047","sha1":"b3257cd844a6f081272094fef732c158a8815a1a","sha256":"e2e451192d4cfc12a3afd60312ab08ba9f67325be12a469d061abefe329a3905","sha512":"4566e9b7c7375703b05fc41a714f610d8e7a16a7719634f2d861f9bc68b103c52a4f83b4e0a47a3e4f744170c37b6f18cfa2211f6e02b49b718a73444901d62f","ssdeep":"","tlshash":"6cb09b9d55dabd754b033138141b91247505345145354d5045481491561e5d520ff962","size":118,"data":"","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-07-27T14:06:41.222113Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b6654c3c10566778d1a5050c9946ccf","sha1":"0ca0cb6651454577fe69dbed7e55dacff0a45f57","sha256":"3d3feca7be5ede2fc8b8f3bc00dcd15eca878385f0a1b824acc0a4bba932807b","sha512":"76b5bbb3b216479988563957a198bbc3080e870ccc91c8b1857a72e3cf0b83548c9d8b3f3244806ccb2f189fd3e56467d1f53199cf41008b12a1645245d4791a","ssdeep":"","tlshash":"d0b0123e74416c3d405a3c942637801f3473289955011422808c04480c34b08889743c","size":93,"data":"","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-07-27T14:06:41.221522Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"de3dfe31b3a69ed15be0d2e1e246b9bc","sha1":"42184ec9567a23b22684b58544ba9a2b04585a6f","sha256":"f9c389aee12ea3b67aaccef11d8c02e5c74ce87cb44acbc02c53f4d7e048c375","sha512":"10232d5ad1b57cbd16563d48d3be5f4fbed570538559ab10d2fce0e0c825f3302e0a93df76aef0342e0c07843b3d520ab55ae036db3fcdb7868462a572469e45","ssdeep":"","tlshash":"e8b0124fb99c30937e56206d102d430bb60b1eb707483048a6764df42535249506efd5","size":105,"data":"","first_seen":"2025-04-23T13:42:33.264779Z","last_seen":"2026-07-10T10:42:14.031802Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"06c145017fae44c33c33f1195ae9fc81","sha1":"425acb01116871db29b3962291bd4ee684efedda","sha256":"929d00b3ff860974c83f84234cb686aefcce46c9358aaa7ed8c66bbf49a8b4c1","sha512":"01fa36535f6c50d37aa0d1a0d833cc9d298c8d7f094224d41e418b56e7ac3ac66a8c72baf19a8b18175dede460f016e92d790fed3b1a7dcbeaa0418439886c90","ssdeep":"","tlshash":"c8d0c92df39c94e4499ab2a61036a719a90395e74967501cce180ae48034f816429b91","size":206,"data":"","first_seen":"2024-08-19T16:06:41.01073Z","last_seen":"2026-07-10T10:42:14.010909Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"6ee04e365a9d6c083a4dd172b0d8b373","sha1":"bd14e4062e7a10cee28cf9e9ac43cdfac11e99e7","sha256":"cf8172cee470befdd886861fa86623699788427f5be62f9fefdfca1ab28f4f67","sha512":"90ab3e9664895c9b0966873905f81acbc0c35a10545e90aebe884cedd7fc2e1d4913467f8800a8b9668c192c48549d8cf838b8e4808b2e6c13482b3f04de8c16","ssdeep":"","tlshash":"35b0920eb99c30926a562069102d420ab60b1eb707482048a6664da42525249406aae6","size":105,"data":"","first_seen":"2024-08-19T16:06:41.007707Z","last_seen":"2026-07-10T10:42:14.028181Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202511.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c29a935d0ff09112962434c553ecd620","sha1":"3c79e7c468ea7af6f13bb936d4c8eba8b97a07d5","sha256":"d82ebde730f1c2caa2a648f84319b2a9f9e2fb411f0d9ded2cb552ffd7d7f7af","sha512":"0332fa1796e1aea1f91e20ea0dcb9dddb5f75509977b629415f2dc5a2446df08881f2ff90a6b1dbb594bd85f081f5af4d51807640e5bbd6d26351c24ee511384","ssdeep":"6144:etCHdttu1ivHCSw8xnpdE7qJi20ubcVw1WuxW/3wVv1jtpYBlXDjELbSC:ecusHCSrxnpdE7qJNgwVvQVsbp","tlshash":"62b42a8e7590753587e792b8c027414aba35746cac85806cb45cc5f90bf9f821ea3fbb","size":525881,"data":"","first_seen":"2025-11-26T17:14:29.564073Z","last_seen":"2026-07-27T15:32:01.438412Z","times_seen":2466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-66GEXW8F54\u0026cx=c\u0026gtm=4e65f1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"211720d67ed82c699012e3143f027a21","sha1":"53c02e57b0950627e466cb77d513ea4ac40f83c1","sha256":"a73c1c83ec7ad3fdd88289f6479cadc77ec812735b52292c9670d82dc946707d","sha512":"11cf5437bc1039ef6e32727505c77b511e3152f4297748531e869af6de3f48f35140dcd8b912650bbbea1fc466eeb3e74e451962ae998623dae3ab17fceb17a9","ssdeep":"6144:PzIQ/jVCeRh5Idw4eyeosX3KUo67luA+c3sz0T:TCeRgdwOUoAf","tlshash":"63a4f7ceb3d674265396f478903f018ba57b28a2b44cc89af189cce02d7465a5277f7c","size":476954,"data":"","first_seen":"2026-05-18T20:50:20.893905Z","last_seen":"2026-05-18T20:50:20.893905Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"468e917247f6118416066be131e51fba","sha1":"335691d17a3ee1c0736ff1e7dd5fd3d07508868b","sha256":"80e64e0395f17816e5331cff9af81bb7c9c083b9c52b39256246d21eb364b1df","sha512":"dca0179cb786ff000b1a63ff41e86d23e527165637c97e19a1ddc79ad2720caab65a4f45dc268be99588604cd5b1cdedf8b045ffe9cf044b1dc086623c83b1b9","ssdeep":"","tlshash":"46b0124fbd9c30a37e56606d002d420bb60b1ef707483008a6764df42935249506efd5","size":105,"data":"","first_seen":"2025-04-23T13:42:33.278072Z","last_seen":"2026-07-10T10:42:14.00088Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js?did=b831dcb7-9604-45ef-8181-a964af208538\u0026data-document-language=true","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d4e5fad345c75b53a18e3494f2160b3","sha1":"1dd50f78706d01573678dd62bcfd8fff0998d7fb","sha256":"be90d9edcd24296555f7f7e95f9ae44dbf046452a50988cbd7b078728b4e1e24","sha512":"a89160aac1efd2e980a97600e2a96c5b26b07e3c4c1c70850ab919d647ed6567248f8655e2690ddaa6cc75260898a79320452dfeb6efed8ed079b922388cf3e7","ssdeep":"384:r8k7hI3RzMABwXeU9LH6rlIgknE8eEaRgCyu8LcwLKvTJ9x4AaHKJx686S:rzIBAABwXb9wvknECPCJ8gJ9ugwS","tlshash":"5dc20989b040fe3447d261dc5a3be25a723a746d3485c168f868dce0647dc4f6633bb6","size":26819,"data":"","first_seen":"2026-05-18T02:31:26.264149Z","last_seen":"2026-07-25T07:43:56.724896Z","times_seen":18502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"5f4211188238e22c09abdb1bb72051b8","sha1":"03d05b1c7ef67f9ceebf0282eb14bcec20c7bf7a","sha256":"0286b34834330ef63d730fceca25d48f4242c14a71b800ef64d546c622c451e2","sha512":"199c61949cde033bfda2224a30f8900a4180e47bef00a115daf3e3a1a7678dbf97d7109ffc4106d2ac8f391cdeb9e233b527075d74450ca1ba671e6532b53a3a","ssdeep":"","tlshash":"d2d0122df39c94e4498ab3e71037a729ad0395e74967501ccd580bf4c034fc16029bd1","size":206,"data":"","first_seen":"2025-04-23T13:42:33.289652Z","last_seen":"2026-07-10T10:42:14.029799Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"d099dc2f513379dcf0254e44c5745d7d","sha1":"84b6d471642bee85e8dee8dccc22893a0408c0c6","sha256":"f1c47a51300b485a4cdaf3276f0f29b6a17257480d66bb8520adf2bf0f888be1","sha512":"fb5da2fc5e4292ef963db9b772d8ec72441ce4ceb24beb3c023b023ef16b527cd59cd7c7ec769c1efedb96807d1af2bf982b6e1998257e53f9399565dab6edb5","ssdeep":"","tlshash":"8db0124fb99c30a37e5a206e402d820bb60b1fb707883008a6764df42535259506efd5","size":105,"data":"","first_seen":"2024-08-19T16:06:41.010071Z","last_seen":"2026-07-10T10:42:14.002794Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"b5bbb5c0e346ff6d9f64dd06ffc66bbe","sha1":"3363087b16d23c644ed776f3fca6ea4db2dc3a47","sha256":"360b2bfaa6848d80794c1b631da95e7edd1149df959a3a310437e59997c42784","sha512":"a33f5496027dbe64a054f18ff759c17fe7a5ef71ad078824fbc849cb7176615b1cb9ec4accbf6ace2d70f6fdc9f060f18cd8795ce65aa245bb559c4a7b358269","ssdeep":"","tlshash":"c9b092b43264897e0a8a104c7668c3c43c3d0184f60238409a6c35891035d869845f88","size":127,"data":"","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-06-01T16:49:05.888487Z","times_seen":114,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"8599899a63fc915e7b97691378703321","sha1":"51ce1723b4356cd8432570577d70ad89390de81a","sha256":"5c4d012c9b3ef362c541c59521566da1cd0eefd02828bffffca164acb85b9f20","sha512":"35432247f8502b4eacc24e9b89b817097e46d3d3f8c9670d89eb1022cee855b5c3da7104d4ed2f49d720e63ae7fd5813b58995103f767790dc240426fcb811ca","ssdeep":"","tlshash":"80d0122df39c94e4498eb3e71037a715ad0395e74967405ccd180bf4c035fc16129bd1","size":206,"data":"","first_seen":"2025-04-23T13:42:33.252025Z","last_seen":"2026-07-10T10:42:13.999054Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"ba03f260dd60ef6e00c133f51677f526","sha1":"07bbd2a802421f078d0b4b9e3ada5a1970997396","sha256":"bc1a6eda6c3c361d57ffaf24ef51c0c0ef138108ab5002978601a46f1d40a26f","sha512":"0f68d16e193d4a3818cae4883c69eb6b91ae8abc44db652cdb5f213e6884d635b6ae8ec0c5dcc084f3e8beac3bedaf82df70cad199cb1557ce4d1a83c6aa9604","ssdeep":"","tlshash":"4ad0122df39c94e4498eb3e71137a715ad0395e74967401ccd190bf5c034fc1a02abd1","size":206,"data":"","first_seen":"2024-08-19T16:06:41.013683Z","last_seen":"2026-07-10T10:42:14.012482Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"bc78a2aa3c650dd08cc8916faac00141","sha1":"a5c3ff5668a99407e0cd24d3003b143ee0ac7ed6","sha256":"5a329d9c36189cdf607d59d5c2bc61a8ed061cb74777984d18faca0bf2f7a824","sha512":"60ca73f90692d466133a0b579f0cd847180ec1a35546f3d351e1d6641c6f613882894e03941a26d1689aeef747ffe05fb1e6c8dc06e6bef5cd58b1389fd3da45","ssdeep":"","tlshash":"85d0122df39c94e4498ab3e71037e729ad0395e74967501ccd580bf4c034fc16429bd1","size":206,"data":"","first_seen":"2024-08-19T16:06:41.012179Z","last_seen":"2026-07-10T10:42:14.015202Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"72fc79d136c091bb1155bba932ca8d59","sha1":"0d34ecf926e7d79650c9841e971b09a51b3c4733","sha256":"89b1a60f1e9550066cdf791245d27cf218cb5ee430e3509d6bcd9135246b0baf","sha512":"eab78e874f76bbffe91307a47f27bc271d52743c5aa2995f77b2c21a492cd2d99b37a8cd3dd554758bdde1246efff5f37036fcda7b7e45372fa338751c5db2cb","ssdeep":"","tlshash":"75d0c92ef39c94e5498ab2a61136a715a90395e74967401ccd580ae4c034f816029b91","size":206,"data":"","first_seen":"2024-08-19T16:06:40.998334Z","last_seen":"2026-07-10T10:42:14.023049Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"681c757a946cc6c91e0a4e120ea35bb3","sha1":"2fee654d0a4b3bc2bde0f5049fe9754fbf643a7b","sha256":"4e4c80cc77926c1fb4a65a1e1342d5ce3b4110dd4453473c0fbb03d30464f294","sha512":"16b9ac04d2f8d8aeb75e70d06776bcb560334c5fa37a0f1f3b8105ffd309e770ce0b8d7826d1d883c104e240c07c0af53caa434efe4b82253ff9fbfa0419a018","ssdeep":"","tlshash":"5fd0122df39c94e5498ab3e71437a719ad0395e74967401ccd180bf4c034fc1a129bd5","size":206,"data":"","first_seen":"2026-02-19T04:16:05.177514Z","last_seen":"2026-07-10T10:42:14.02402Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"820eff9b563e5e9dd810c0fea8b73187","sha1":"5d770361677957d89027113611b7c68bd8135f3b","sha256":"c4cc31583230af8d869dd87f6fce6a4f67c7ecaa3edb09d2c18fca579a709430","sha512":"af2172ada1f7aad059f93c42d5a4357f7121b0669f3b0757d5ad9ea4a98b16a678c1f3132af14f52b14224798ff651c2a63c6ce809c15daebcca3442ec908b36","ssdeep":"","tlshash":"3b8000080028828e088000200880a000080b02bc80a008c02f08228c280300002aca80","size":26,"data":"","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-05-28T17:31:36.818866Z","times_seen":101,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"introduction_type":"eval","is_inline":false,"md5":"a07d8a5018598b2d2bbd0e35ed47841b","sha1":"be503ca20f2060da92619d7ee25ff744951960a9","sha256":"6f0f2bc01515827d7799added9ee1d26a8d28526deda628932ad1df791c7bbb5","sha512":"3fc90bd3186f1e822a6ef365495255e53ba319b4d8642976f75103d1b7d83c2c938be2e0df3a0efc1aefcdf2461ea1cd4ddfa1dd8d081810e6543bf838aa67a2","ssdeep":"","tlshash":"22b0120fb9dc30937f56347d401d420bb60b2eb707483008a6764df42535249406efd5","size":104,"data":"","first_seen":"2024-08-19T16:06:41.0114Z","last_seen":"2026-07-10T10:42:14.008087Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/fonts/Delivery_W_LtIt.woff2","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_LtIt.woff2 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlservicepoint.rs/public/dist/styles/application.min.css?v1774434510\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35752\r\nlast-modified: Fri, 15 Jul 2022 08:22:59 GMT\r\netag: \"8ba8-5e3d3b9e562a8\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35752, version 1.66","md5":"2822acc1ce377199351eddb91754493c","sha1":"cdcb8c25e5af959bee520a76e9429b0b4747c376","sha256":"775468e3439c942161c839dabb35fa180adbf72ffaee21fc2644565d3ad0a868","sha512":"be6a025d81c8b6ce3d511474182178168961a79dcd9faaf90e40334eca12a520ca2b40ab009a305a5b176f88002487f198720ef3d7059f1b61bf153fbacdaea5","ssdeep":"768:IBJ8LXMsYDFqQg2+gpX8ayq0+oJV3xGb2jhi2:IQAJRqB2Ld8TVYb4H","tlshash":"99f2f110eb2b6a7297a154e8df91f307b2dd8bb2652cd38ebe0531305853fb4d18891c","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-07-11T03:53:25.270613Z","times_seen":100,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/favicons/apple-touch-icon-1024x1024.png","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/favicons/apple-touch-icon-1024x1024.png HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 25015\r\nlast-modified: Fri, 15 Jul 2022 08:22:59 GMT\r\netag: \"61b7-5e3d3b9e36e96\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25015,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"d29f562ad57f45d9ea9e3c12a714e930","sha1":"15a02219dac2e24ad08c726f0d3a1fe3e8420bf6","sha256":"e3d7e5de8f71a59a9678cc7790b37898fc3ef50cfad4bc4a21dcf76ac063271d","sha512":"451353d3cbde2a4b1e9e2bafcc0d8649024bb07274272edffaa2aa00d8e37b1d443508a49b84b5c837cf46d672e2cf46d462e0b16124dbed44b549bbff8ff997","ssdeep":"384:MIiQnc1SknqAFAFrdJHtT8XtWASIZlxvPK9iuuoYCsrH9AI4Xfpb:DR0BqA8rbHh89lHeZWC0WI4Xxb","tlshash":"5fb2f705bc459dae981f09341c67124ab0f5ae78ce97e24d2ea859ececf1e304f5c49e","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-07-27T14:06:41.17412Z","times_seen":139,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/35e/3335e/1600x900/hEqIzs_1500x843_62d7d0d44b3b32b5.webp","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/35e/3335e/1600x900/hEqIzs_1500x843_62d7d0d44b3b32b5.webp HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-length: 51896\r\nlast-modified: Tue, 24 Oct 2023 14:13:29 GMT\r\netag: \"cab8-60876f15f9440\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51896,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09874f2e49fc2a67b015ab4fc63b6acb","sha1":"20accb3ce6ba8299425476cf60b90bc52004228d","sha256":"2a75a28e5d625d0fb593bfeb2a06c771703f9af5e76c4a28bdf568a3b27810f0","sha512":"bd6be2b1023c4fa397bad9b41d0731f07d427df9e0574c006037805c8b1fcf1a8c15ec6eb6988b5cdb449ceea19bf08e43e56b926abb6344db4309517fe49b26","ssdeep":"768:i076mcCDqTQIb1w91BmdgaEKqHDVirv8yviO6HBw4CBZFIw8QtenlEMS:ICqTHwTgNMVir0yviOuu4+Zx8YCOMS","tlshash":"8533f1cbc40c7a41de92d823d3277c56a23e329f76c2b310656082b54eef955f8d29ca","first_seen":"2026-05-18T13:48:24.295478Z","last_seen":"2026-05-18T20:50:20.867704Z","times_seen":3,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/webfonts/fa-solid-900.woff2","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlservicepoint.rs/public/dist/styles/vendor.min.css?v1762424499\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 06 Nov 2025 10:21:39 GMT\r\netag: \"1ba00-642ea6e35bff5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113152,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 113152, version 897.256","md5":"9209428ae208e223b94b9172802e97a7","sha1":"49c2d746beabbaa5b1a58d660b217feb34272636","sha256":"bdd7887ef769948024a5cc37a018f19da6a9b355b4a09973836115e0d31ead55","sha512":"e9b4c9b779964d9c113909556b779bbd76e080684533f9b5aa0c1ea0184b6cbb1939da7d9c7deef86c2dda8019af4eabce3f97444d774fd6bded7d59bb319c70","ssdeep":"3072:61qFLgGf+tEq2a+ql8ktqmlAD2mEsiJCYY:61qF92aratrS2mQCT","tlshash":"98b302963dc0e22765ec01f25834ec7019723a4e7782c9774ad6fc826167a74648e9f7","first_seen":"2025-10-03T11:13:32.660211Z","last_seen":"2026-07-27T16:23:44.45315Z","times_seen":2056,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202511.1.0/assets/otFlat.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /scripttemplates/202511.1.0/assets/otFlat.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nOrigin: https://dhlservicepoint.rs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 3142\r\ncontent-encoding: gzip\r\ncontent-md5: kXTfEQyXS7aDOOhi1hxYJw==\r\nlast-modified: Sat, 06 Dec 2025 03:53:12 GMT\r\netag: 0x8DE347AFAB2E35D\r\nserver: cloudflare\r\nx-ms-request-id: 747e4764-e01e-00e3-6a70-e27605000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding\r\nage: 63086\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9fddbb1ffe14b512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15298,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d77f5085c3cad1c4a3ab27c98cc6ef74","sha1":"07020d14261b2f097ddbea62e905acb2114c1e90","sha256":"924aab78a72b813e29392d76920c66dd3505702927a01754c1ab171eaab60197","sha512":"7521751870e8b0ba6587ef74bcebe5512b3b8abfb1565780b997b1ef30b163097863fcb0f439f21519c2d1ac729335ac0dcc7db95062ace3bd613c812af6a6d1","ssdeep":"384:KeD0cGDjbn42OhOT85csX1NFyNUV/OoH6iAHyPtJJAR:KeDic/i","tlshash":"e26276523e104b29e1ebcb991883b5d835327d8bfd33a8dd924da3b842ed2f50d26745","first_seen":"2025-12-01T00:30:25.314779Z","last_seen":"2026-07-27T15:57:33.20529Z","times_seen":10291,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /logos/9375bad7-f65e-4f8a-bc16-8254723bd66a/233dac18-317c-4c2c-9914-7fac4789526f/95b2bf3e-0ba5-4e38-8cfb-d19cfa4f5bf6/DHL_Logo.PNG HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 1756\r\ncontent-md5: wRCBvSt9Nur+ueXF05bTVg==\r\nlast-modified: Wed, 30 Dec 2020 04:42:33 GMT\r\netag: 0x8D8AC7D53226189\r\nserver: cloudflare\r\nx-ms-request-id: 00d6b55f-201e-0093-2495-b205c1000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nx-content-type-options: nosniff\r\nage: 68073\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9fddbb20a85b56c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 197 x 53, 8-bit/color RGBA, non-interlaced","md5":"c11081bd2b7d36eafeb9e5c5d396d356","sha1":"38b54ccb126e0b1f98b837bf0d086b44d8935b1b","sha256":"904b70e4997d2154d462c8514522e03846ba539466c01c3b310a824ea4418caa","sha512":"ecb26e035a4585f1f39246d157c62052f186114e5d91590949b0e88c74683df263a6a94eaf8b3560621685247cccd3d312fd499098d45bc217714ef12cf6b27c","ssdeep":"","tlshash":"2c312bc42a407d5c3e8b58cff0b927ab7c4613b7180ae0007970b9260a15db441c302a","first_seen":"2023-05-03T19:20:11Z","last_seen":"2026-07-27T14:06:41.18668Z","times_seen":851,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/webfonts/fa-brands-400.woff2","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlservicepoint.rs/public/dist/styles/vendor.min.css?v1762424499\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 06 Nov 2025 10:21:39 GMT\r\netag: \"18b68-642ea6e35a0b5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":101224,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 101224, version 897.256","md5":"523f833a8b5bdd6079b88981425e31a7","sha1":"ed94030ca212e1857a6014496e7a6a43e64789e4","sha256":"061dd5c333459ea42dba764617793fd6ea2d316b7ab644f157e4d2354dac02af","sha512":"0c6a56b1be865ce71fc57ad7115452fad8b5e72fcefd3b269d5fd58173430a197c24d23e7029371a34bacb82bd526f2f472b97c2436783e824509012b7fc1869","ssdeep":"3072:MCj7agu2zPb6tj6//Et9yfFqQHrPULB7OLU:X/b6M/Ak4B7O4","tlshash":"3fa3023f84b6000d2ecb3d16a5807364af23ffc5e9eb61e34d5ba47c2660716a814e5d","first_seen":"2025-10-03T11:13:32.663396Z","last_seen":"2026-07-27T16:23:44.420117Z","times_seen":1312,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/b831dcb7-9604-45ef-8181-a964af208538/01926b17-dc71-74bd-948d-ab4f1e9aac3c/en.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /consent/b831dcb7-9604-45ef-8181-a964af208538/01926b17-dc71-74bd-948d-ab4f1e9aac3c/en.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nOrigin: https://dhlservicepoint.rs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: application/json\r\ncf-ray: 9fddbb1f7d85b512-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 34664\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DE37FDB2ADE629\r\nexpires: Tue, 19 May 2026 20:49:52 GMT\r\nlast-modified: Wed, 10 Dec 2025 15:06:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: qs4wQHMgAHuNyxE2dxOXXA==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-onetrust-isbot: true\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: d8e61ac9-501e-0097-146c-cef043000000\r\nx-ms-version: 2009-09-19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72864,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9d3145ac6c04cf8c84dd6536c5c71a41","sha1":"491f24b652a4b0a4d05b3cd70736b49ee7e297f7","sha256":"ab502b7e9c84facb5e16fac866c119e5debb3a7a7c41183129555bc156d3c65b","sha512":"718a0f33040dd8b1546d24a20cdf17486b3fd1e22bd9395cb9c4adcb1cf128c165fb60bba11406a38c822e9f12fb609ee19c2b8b81139889b6328e381df74f8b","ssdeep":"1536:AJcqCUCs4Z5Lcr0cLvOSlB2RHxS46Lv7B:McqCUC9bGB2FxK7B","tlshash":"7a633a0ba60811b9478b0760a57a7b86f33c5466b761cd6cf70c4d2612a32f865b339f","first_seen":"2026-02-19T04:16:05.132163Z","last_seen":"2026-07-10T10:42:13.976527Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/ot_guard_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.746Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /logos/static/ot_guard_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nOrigin: https://dhlservicepoint.rs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-md5: tXyZydHjxQshFMbbBT1/8A==\r\nlast-modified: Mon, 18 May 2026 02:17:50 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-ms-request-id: 5510b5bd-301e-008c-3fb7-e6ded1000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nage: 34664\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-ray: 9fddbb20aedbb512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b57c99c9d1e3c50b2114c6db053d7ff0","sha1":"ada8abfed92ba8a545bbd9d299d74d5972cc4ae8","sha256":"691dcdb24853a0f5ce4e6597e5713dea66799b57ffe2c2a10f28f98e0b569b19","sha512":"0dab6d06f386d922fb28f70f2590d4f9c361e7f4e5d5e581b98e59aac12b266cba596ffccd87203b4330673ee4ec1d459a1abdfc4b066d243a43b2bf7909f0ee","ssdeep":"","tlshash":"2ef0d4d91906a6adb6822e7cdd3c56e04c2c7ce274dc22c894cce094d4489bc9705855","first_seen":"2023-05-07T20:46:54Z","last_seen":"2026-07-27T16:26:43.65484Z","times_seen":175127,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/styles/vendor.min.css?v1762424499","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/styles/vendor.min.css?v1762424499 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 26279\r\nlast-modified: Thu, 06 Nov 2025 10:21:39 GMT\r\netag: \"1a64a-642ea6e3571d5-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":108106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"b4f79f67401c796f7fd085134ce94608","sha1":"63d765628e06d23b87f9d98457e0779365ecd392","sha256":"dac64823b7d4e7e69fa9076b42062a95511bb442564d6c67b4310081e471be54","sha512":"661a9d73a7d6309088299376cacf488ac8fc6e43273e19caf5da22cf0a0a36ee8b79e0187c6d2295633a54fe6de14becf68502aa6cc3eedf7dcb02d02a0b483a","ssdeep":"1536:urMVMWMiMTMKtAX0HEbpNG2eLZy6lkA/erkhIHJDasg:QtAXkEfGc6ZWrk+HJDu","tlshash":"4ab32212ae84016bb01a8d3f78a5bf34a5f6eb199a920695b4709d40fdf18bc314f737","first_seen":"2025-11-15T08:44:41.075948Z","last_seen":"2026-07-27T14:06:41.176422Z","times_seen":90,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/styles/application.min.css?v1774434510","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/styles/application.min.css?v1774434510 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 25 Mar 2026 10:28:30 GMT\r\netag: \"d0d2d-64dd6baa65aed-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":855341,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"fe08fe1c95d7b1bab365559dc602da12","sha1":"9e31202b3f9d080c1de2644c0f9fb5a026d4ee58","sha256":"c3b20260e885e403133e6052595d155d906001101bc319b8bc211a5b272d3f01","sha512":"8e3a55b5698fea8684b9d2fdf3a112aac23411f7c725c5f8c0f94bc6c6cf40840b67a488021ccd37e5595b23592cf19e64026c2060c767ef2913298329e4e1a5","ssdeep":"24576:cwzGUEeZMzc6Mek60emOdrkwyl8/YOAisO0iqy1EeMSg80mOPrkwy8ecY0qy2hdB:cwzlEeZMzc6Mek60emOdrkwyl8/YOAiz","tlshash":"8a0552dcdd4ee0972f538c22b9dee65576172328ddb2aeaab01f143d40b404d21b36b9","first_seen":"2026-03-26T10:24:17.428379Z","last_seen":"2026-07-27T14:06:41.190872Z","times_seen":38,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/35a/3335a/1600x900/oNOs8k_1500x843_5a9277016791e778.webp","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/35a/3335a/1600x900/oNOs8k_1500x843_5a9277016791e778.webp HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-length: 59548\r\nlast-modified: Tue, 24 Oct 2023 14:12:24 GMT\r\netag: \"e89c-60876ed7fc200\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59548,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9ba36e16bb9cad81a25392e49ff76a4","sha1":"b04741d4466b9a9b591131d09a9add494094ca75","sha256":"44a10e24e9b718f7859c29b16d99c8b164797c9dc0dd53b89429a70191e887cf","sha512":"dd371d181ac6f91661186bc100992c8d243de5025c46b69bd55a8a36ce19454aedbea8d7a986cf10dce25a1fc71ffd11230c1c7d73cf8a08e4a5439534b25427","ssdeep":"1536:XNEckGdL3r3EI2g0IBZZqZ2ZrEzob7/cZpxRPBM:dErwL3r3EO0UZAZRz67UpXu","tlshash":"af4302b7c6471197db1a066b908da7d2f2b1399b927ea0db15d426cf00f13cea738643","first_seen":"2026-05-18T13:48:24.29469Z","last_seen":"2026-05-18T20:50:20.878748Z","times_seen":3,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/scripts/vendor.min.js?v1762424499","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/scripts/vendor.min.js?v1762424499 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 06 Nov 2025 10:21:39 GMT\r\netag: \"6026f-642ea6e351416-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":393839,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"cf1a57a2ae81fbc20dc7c54d00fb6ddf","sha1":"cc7a8089a7c78cbad84d596330fc3781d9f0bba4","sha256":"76b6f731dadd69a37d95610bf6878c062b7c4818442164e23d237a6b90062a2b","sha512":"aa5ea88e8e8042226cc32c831dc3e60993f77ee79073f27cc0af956695f7743864dae83fb6d533ef22030690034f1c1f3bf5bf5226f431085b41d8503e5f447c","ssdeep":"6144:VylqWsMOf9QRZ7TPlxUqKxN9l4LDpAnzz9nC0fOh3Oe:QxsB9nbN9l4LDpAn3HGOe","tlshash":"03842a8d7251b13202eb21aa51af45067336196d740e946cb0a8ccee6d7dd88237ffbd","first_seen":"2025-11-15T08:44:41.070527Z","last_seen":"2026-07-27T14:06:41.191461Z","times_seen":90,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/scripts/modules/photoswipe-lightbox.esm.min.js","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/scripts/modules/photoswipe-lightbox.esm.min.js HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/public/dist/scripts/modules/application_es6.min.js?v1741105574\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4477\r\nlast-modified: Mon, 24 Jun 2024 09:13:38 GMT\r\netag: \"3802-61b9f3257b951-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14338,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14245)","md5":"b505ee081119c5be142e0dbac4762f99","sha1":"50996ccd34878f848173526bebdc422b5237d28c","sha256":"b82c385604f90cc77082d8e1bd4f5ef7c9d3da62d95dcc3ff1691a4eb0dddd12","sha512":"4bd4645a71a36bce2d5ca1714cdee22d53f7a540ac9dfaa717ed192b60923a1982a9aea5c68bad1d4a22cc1567a8222c1fc1d6edeff7bbd1c438ec25474d532c","ssdeep":"384:GYym0lDcKZyAyHEmlpvGpn1EKWnGQJ4fVlBB6+EV6b324TT+zzIBY:D0lDcK8AyHEY9Gpn1EKuGQJ4fVlB4Bkg","tlshash":"0452a6f573a6c63426ed81d6a017f81ea371b21c5404910c78ac8cdf59a5e8a70babbd","first_seen":"2024-08-19T16:06:40.943759Z","last_seen":"2026-07-27T14:06:41.1994Z","times_seen":693,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/logos/static/powered_by_logo.svg","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /logos/static/powered_by_logo.svg HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-md5: yMeilKp6reuDTG1eNiffRg==\r\nlast-modified: Mon, 18 May 2026 02:17:51 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-ms-request-id: 52ad33d4-401e-00aa-5183-e64565000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nage: 56982\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-ray: 9fddbb20a85c56c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5445,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8c7a294aa7aadeb834c6d5e3627df46","sha1":"5e2107ce68c4286a0b80648b19e7b5a7e7cad702","sha256":"cddd450a33be5e50d6f27aea78d2e278beae2762678b22fc2dcee8de29cbc0be","sha512":"881abe7bef6955139eab994ca4769c3d94568c27b51871a7b69e71db70110c4a80647803d661ba198ff9155de75b30c91f6ef2e7ed1a516c483ab2e5830cd337","ssdeep":"96:9ui6WcChyXQBHEOJ3a6XJD8ThcAbnNXGTvkWsoo:93/hEqDPXJwThcAb5Uvjq","tlshash":"26b174d67fb4a4f458859ffede1b59a9765b74f97b63c68c823c8f2906838c08548c04","first_seen":"2026-04-06T03:34:52.903175Z","last_seen":"2026-07-27T16:26:43.662663Z","times_seen":55970,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/en/express-easy/","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-18T20:49:51.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /en/express-easy/ HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 5794\r\ncache-control: private, max-age=0, must-revalidate\r\npragma: no-cache\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nset-cookie: check=1779137391; expires=Sat, 17-May-2031 20:49:51 GMT; Max-Age=157680000; path=/; secure; HttpOnly\nsession0=check; path=/; secure; HttpOnly\nsession1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; path=/; secure; HttpOnly\nsession2=check; path=/; secure; HttpOnly\nsession3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; path=/; secure; HttpOnly\nsession4=check; path=/; secure; HttpOnly\nsession5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; path=/; secure; HttpOnly\nsession6=check; path=/; secure; HttpOnly\nsession7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY; path=/; secure; HttpOnly\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Stimulus","description":"A modest JavaScript framework for the HTML you already have.","website":"https://stimulusjs.org/","common_platform_enumeration":"","icon":"Stimulus.svg","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33679,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (562)","md5":"abc88c0ab3bb9486afb0294f29c95aa3","sha1":"0796c89116f07cd8fbb4d9177ca1d7c7b6bec659","sha256":"60ac3e263e3fc74090c57e701408b9a2a90198ec6e2f28874e345a655fa66f95","sha512":"0b5257910338f1eeb4c1ea5340ee50ac11f81fbc60f3745694741d148dd45c1083dce5facd6b472ab37d982cb19d74bf7cfad921bf864578a92b8d71d8964663","ssdeep":"384:TLgtIrJCNwh+UyiAMeqm5CtZ5AtmxOth+Uyirkaqm5CtZ5AtmxODM9vwTNsc/kCc:XgG1CNwh8M5khXkVAvKl1","tlshash":"38e28516a48ded2e2e1262dbf520b6dcd0df547cc28868a3f1f7447b9dd4ca6c923462","first_seen":"2026-05-18T13:48:24.270999Z","last_seen":"2026-05-18T20:50:20.884286Z","times_seen":3,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":101,"dns":61,"connect":25,"send":0,"wait":222,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/39d/3339d/3575x1105/sCJShy_1400x432_7821d8ceb7c3ac7a.jpg","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/39d/3339d/3575x1105/sCJShy_1400x432_7821d8ceb7c3ac7a.jpg HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 99305\r\nlast-modified: Fri, 27 Oct 2023 10:18:12 GMT\r\netag: \"183e9-608b001756100\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99305,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1400x432, components 3","md5":"3d33833133ba09030c391a84b77dee86","sha1":"2f03fe5b51136be315e23ebb30b9801c5282d33d","sha256":"26acc511537fd8abf2142f6b65d1a93dfff12eb99c9a9f4a9ac141a7bda14ed4","sha512":"c04b58e17eb8c00f30dfb335d90c69f1d8dd88610451e5072848d7526a20644e5cf73965ce36021496325215520a9172ce6e360a6f6f72ea949d6fd92a2925a7","ssdeep":"3072:kiyku/YS7p3FyOPtqASU2cTcgYV4McoA7zz:kiWB1rtWUdTIdA7v","tlshash":"d4a312f234b9a826f37a7a34c588503eac03cf77a494108b5b747a1d5fd698d885b237","first_seen":"2026-05-18T13:48:24.276866Z","last_seen":"2026-05-18T20:50:20.88731Z","times_seen":3,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TGC47K7","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtm.js?id=GTM-TGC47K7 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\nexpires: Mon, 18 May 2026 20:49:51 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 18 May 2026 19:27:31 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 163233\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":502639,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (16022)","md5":"40de6707b53734e6fd921d8225e9829a","sha1":"3dea79775ee20829e2e13b34fb079dbdb005fba6","sha256":"c643e7664a9a31b975233a28d8594e535a124e9206441a597a8810e12bcbfd52","sha512":"954a015b89be5514a42f09b2d88a9f77e91464bf42d3a02e15d5f1caf4dd9c0916a636be902815a7b643b2e1b2d36b489f03846623de263e67ae621921301d27","ssdeep":"6144:HNyIQ/jieRh52dx11eheosX3KUo6JiXZA+nJRpt:HNLeRudx1ufpAY","tlshash":"d9b429cdb3ca74628392f478903f018bb57a28e2b44cd899f189c8e42d7465a5277f7d","first_seen":"2026-05-18T20:50:20.889859Z","last_seen":"2026-05-18T20:50:20.889859Z","times_seen":1,"resource_available":true,"data":null}},"time_used":297,"timings":{"blocked":112,"dns":21,"connect":8,"send":0,"wait":28,"receive":24,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/fonts/Delivery_W_Bd.woff2","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_Bd.woff2 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlservicepoint.rs/public/dist/styles/application.min.css?v1774434510\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33808\r\nlast-modified: Fri, 15 Jul 2022 08:22:59 GMT\r\netag: \"8410-5e3d3b9e3dbfa\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33808,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33808, version 1.66","md5":"7637928007dc8ed18d0c789995aa2af2","sha1":"421ccda189112cb40cdf3fff8fb20f5f840e3dfc","sha256":"62cf91563ce604e4d98e2e0e479f636cb95f505eccae77e14da46bc28f8cedfc","sha512":"e96a77bfbf22cf933b38713a4916cef65866f15e2f01f32c780774f01195dd6a51c7c04efd082da13b8bb28fa3644274dee77f781bb5856cfdb92fb83b559cce","ssdeep":"768:lAJvYNQwoCAOdf/ECuBNZGSgwOx9wmNzQ32Fw3KUbzc37A5MHopL:lsvYNYCAq/EnpGSBOomtQ32FwE3dHop","tlshash":"a5e2f23cf3fe8c9327e815e706395a6a404072b2b961054eae37f153ea454183357d8b","first_seen":"2023-04-19T09:33:02Z","last_seen":"2026-07-27T14:06:41.195262Z","times_seen":347,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/fonts/Delivery_W_CdBlk.woff2","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_CdBlk.woff2 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlservicepoint.rs/public/dist/styles/application.min.css?v1774434510\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36572\r\nlast-modified: Fri, 15 Jul 2022 08:22:59 GMT\r\netag: \"8edc-5e3d3b9e487e0\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36572, version 1.66","md5":"3f092b734173a32343d60b6f28b61035","sha1":"f6f2636b459cb6c02122446b059d9abffd38f8ed","sha256":"18bb1b8c6e45a26f4ca654602eb72e82dbea37d4d0ab220691e10969219ec06b","sha512":"6ceaa56d9dab8913a0f02aaa82f597d98bc1ef437ec94b3d2301886d5bbc87ab9cb2fbb79a7562a7e69ff9618998ee978ef07b10a9fe4e33bbd0a070b46ede1c","ssdeep":"768:9yZPR5aiPpwU7K/bUtMD55JaWb+NbSvte/E/Vkgb5ii1d:9CTl97GUtMD55XCNbItF9kVib","tlshash":"31f2e12ca15b6d99d1ef10b68000ec187917e6f2d2b02dbdd10f1e1987ad9f4dd8f64a","first_seen":"2023-05-10T12:32:03Z","last_seen":"2026-07-27T14:06:41.18732Z","times_seen":407,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-66GEXW8F54\u0026cx=c\u0026gtm=4e65f1h2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /gtag/js?id=G-66GEXW8F54\u0026cx=c\u0026gtm=4e65f1h2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\nexpires: Mon, 18 May 2026 20:49:52 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157641\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":476954,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7462)","md5":"211720d67ed82c699012e3143f027a21","sha1":"53c02e57b0950627e466cb77d513ea4ac40f83c1","sha256":"a73c1c83ec7ad3fdd88289f6479cadc77ec812735b52292c9670d82dc946707d","sha512":"11cf5437bc1039ef6e32727505c77b511e3152f4297748531e869af6de3f48f35140dcd8b912650bbbea1fc466eeb3e74e451962ae998623dae3ab17fceb17a9","ssdeep":"6144:PzIQ/jVCeRh5Idw4eyeosX3KUo67luA+c3sz0T:TCeRgdwOUoAf","tlshash":"63a4f7ceb3d674265396f478903f018ba57b28a2b44cc89af189cce02d7465a5277f7c","first_seen":"2026-05-18T20:50:20.893905Z","last_seen":"2026-05-18T20:50:20.893905Z","times_seen":1,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/images/dhl_logo_transparent.svg","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/images/dhl_logo_transparent.svg HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 530\r\nlast-modified: Fri, 15 Jul 2022 08:23:00 GMT\r\netag: \"3fc-5e3d3b9e66c51-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1020,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ad8a1b10f9beaee724e1902987f6e980","sha1":"4e4dc94956ff19adfd6a2df7aef8f8332bb27f5a","sha256":"5577646e7f7a2629cc090af4535356845ba87ead97bcd6a6e4915737f0ac1d56","sha512":"96cabe078ebef0bd6b697cffe4e5f41ac6fe975c70181a2289bd4464136f72134221b4ff380548b05c2cf431cc7c570c009152c35e8d59f0659a4463cb0304d6","ssdeep":"","tlshash":"5e1112b0c27faa58888b4300cd2d91712d3bc08a77c5a6d0f1c117b31f45c89c4a3db4","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-07-27T14:06:41.192127Z","times_seen":138,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/35b/3335b/1600x900/3rtble_1500x843_a3e9dc54027e9d61.webp","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/35b/3335b/1600x900/3rtble_1500x843_a3e9dc54027e9d61.webp HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-length: 45560\r\nlast-modified: Tue, 24 Oct 2023 14:12:43 GMT\r\netag: \"b1f8-60876eea1acc0\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45560,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e5fa693bd96acd43d14d88bd765c06f3","sha1":"e5b4b5a4c9571412f846302bfcfc9a5a83245e07","sha256":"4fcbe74c67ec6266b7f695b714f6ce70ba5b28f348d0f95074002d6013b3a6db","sha512":"791407558a403843f557a3444d48b1000770d01f8ea917cca587e749cd3970622886f517f29ae45674914d34680a6119552e2a90aa3d1c532fffd5f343b1fc3b","ssdeep":"768:t/4sWFqoTAwgPXKD0lbpMPedlVgDtmRB2qBSmMlih2xmatnQuzusz:t4sWBTA7CwlbpOedlVgDgB2qoUh24u6k","tlshash":"7f13e03923e281baf83565b89939d6f2d2051961dbcca3cc280f09a17053de537dbac5","first_seen":"2026-05-18T13:48:24.289825Z","last_seen":"2026-05-18T20:50:20.896941Z","times_seen":3,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/scripts/application.min.js?v1750161479","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/scripts/application.min.js?v1750161479 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 14217\r\nlast-modified: Tue, 17 Jun 2025 11:57:59 GMT\r\netag: \"858f-637c3394a1749-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34191,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (34146)","md5":"1bc2f5a8b85b103a4b72203f60f9244e","sha1":"1e1c9250592505d77743c7d89ef737ec823b6ded","sha256":"211030d4ac9ac4e10d06d1101683822c69bc2d4f6145020b4fe7d83c17bdf06a","sha512":"f854ae1b647d5453182691f8d4224d27303f2a3488b7ee0c211853c7fb523f7b839e111b59e2af1283cba1f84b4ad13b8bbaa99986ed6005c07c1f7c2dcebc44","ssdeep":"768:IP7+tn/k8+DAjDfBEo4jDVxaMTd2qWVzHjo+O:Q7+tnM8A4DfuoUPWVD4","tlshash":"bae229d4726025e349f2a13ea4af63483132293676560588b9b985f52c78d8e7333fbd","first_seen":"2025-06-25T10:41:46.550387Z","last_seen":"2026-07-27T14:06:41.150754Z","times_seen":120,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/fonts/Delivery_W_CdLt.woff2","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_CdLt.woff2 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlservicepoint.rs/public/dist/styles/application.min.css?v1774434510\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33756\r\nlast-modified: Fri, 15 Jul 2022 08:22:59 GMT\r\netag: \"83dc-5e3d3b9e4a721\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33756, version 1.66","md5":"073f912ebdec8b9c6091f5f7fd28fef4","sha1":"4ceca5bce590c592c7f4da11cfbc045a8f500227","sha256":"3287727c2dc7032a10fa3c90fe25860f5f838ece43ffee48f547c95dd6f22fb4","sha512":"5b1e5ba0df99e39c7463e800a271db99319e11c9c2927d3ac7c0c3f6987114f483a2c2940d150e5e61653f4f32d3ad7e95a33a5db21fea9588454936284e74fd","ssdeep":"768:XwqSpHnEM8WX7Tz+M3/suM4N17K5BIUg58VI7cRB4:XwqSRnlX7TH/T17K5BVS8yIRB4","tlshash":"f4e2f1447a3f9ba460a30f9702fee4a1d7186ed52a429e80ac920cc730753af97b51d6","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-07-27T14:06:41.194594Z","times_seen":256,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/fonts/Delivery_W_Rg.woff2","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/fonts/Delivery_W_Rg.woff2 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dhlservicepoint.rs/public/dist/styles/application.min.css?v1774434510\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 33604\r\nlast-modified: Fri, 15 Jul 2022 08:23:00 GMT\r\netag: \"8344-5e3d3b9e66c51\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 33604, version 1.66","md5":"0f529c4324291f642ef9918cc460e232","sha1":"c7b1c31b51d5df4a08fba5f2ae6b7ec2c6301eb0","sha256":"aad2e62bcbb49d968f8c6d59a0fa6d6bbf239bd508b5749997c9f89e2f67aaa4","sha512":"b93af2dfc2178adfb843410e636b8c1249076239fd9610a5694ca87cbf0b263e8da58e5eca3ab0bbb125d88f7876fda7e5a1d171a924ab79aa09ae2c0d634b33","ssdeep":"768:EDoxVVP6j4IstpRfP6Pl88NMb3yludj/4UA56MWH412xE:USzyj/stPU43y0drf7nH22+","tlshash":"78e2f161d6861e62be43f23dabf0c65ed1c12219cd2bcb81c0ec261e67863971f8751e","first_seen":"2023-05-03T03:15:09Z","last_seen":"2026-07-27T14:06:41.18112Z","times_seen":451,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/otSDKStub.js?did=b831dcb7-9604-45ef-8181-a964af208538\u0026data-document-language=true","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /scripttemplates/otSDKStub.js?did=b831dcb7-9604-45ef-8181-a964af208538\u0026data-document-language=true HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 8776\r\ncontent-encoding: gzip\r\ncontent-md5: 6IX3pWHeTXgWwa/e0Z7ojw==\r\nlast-modified: Mon, 18 May 2026 02:17:48 GMT\r\netag: 0x8DEB483A83A1C1B\r\nserver: cloudflare\r\nx-ms-request-id: 8e372bcb-201e-007d-71f2-e60f42000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9fddbb1d5cdd56c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26819,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (26818)","md5":"4d4e5fad345c75b53a18e3494f2160b3","sha1":"1dd50f78706d01573678dd62bcfd8fff0998d7fb","sha256":"be90d9edcd24296555f7f7e95f9ae44dbf046452a50988cbd7b078728b4e1e24","sha512":"a89160aac1efd2e980a97600e2a96c5b26b07e3c4c1c70850ab919d647ed6567248f8655e2690ddaa6cc75260898a79320452dfeb6efed8ed079b922388cf3e7","ssdeep":"384:r8k7hI3RzMABwXeU9LH6rlIgknE8eEaRgCyu8LcwLKvTJ9x4AaHKJx686S:rzIBAABwXb9wvknECPCJ8gJ9ugwS","tlshash":"5dc20989b040fe3447d261dc5a3be25a723a746d3485c168f868dce0647dc4f6633bb6","first_seen":"2026-05-18T02:31:26.264149Z","last_seen":"2026-07-25T07:43:56.724896Z","times_seen":18502,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":49,"receive":1,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/consent/b831dcb7-9604-45ef-8181-a964af208538/b831dcb7-9604-45ef-8181-a964af208538.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /consent/b831dcb7-9604-45ef-8181-a964af208538/b831dcb7-9604-45ef-8181-a964af208538.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nOrigin: https://dhlservicepoint.rs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: application/json\r\ncf-ray: 9fddbb1e2c3eb512-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\ncontent-encoding: gzip\r\netag: 0x8DE37FDA24956F6\r\nexpires: Tue, 19 May 2026 20:49:52 GMT\r\nlast-modified: Wed, 10 Dec 2025 15:06:02 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding, X-OneTrust-IsBot\r\ncontent-md5: FL0RCoAGFi3vCI2GkpAb2A==\r\ncross-origin-resource-policy: cross-origin, cross-origin\r\nx-content-type-options: nosniff\r\nx-onetrust-isbot: true\r\nx-ms-blob-type: BlockBlob\r\nx-ms-lease-status: unlocked\r\nx-ms-request-id: 7cb84157-d01e-008d-6805-d1df2c000000\r\nx-ms-version: 2009-09-19\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5722,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0c05d1aca921bb72b593175c5bf783a9","sha1":"5104922e3b767c4340c9310a68bfdd36af8f5393","sha256":"eec552dde2ff4cc6cece54b823e0312ffd6af6200dd3a16085d69af65ba0dd91","sha512":"78ffd68d5b007ad916d7e5f61b161dd6ce73257bc0f9335b1f168707635e38e734ba40e58dbc482f79a825c6a0c03cfa4711f65099cc08f0cf1452bf8bf238d1","ssdeep":"96:npyIi40w1aOCxCBKGa6AyL6AbvNZtlhb3/Fg7jRjljijFZPbY2Jz8Qm:FFMOCxn6vLbvtnb3/qPRNGs/Qm","tlshash":"89c19819ba4c423ecb8e43d4d44dbe0d4ade2433128abc14dd8f8dac1e97bb7285655b","first_seen":"2026-02-19T04:16:05.018404Z","last_seen":"2026-07-10T10:42:13.975008Z","times_seen":11,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":56,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202511.1.0/assets/otCommonStyles.css","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /scripttemplates/202511.1.0/assets/otCommonStyles.css HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nOrigin: https://dhlservicepoint.rs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: text/css\r\ncontent-md5: qMpJvQGEJvo13RbtCGiMaQ==\r\nlast-modified: Sat, 06 Dec 2025 03:53:23 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\nx-ms-request-id: c8ed7139-c01e-0077-63ae-d116cb000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\nx-content-type-options: nosniff\r\ncross-origin-resource-policy: cross-origin\r\nage: 34664\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\ncontent-encoding: gzip\r\ncf-ray: 9fddbb1ffe1cb512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26941,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26941), with no line terminators","md5":"a8ca49bd018426fa35dd16ed08688c69","sha1":"12b8f640d3bb981b7f0a0487577455a244da1350","sha256":"6252145709366a727ebaac7c38451d078025cd1b5ae89698f8957a2fa99c3762","sha512":"2fbadfa5dad22a45eb863cb52c66a5e06cfadea541ec1c8c81e2ffeea45da850013c48f5a68ddbf72bfd1aaf4de2503e01b678654c3a570bb39d27f00309188f","ssdeep":"384:348ChRGI09YUbHDouelC774jlIhHLnwGfg4xqsQ4PNE:vYMpWN","tlshash":"c4c2459b38512b1ae7d7c719952139827d11aceffd739ceee009a3784adc3e24c1464a","first_seen":"2025-11-26T17:14:29.574994Z","last_seen":"2026-07-27T15:32:01.348493Z","times_seen":2360,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/34e/3334e/800x600/UmrseT_800x600_da5a662e83a7edd1.webp","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/34e/3334e/800x600/UmrseT_800x600_da5a662e83a7edd1.webp HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-length: 24514\r\nlast-modified: Tue, 24 Oct 2023 13:42:25 GMT\r\netag: \"5fc2-6087682453240\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24514,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e2dd82a757545a17c5bf5f7f97c073e6","sha1":"20fe8ae12c2847fc54a96ced57209f5a440f7131","sha256":"e0ee6b2d90409e41d159c3c0d56c0612c21ddab4e7a3cb1de1b314b05fd4d675","sha512":"8e0a90887ea3ab241f7f0a55850fdf5ebc5abc5c1c5012b1fac832524f7bc03d8d1110d5f06c3b708be2e136000eb0d69da3300103ef1db22bbca519e6ecbb48","ssdeep":"384:zg1oHvK+E8nhn4BID6mjU9y0IZAgd1AeUz0TeNxSHzkZAXRhGoleuYoD79S1PU9N:z2oH9Nhn4BIJjU00IZEASNxEEAXRAYeE","tlshash":"8cb2e0652dd54f66f7b4357042b2bb34a99f2b232f824f05497eb00a0a58654c26afcb","first_seen":"2026-05-18T13:48:24.271916Z","last_seen":"2026-05-18T20:50:20.910351Z","times_seen":3,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/352/33352/1600x900/z0RsTr_1500x843_9dcd0689b0c34cb0.webp","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/352/33352/1600x900/z0RsTr_1500x843_9dcd0689b0c34cb0.webp HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-length: 56334\r\nlast-modified: Tue, 24 Oct 2023 14:03:29 GMT\r\netag: \"dc0e-60876cd9c4e40\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56334,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"497d4e3d1ff8bed8dad8db4be129f00a","sha1":"37a44c25a768c23e4cfb3ddf61218bc89a5b4640","sha256":"bc190127db26c9f6267f7a247eb347c8b4554dda3d578176311a26af081bd89c","sha512":"97693821d889af4b1f72ef71f1b3c1a35fa3d0d842cc38202185afa5cb154df25c6358a28ac8e33eaefa15a6c1d8249bbbf2ce5dc975302661916a118da46ef2","ssdeep":"768:2HgCe4g7M3Pd/ayNH2fKSN0FE44M/o75rstmTZFnes0AnwgobUjq+hn4HwbIH/Yg:D9MF/JUfKabz5bwsnaQ1lIH/F","tlshash":"ae43024488326432dfebe1f9ea5e8b3407a57fb2015cd75a79b08ac35ff54a88943c51","first_seen":"2026-05-18T13:48:24.288835Z","last_seen":"2026-05-18T20:50:20.912787Z","times_seen":3,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/@googlemaps/markerclustererplus/dist/index.min.js","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/@googlemaps/markerclustererplus/dist/index.min.js HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 15091\r\nlast-modified: Fri, 21 Oct 2022 09:45:05 GMT\r\netag: \"9d56-5eb884becd99f-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40278,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (40207)","md5":"6d72ff71a3a6b58244d7336469a0d479","sha1":"b2538a481ec947ff6e0ed7ef0a1d4cdfee196bcc","sha256":"cc0b14615ea7ed660d7a101035d077229c1fb59db3f2dab02e764bf82df1ee4a","sha512":"18ef9a5e47c5d49da82c16995cc5f0d55af197576ea8ab672303b03844184a579d94356134270aea7537b71a4f6bf146d5eb5f672312f85cc5fbab72b853d36c","ssdeep":"384:31roYQGOFI2gP5kag7uJf4UZ/Uo6m4Lga5Wy9tVjVCOjHxEBWd/T/vbm2cGyrOO7:lMMXkNUZ8o6ZrLVjMW2BI62gwpLogosE","tlshash":"e603d7c9f691b0604393b1f8013f0a8af33b5c59a86a81ecf655d0e16cb994e507bf39","first_seen":"2023-03-08T13:18:30Z","last_seen":"2026-07-27T14:06:41.153742Z","times_seen":1541,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"geolocation.onetrust.com/cookieconsentpub/v1/geo/location","fqdn":"geolocation.onetrust.com","domain":"onetrust.com","tld":"com"},"ip":{"addr":"104.18.32.137","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geolocation.onetrust.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:26:36 GMT","end":"Wed, 24 Jun 2026 22:26:33 GMT"},"fingerprint":{"sha1":"6F:D0:3C:3C:B4:09:A3:6E:5B:9E:4B:28:D4:D5:7C:C8:58:EF:8F:94","sha256":"8A:C1:F4:AF:BE:73:5A:05:3D:50:5B:EC:CC:F1:6E:0D:8E:B2:72:34:FD:73:94:75:0E:C0:0F:FB:8F:BB:C7:8A"}}},"request":{"raw":"GET /cookieconsentpub/v1/geo/location HTTP/1.1\r\nHost: geolocation.onetrust.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nOrigin: https://dhlservicepoint.rs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, OPTIONS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9fddbb1ea9735693-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8d896eded71ee5fc863cf1ec1485da75","sha1":"b36c99cd02aa88e94a55b028381d9c5cb61cbbef","sha256":"3dddf5b1f3c0e76d359e7fe585b61f721980981a612e17d7ebfedfc3e6fc3b3d","sha512":"a216a2ec987ed8aa509d4bf88075844374819f15767190c2f9fc1b7dc05436cb33ac0fa3466bd207bd3104e455cd3c72fb8622dd0759ab64f197ac216850382e","ssdeep":"","tlshash":"3da0025864599d1d9dfd824a530e726a1244a309828751c6c6c9ed75c5812c9b05c480","first_seen":"2025-06-02T14:25:58.002399Z","last_seen":"2026-07-27T16:26:43.626349Z","times_seen":165585,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":16,"dns":0,"connect":1,"send":0,"wait":16,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202511.1.0/otBannerSdk.js","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /scripttemplates/202511.1.0/otBannerSdk.js HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 127099\r\ncontent-encoding: gzip\r\ncontent-md5: p3xv9uYBeJ8KlwMqSsjAsA==\r\nlast-modified: Sat, 06 Dec 2025 03:53:18 GMT\r\netag: 0x8DE347AFE399A5F\r\nserver: cloudflare\r\nx-ms-request-id: 8fa4bfcf-901e-00e7-0d90-668387000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding\r\nage: 53413\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9fddbb1eee6c56c7-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":525881,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"c29a935d0ff09112962434c553ecd620","sha1":"3c79e7c468ea7af6f13bb936d4c8eba8b97a07d5","sha256":"d82ebde730f1c2caa2a648f84319b2a9f9e2fb411f0d9ded2cb552ffd7d7f7af","sha512":"0332fa1796e1aea1f91e20ea0dcb9dddb5f75509977b629415f2dc5a2446df08881f2ff90a6b1dbb594bd85f081f5af4d51807640e5bbd6d26351c24ee511384","ssdeep":"6144:etCHdttu1ivHCSw8xnpdE7qJi20ubcVw1WuxW/3wVv1jtpYBlXDjELbSC:ecusHCSrxnpdE7qJNgwVvQVsbp","tlshash":"62b42a8e7590753587e792b8c027414aba35746cac85806cb45cc5f90bf9f821ea3fbb","first_seen":"2025-11-26T17:14:29.564073Z","last_seen":"2026-07-27T15:32:01.438412Z","times_seen":2466,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.cookielaw.org/scripttemplates/202511.1.0/assets/v2/otPcCenter.json","fqdn":"cdn.cookielaw.org","domain":"cookielaw.org","tld":"org"},"ip":{"addr":"104.18.86.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookielaw.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 21:56:27 GMT","end":"Wed, 24 Jun 2026 22:56:25 GMT"},"fingerprint":{"sha1":"2E:34:82:BE:0D:59:89:52:D1:26:CB:E7:0A:94:09:FA:91:8B:7B:CC","sha256":"1E:AF:A5:BF:87:ED:02:00:E3:6E:F4:BB:17:F1:41:93:44:8D:49:41:A1:03:36:39:54:3E:59:F8:8C:33:01:61"}}},"request":{"raw":"GET /scripttemplates/202511.1.0/assets/v2/otPcCenter.json HTTP/1.1\r\nHost: cdn.cookielaw.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nOrigin: https://dhlservicepoint.rs\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 13363\r\ncontent-encoding: gzip\r\ncontent-md5: KC5ADJC64D+1766EWFTTUA==\r\nlast-modified: Sat, 06 Dec 2025 03:53:15 GMT\r\netag: 0x8DE347AFBF78B19\r\nserver: cloudflare\r\nx-ms-request-id: 4f53cd85-501e-009c-5f0c-86e837000000\r\nx-ms-version: 2009-09-19\r\nx-ms-lease-status: unlocked\r\nx-ms-blob-type: BlockBlob\r\naccess-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,ETag,Last-Modified,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\nvary: accept-encoding\r\nage: 34664\r\ncache-control: max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: 9fddbb1ffe16b512-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67556,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d71282862973e83e169ebb79ec373ae1","sha1":"a259fce5c11fdbd4c2aaab9798a1d93a1b3af288","sha256":"0b080cebdfd90d40e724d27276a1125953c7efbec8afa4f322f3102c61d763e6","sha512":"ef198c779b2276242821d2ea8a149628080a503509cf9ba56329f327a0e2d2a1b817e04242227596ac9cb03e8ce4f200ca6aec6e258387b5eefa8c65727e172b","ssdeep":"768:IzgP4cBfwwYifZGpMu+0yV88mXdazQfhF:IzU4qOL+0yV88ok4F","tlshash":"7863d99b7aa0530afee3cb19eb926de87124c90fbd335dedf1424678868d7e18d11508","first_seen":"2025-11-05T01:38:18.194421Z","last_seen":"2026-07-27T14:06:41.20081Z","times_seen":3741,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/35d/3335d/1600x900/UPrKx0_1500x843_ac1bf43aaea7ecde.webp","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/35d/3335d/1600x900/UPrKx0_1500x843_ac1bf43aaea7ecde.webp HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-length: 48860\r\nlast-modified: Tue, 24 Oct 2023 14:13:08 GMT\r\netag: \"bedc-60876f01f2500\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48860,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6bc1e0f5f3dad0b9ac98a4799315a8f9","sha1":"20fe7c01a71683ec82e35829d421e68e2dcd8b80","sha256":"d07a7438e39bfc2486ea0e2b04a32d2245b66fa96f99919d1aa1c5cb5d9e0f51","sha512":"5b86f33ebf9014a3ce31bdaa0fb2bc8050c8d2fcada35893c7e3947fc49c6cf5fc78435de666550784193579d1dd6efdd13a361bb89744b0e86b0ee2435a06bf","ssdeep":"768:6eFaeIdeza3kPD99dNoBnQoSXh/oWeYIX6Ixq8Ai3WDdyLgfCJQOIWblqSx8xP:FFaID9zEQoSRoWepNqRiMy8fUDdEk8xP","tlshash":"c323f13e99d9551ae62015244d1dfe81e5a38447ff3c3e4cb3dbd63783a222c12ac66e","first_seen":"2026-05-18T13:48:24.290703Z","last_seen":"2026-05-18T20:50:20.918994Z","times_seen":3,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/td?id=GTM-TGC47K7\u0026v=3\u0026t=t\u0026pid=194959157\u0026gtm=45He65f1h2v867511167za200zd867511167\u0026seq=1\u0026exp=0~115616986~115938465~115938469~118168308\u0026dl=dhlservicepoint.rs%2Fen%2Fexpress-easy%2F\u0026tdp=GTM-TGC47K7;67511167;0;0;0\u0026frm=0\u0026rtg=67511167\u0026slo=4\u0026hlo=2\u0026lst=1\u0026bt=0\u0026ct=3\u0026z=0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"E7:E4:62:10:D0:4A:34:4C:52:81:20:8A:19:37:09:AC:CB:16:42:54","sha256":"08:43:11:5A:D2:42:9C:49:2D:21:51:4F:92:B8:9E:59:04:F2:2D:E8:0F:ED:E7:49:06:D8:6F:61:B9:41:A2:36"}}},"request":{"raw":"GET /td?id=GTM-TGC47K7\u0026v=3\u0026t=t\u0026pid=194959157\u0026gtm=45He65f1h2v867511167za200zd867511167\u0026seq=1\u0026exp=0~115616986~115938465~115938469~118168308\u0026dl=dhlservicepoint.rs%2Fen%2Fexpress-easy%2F\u0026tdp=GTM-TGC47K7;67511167;0;0;0\u0026frm=0\u0026rtg=67511167\u0026slo=4\u0026hlo=2\u0026lst=1\u0026bt=0\u0026ct=3\u0026z=0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgtc:46:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsgtc:46:0\r\nreport-to: {\"group\":\"ascnsrsgtc:46:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgtc:46:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-27T16:26:43.62579Z","times_seen":17566182,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/favicons/favicon-16x16.png","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:52.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/favicons/favicon-16x16.png HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 215\r\nlast-modified: Fri, 15 Jul 2022 08:22:59 GMT\r\netag: \"d7-5e3d3b9e36e96\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":215,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"077346fd1d70b3d028423a82b6d46b52","sha1":"76ab7fa95f5bdf543a4ed85019cc335d09194013","sha256":"368bbca9b449e27f8fc75866e5e69bd7de4ebf31378ecd7e83958602a8902ded","sha512":"bbb38e4b5c46a816890ed324a5dd3b4a066fa9c72c3f9114492f95d6d954e4198575413369e815c77f280ea9f4afd0afeecf6518afeb6f6b3294cd39919d9ff2","ssdeep":"","tlshash":"6ad023d5a2145433cd6314a3ce052c148c53417859d51c59049be4eb9f55ad6b1661de","first_seen":"2023-05-21T16:39:27Z","last_seen":"2026-07-27T14:06:41.181717Z","times_seen":139,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/351/33351/1600x900/VxsC4g_1500x843_e71de1f967f88516.webp","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/351/33351/1600x900/VxsC4g_1500x843_e71de1f967f88516.webp HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-length: 25070\r\nlast-modified: Tue, 24 Oct 2023 13:59:08 GMT\r\netag: \"61ee-60876be0dc300\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25070,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6c56b6d36f306d8720f574c771c73186","sha1":"8f2e3f1ade0e5d4d453c3fa31a2680b0a2979062","sha256":"6ed8c05767b7a916050c941a2c092928392df920aa3618634676debc4d63c87a","sha512":"c0d03122a50d49d3de7810b7cc8b10b1264dceb09ae001c5c26e2559521880cb56986a57d3d5e30ef00361460e9cf9d16dc8845e604c2ee4e7c549f579d8c024","ssdeep":"384:PK4sgDLQ5TiFFXgUF11iFA6lQP5TvxQjuI8+w7lujRSM7AUUVs4ExjVKzuJ8:PKjSqTAFLF96C5Plsh7aVtExjSu","tlshash":"2fb2cfe097506fa9d4aae033b8d503144f4f2408853a717b9db6e482ef6f6a7428e7d1","first_seen":"2026-05-18T13:48:24.27595Z","last_seen":"2026-05-18T20:50:20.923692Z","times_seen":3,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/359/33359/1600x900/r0dHm2_1500x843_b3e03b6bf89081d8.webp","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/359/33359/1600x900/r0dHm2_1500x843_b3e03b6bf89081d8.webp HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-length: 67988\r\nlast-modified: Tue, 24 Oct 2023 14:06:53 GMT\r\netag: \"10994-60876d9c51940\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67988,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"51cbb5429e11d070b1bcc02b8a692631","sha1":"26718371c24a57b493d8a2167e3e6a6bde79357e","sha256":"da86b9e21282f26c30cfc859cbacd9246ff760cf8fab7620357c79bab723afb6","sha512":"1bfd4a241e20f1141f15a7004a06afdfce646e9006903da2812e3477511fe226f4d63d345f53a9c2eb9cff107c8fca4a1a7867b52920b431cc38d3d6763a8e83","ssdeep":"1536:E6jWdFC8j+sefdBQeNWS+/vpMtsWCApRFdcJlkP0P+KPdWQ41K:PWe8hOLxuBeU2FaJu0mKPdTqK","tlshash":"fd6302d61eb0c0caec6a2fd148997d138e01a5ecdb357dcfa2265f7f0946b6a2783150","first_seen":"2026-05-18T13:48:24.293796Z","last_seen":"2026-05-18T20:50:20.926268Z","times_seen":3,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/i/77/77/35c/3335c/1600x900/Oe4s7o_1500x843_8bb08fcc782c4962.webp","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /i/77/77/35c/3335c/1600x900/Oe4s7o_1500x843_8bb08fcc782c4962.webp HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-length: 46446\r\nlast-modified: Tue, 24 Oct 2023 14:12:56 GMT\r\netag: \"b56e-60876ef680a00\"\r\naccept-ranges: bytes\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46446,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4cc3d575b0dc5781667162b7b73a17a8","sha1":"43f75bbfde39c1bf067dedec4181166575b9005a","sha256":"4b5e029d3dc7a1508b14a1073f6f0655aba62bdc6c4ecf17b852519e29bc24a7","sha512":"130f0dd0e980048d37e847df8964554b098ebde88f1be412d7f46695498532e000caa994bb20c323d0775d521eb5dd3b2354dc1bfb58938139b7fab05cf45ca4","ssdeep":"768:zaXa/cvjx9Ig49s6ciEAqWFUB2eIdUYchvWmQCAPn8B6mowIFKlAW:+gcvjxqgAs6brh8SErxI263TUT","tlshash":"8623f26a8cdc2301cd53b37f900ad5b52e245ce321ae557b04ac4d7a8b16b62efbe4c0","first_seen":"2026-05-18T13:48:24.277841Z","last_seen":"2026-05-18T20:50:20.92855Z","times_seen":3,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dhlservicepoint.rs/public/dist/scripts/modules/application_es6.min.js?v1741105574","fqdn":"dhlservicepoint.rs","domain":"dhlservicepoint.rs","tld":"rs"},"ip":{"addr":"81.95.110.236","port":443,"asn":25234,"as":"ACTIVE 24, s.r.o.","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dhlservicepoint.rs/en/express-easy/","date":"2026-05-18T20:49:51.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.dhlservicepoint.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 12 Apr 2026 22:15:22 GMT","end":"Sat, 11 Jul 2026 22:15:21 GMT"},"fingerprint":{"sha1":"F2:ED:48:DF:B5:FF:C0:E1:01:7E:E2:3D:CD:3E:81:71:F0:80:51:3C","sha256":"C5:61:9E:9B:90:36:88:E3:F5:04:CF:B5:E1:72:44:27:54:51:CD:C8:71:F6:4C:E6:12:84:7D:67:5A:D9:56:29"}}},"request":{"raw":"GET /public/dist/scripts/modules/application_es6.min.js?v1741105574 HTTP/1.1\r\nHost: dhlservicepoint.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dhlservicepoint.rs/en/express-easy/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: check=1779137391; session0=check; session1=vp1nHf6dR5NtYcz_R-ngjbJJY2itIGYwJ4hcZLdjtj2zPoK92HTzBdmwHxi2wP2p8Hgp2DQMPtA6TEbKW5_pMRpY4tOGQWIoBJQcC9fpWD02-_OgE-qY7kGNUGrju6Z0yPGGQc20qSdEw248dJBS3BNRr_p4VgQb7bJX8EY; session2=check; session3=AxEFf0PbScs-cSIhR_5XcR0tOKTOcb0o-PqjykNu2pMdNBlCv6L-7stBtEeVWAPbZLfXfdMesTHQLMu1DY-sY8qEgMGkN9o8q_KfL9w; session4=check; session5=np8zEAljXj-auU5gR6zmM6JcTsRF4Dy0AKplzGMMHU4p0qUzYMJHWBsgVQ2XIxHlTTeQXHYYJ_kTG6J2PPnXbBjpACtL8ymusdA1zINqa_PPuWNun01afM7DnpW89bJXl2qdYo7kF0xeyPpeMhEIUx9R39PbHSqd5UQh_tE; session6=check; session7=RlqGIwo8B_zA043AR8Gf_cxtp8_gGNPa5sgMLxoy4s9207rfowz7m_z5ywkCScK4nHi0Wch4ylgH8xLTIdco2skC3Fg_6iMqkUZbJt7rYNvTurqVLyN5tZWXMNtezxH7TUOo7tiI3rs77UilmFxFv64gMgRUhjqIidasVJY\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 18 May 2026 20:49:51 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 750\r\nlast-modified: Tue, 04 Mar 2025 16:26:14 GMT\r\netag: \"641-62f86bb4af441-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-security-policy: upgrade-insecure-requests\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1601,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1556)","md5":"01ae31799923f81dfdae2216fbc57c9d","sha1":"3d0460b55fae47b253bb973bd28378b2dea3575d","sha256":"66f8e53411a8e9205e5cc3788486c517fdb30b11f1e9e20ab9205d828b3880fa","sha512":"e2a20c178e424ba3a250bc729a35e9384fb0956a0447e4dc7e92a1d7f79f66d477b3051751c49559f25addf6265261accd36d5a9ced14cf2b163522ef39e2f3e","ssdeep":"","tlshash":"6b3144b8f93c987305fd43aea14b65fa81a936ed6d06c018e15d4cc954a8086297593b","first_seen":"2025-04-04T11:12:55.685143Z","last_seen":"2026-07-27T14:06:41.182997Z","times_seen":131,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-18","alert":"Sinkholed","trigger":"dhlservicepoint.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}