| donkeytourscroatia.com/connect/ |  185.224.138.61 | 302 Found | 0 B |
URL User Request GET HTTP/2donkeytourscroatia.com/connect/ IP185.224.138.61:443 ASN#47583 Hostinger International Limited
CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /connect/ HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, no-store, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://donkeytourscroatia.com/en/connect/
x-litespeed-cache: hit
content-length: 0
date: Mon, 02 Oct 2023 03:52:04 GMT
server: LiteSpeed
platform: hostinger
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
|
|
| donkeytourscroatia.com/en/connect/ | 185.224.138.61 | 301 Moved Permanently | 0 B |
URL User Request GET HTTP/1.1donkeytourscroatia.com/en/connect/ IP185.224.138.61:80 ASN#47583 Hostinger International Limited
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /en/connect/ HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
content-type: text/html; charset=UTF-8
x-redirect-by: WordPress
location: https://donkeytourscroatia.com/en/connect/
x-litespeed-cache: miss
content-length: 0
date: Mon, 02 Oct 2023 03:52:05 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/themes/astra/assets/css/minified/style.min.css?ver=4.3.1 | 185.224.138.61 | 200 OK | 11 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/themes/astra/assets/css/minified/style.min.css?ver=4.3.1 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (63030), with CRLF line terminators Hash3e99fe1668335787409e9004f0f4c42d 728c188443482333e44960fc629a581b8f44bbec 43f025da1968260864a8f263aa99f7e1e8286cad8d23a7d9c3d5162f516b4262
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/astra/assets/css/minified/style.min.css?ver=4.3.1 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:05 GMT
content-type: text/css
last-modified: Mon, 04 Sep 2023 16:00:25 GMT
etag: "1176c-64f5ff19-9e92c4146fda543;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 10663
date: Mon, 02 Oct 2023 03:52:05 GMT
server: LiteSpeed
platform: hostinger
|
|
| ocsp.pki.goog/gts1c3 |  142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashe15afd40c0bf45a8797a653379ede5a8 498a5006d5a64b96d5a680d4e1be7a3d171b9d64 afb020f652e224d02abd51e9500681d951a77854ee18895576190af4bd1c7d38
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash46a98adcba0a067591be1fb36b779473 8303da516b26b1d75b6b9798730c6311245c4122 91e198fc434e5db4b6375002c0ab751f38e75e02e595a6a6024c1b1226151d5e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashe15afd40c0bf45a8797a653379ede5a8 498a5006d5a64b96d5a680d4e1be7a3d171b9d64 afb020f652e224d02abd51e9500681d951a77854ee18895576190af4bd1c7d38
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash46a98adcba0a067591be1fb36b779473 8303da516b26b1d75b6b9798730c6311245c4122 91e198fc434e5db4b6375002c0ab751f38e75e02e595a6a6024c1b1226151d5e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| donkeytourscroatia.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3.1 | 185.224.138.61 | 200 OK | 13 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3.1 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (53449) Hash03c0f2128c8dd615b1691c168f1d4456 defa44bed1f35ec899cfd358ca911390bca53e67 67447c3656caad630373253691f3e8f64467eafd6e7305c9b0e98111b0b41694
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3.1 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 13 Sep 2023 07:24:47 GMT
etag: "19824-650163bf-8e2d54cb7e2bc50e;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12669
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.16.4 | 185.224.138.61 | 200 OK | 18 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.16.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (65496) Hasha7c41b5578e03a3d3d8241997e1fc4ae 8e4b5ae1f23b30c9c63ef09c123b4fd4050408a2 e73a9bf5feab697897e1f66af3259e5418aacec3208a65607fbc614acb248bdc
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.16.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 16:01:45 GMT
etag: "296e1-650b1769-a450e8564c585cd4;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 18365
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.16.4 | 185.224.138.61 | 200 OK | 12 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.16.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (59158) Hash74bab4578692993514e7f882cc15c218 b6293bcfd851f963edbe859498570c4c0c7eaae4 d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=3.16.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "e7d0-650b176b-c9f1ac8fb1b6fc14;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12319
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.16 | 185.224.138.61 | 200 OK | 7.1 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.16 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeUnicode text, UTF-8 text, with very long lines (1646) Hash2395c81e72a52f14588816b4f72a7f17 711357e8d49c28be7605fcfbf881b90567decee1 ea14d1b1233e6cbc9b1a156ac532f076f7adafc309726fca7bf8833f882ac872
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=1.6.16 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Mon, 11 Sep 2023 16:00:31 GMT
etag: "127a4-64ff399f-6b5ceced0c1b6fe9;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7113
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| www.googletagmanager.com/gtag/js?id=G-EXJ05DBXNP | 142.250.74.72 | 200 OK | 77 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-EXJ05DBXNP IP142.250.74.72:443
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18 ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File typeASCII text, with very long lines (4179) Hash9b29ba3ada976400517a558812e6ccfd 97deef06f7c489143e596d33ea84d02b394fd13e 8e0bc34cea6fed58b0075508261c02125ba386cef1dc7b129256875f788c1b0c
GET /gtag/js?id=G-EXJ05DBXNP HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 02 Oct 2023 03:52:06 GMT
expires: Mon, 02 Oct 2023 03:52:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 77436
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| donkeytourscroatia.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=4.3.1 | 185.224.138.61 | 200 OK | 339 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=4.3.1 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (3412), with no line terminators Hash730e0907dfd019baf0c555a21f373670 6bef5d7aab1206ca5095e6f589c47c9912873ac7 b6e169ac07a49b2c9d2b726bb3c384097badcc093dc6322c9a2ba066ae8e06a8
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/astra/assets/css/minified/menu-animation.min.css?ver=4.3.1 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Mon, 04 Sep 2023 16:00:25 GMT
etag: "d54-64f5ff19-846ba0ee9a9e07bb;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 339
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.1.4 | 185.224.138.61 | 200 OK | 824 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.1.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
Hash20e8490fab0dcf7557a5c8b54494db6f 285db746dfc0d43b9ca42f8d65b69c908ff72ca5 fbe820b6140ad28e86f34ffae507d807cf591a22697a05b71958f2014e96a9e4
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-public.css?ver=3.1.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Tue, 12 Sep 2023 12:45:16 GMT
etag: "c22-65005d5c-85d2526cc3f48c09;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 824
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.1.4 | 185.224.138.61 | 200 OK | 4.1 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.1.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
Hash359aca8a88b2331aa34ac505acad9911 800a4f56bb87049e1f0d45cf93c4e8ef79144b45 655ae452d922f501b62c7028fc35e238138de989387381cc1ed9cea9085864db
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-gdpr.css?ver=3.1.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Tue, 12 Sep 2023 12:45:16 GMT
etag: "6a71-65005d5c-ede22f7c2b880527;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4069
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/css/trp-floater-language-switcher.css?ver=2.6.2 | 185.224.138.61 | 200 OK | 1.9 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/css/trp-floater-language-switcher.css?ver=2.6.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
Hash749a7a78f17ff069a943de30a380b58f 9c20973b5dd1fc78055bcee49ccbde66dec1a3f3 52f334bcd209c5244c383c40fa9fa48a25c7def3dd1300e25140b6e572c453e2
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/translatepress-multilingual/assets/css/trp-floater-language-switcher.css?ver=2.6.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 04:05:09 GMT
etag: "5714-650a6f75-19f5cd2ab08bf3de;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1886
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/css/trp-language-switcher.css?ver=2.6.2 | 185.224.138.61 | 200 OK | 769 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/css/trp-language-switcher.css?ver=2.6.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
Hashf9d429183da3884029ca2bdf7dac6e59 7267a642d1e5b99e50049fde5ae16a92197adce1 925f2ffb7b49a93b36740141ddfbd7487d8ef3de84f2c9c8be4cec4e584b0c18
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/translatepress-multilingual/assets/css/trp-language-switcher.css?ver=2.6.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 04:05:09 GMT
etag: "b1b-650a6f75-196a2aed8b8f64bb;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 769
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.16 | 185.224.138.61 | 200 OK | 259 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.16 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
Hasha5bf64d5859ee94a3e8e93d592d6d2a0 049eb63b42dbb820b06870a430f523bf06880721 25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=1.6.16 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Mon, 11 Sep 2023 16:00:31 GMT
etag: "308-64ff399f-3b853e59fc59e9b2;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 259
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.23.0 | 185.224.138.61 | 200 OK | 3.7 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.23.0 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (19487) Hash3683d21c678ef9e264a1cb0fa2007285 180b55f2045971d357af3183c4126432f0c383f9 941b1493157dfb7316bcb3c7357a94e9ba173607d80559408620f4ab4c39c88d
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.23.0 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "4c4d-650b176b-4efaac8c5798bd93;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3660
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 | 185.224.138.61 | 200 OK | 2.2 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (12876), with no line terminators Hashbcad7781b3e74db2565b8424c45232cd 41b0d94434ef667897c06e1184b703064ffceda1 d622534d53d3ac1095af275f0b30274fcd835785577df2dde6d9398e6f7a2c8f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/swiper/css/swiper.min.css?ver=5.3.6 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "324c-650b176b-ce071fa1c7dd1360;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2172
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/uploads/elementor/css/post-840.css?ver=1693152260 | 185.224.138.61 | 200 OK | 338 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/uploads/elementor/css/post-840.css?ver=1693152260 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (1167), with no line terminators Hash19b956b4da25fe8cff9f9e479789e312 4fab762e7bf2e01056d5068313525d63e5370099 abd0d04e8b1fb78770f9ddd390e02ea42f8f92eca40ebe52c28c93a0c2077cd7
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-840.css?ver=1693152260 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Sun, 27 Aug 2023 16:04:20 GMT
etag: "48f-64eb7404-5758819066fe0ab8;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 338
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.16.4 | 185.224.138.61 | 200 OK | 3.9 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.16.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (26516) Hashc55205bce667f5d812354fd1353e7389 f22de0af271eba636a022c873c94fbcd81b4c89a c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=3.16.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "684e-650b176b-594f8946a9021582;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3941
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/uploads/elementor/css/post-285.css?ver=1693152260 | 185.224.138.61 | 200 OK | 1.2 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/uploads/elementor/css/post-285.css?ver=1693152260 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (13730), with no line terminators Hash8ef6841d01003b305ef98920c7f3fb06 433b6b312e33688cc58dc508a3b0b9ecfb71cfb0 55b2a5886e1117fbd582ec57d0dbdad2ce082a3a0cb448943862dc171d29af61
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/elementor/css/post-285.css?ver=1693152260 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Sun, 27 Aug 2023 16:04:20 GMT
etag: "35a2-64eb7404-8bb456565f1c5c60;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1159
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| www.googletagmanager.com/gtag/js?id=G-5QFX8BT826 | 142.250.74.72 | 200 OK | 86 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-5QFX8BT826 IP142.250.74.72:443
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18 ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File typeASCII text, with very long lines (3034) Hash7dddbd356ef8f21ad129febf7fef7347 c11f4db4f7e2409a60ca7fd73d9f071988975b0b da4994e2093a0ef898c66f0a6a5ec7bc1e2a7ec3d4768a42870f213ebbf2b7d2
GET /gtag/js?id=G-5QFX8BT826 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 02 Oct 2023 03:52:06 GMT
expires: Mon, 02 Oct 2023 03:52:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85839
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashe15afd40c0bf45a8797a653379ede5a8 498a5006d5a64b96d5a680d4e1be7a3d171b9d64 afb020f652e224d02abd51e9500681d951a77854ee18895576190af4bd1c7d38
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash46a98adcba0a067591be1fb36b779473 8303da516b26b1d75b6b9798730c6311245c4122 91e198fc434e5db4b6375002c0ab751f38e75e02e595a6a6024c1b1226151d5e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 | 185.224.138.61 | 200 OK | 12 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (57726) Hasheeb705d0bdccfd645d3bbd46dd1fbab3 066def290f42ed8c00860e573cc880bd46e9ced4 d01a2ba2805c78957e15a2958135de0f3cb88e95159dd0f6c0a032bd76b1b0e9
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "e238-650b176b-1091661a70893229;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 12071
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.9.2 | 185.224.138.61 | 200 OK | 2.8 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.9.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (30299), with no line terminators Hash317fbc87772718eb181ec7feba35e148 e08708d82fba6bdb5d2a6826cc5099662f7daab1 12c3f7bc60c99d1b6b634d6cd16fbb0e26ae75ddda15d7a6e5106cd5dad83f14
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.9.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Sun, 27 Aug 2023 16:01:19 GMT
etag: "765b-64eb734f-8aa7cb2a4871d582;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2822
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 | 185.224.138.61 | 200 OK | 284 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (489) Hash144e43c3b3d8ea5b278c062c202c92f2 3c037057a419245849747b4762d09d88cab66fc1 9cd63b8cea25045c14623c538d26752518a58c0c682795ce6ad3078976c65a37
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "2a3-650b176b-5814f32df722b2c3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 284
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 | 185.224.138.61 | 200 OK | 286 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (483) Hash9eb2d3c87feb6bb2ffa63b70532b1477 38f226335a05ab0e30497bc7419eb5e243a9e26c 37bab6cd583982e8eff58501a99d7c5c4d63664c1ca34f9e3b7cf526c5b73ae2
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "29d-650b176b-203fc388daf8b9c4;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 286
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.9.2 | 185.224.138.61 | 200 OK | 12 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.9.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash9323fd320e12c4d0d865a254138147d4 93218fbf674488be2feccebf36055c6fc1d8a1ee 49ebaf0bfad5aaf0c66de0bb84a2c7d1e32f33add8d6cb75897ae56cb07bcda9
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.9.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Sun, 27 Aug 2023 16:01:19 GMT
etag: "1e7a5-64eb734f-f41e8c6fac5e928d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11664
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.9.2 | 185.224.138.61 | 200 OK | 46 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.9.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hashe532822c165fac57219aaf26698aa4f7 08ca385d552db8b8afdde2fee6cbdf966f9c27ec ebd4a78569ef1fab71b07e0f3e449819623ae220f0080fb6ec59fb66f2f65489
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.9.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Sun, 27 Aug 2023 16:01:19 GMT
etag: "6cbf5-64eb734f-cbfb5506eadc0609;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 45659
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0 | 185.224.138.61 | 200 OK | 30 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (65447) Hashff04dd1ef5c67998d8652330c0441689 5e6ff5bd5240181a8bdea983837f39ac231dac4d 5c93f77799d122fb5255ee24da285f9f228cc118cba11e6ceb2b6bda8cdf4164
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 13 Sep 2023 07:24:47 GMT
etag: "155ba-650163bf-8f9cebda1e5cf2f3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 29502
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 185.224.138.61 | 200 OK | 4.7 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (13479) Hash9ffeb32e2d9efbf8f70caabded242267 3ad0c10e501ac2a9bfa18f9cd7e700219b378738 5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 13 Sep 2023 07:24:47 GMT
etag: "3509-650163bf-a1303e71581ae0ce;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4671
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.19 | 185.224.138.61 | 200 OK | 3.0 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.19 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (1392) Hash6339ec10a9afe65744730af482be76ac e1a99d02176008b569e15619442d1279a455265e bc7269d642327a2174736fc2b0231d1626e6fff1ca2f57e19c59835e73febe85
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/google-analytics-for-wordpress/assets/js/frontend-gtag.min.js?ver=8.19 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 23 Aug 2023 16:06:19 GMT
etag: "2d5d-64e62e7b-249857f2b55591b7;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3001
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.1.4 | 185.224.138.61 | 200 OK | 7.1 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.1.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
Hashdffa195b546cf1dfd52f2206955eb892 a3d48e8f126eb96d12191d76ed71ad2bc8651d59 6c52384c7b0641dd1ead85d079c22d39bcc6dc5f2537afb1e6396bb619771a3f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/cookie-law-info/legacy/public/js/cookie-law-info-public.js?ver=3.1.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Tue, 12 Sep 2023 12:45:16 GMT
etag: "8583-65005d5c-3b550f88ec0c6282;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7094
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.16.4 | 185.224.138.61 | 200 OK | 4.0 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.16.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (14869) Hash7a5dea0a705cc2f4cd87dbaaa6666bc6 678bc6f750f13adb29bbc158eb0d9cd813b736fa 97cf1307c16a437b77b5f7f5c9bc0b985d0745a14be5a279019aca5a3432e264
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=3.16.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "3acf-650b176b-c1a3636d3fd152eb;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4002
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.1.4 | 185.224.138.61 | 200 OK | 1.6 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.1.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (401) Hash26b4f0c3c1bcf76291fa4952fb7f04fb e5f3d41d8dbe3c4a2b36cf9cb4722496e7d6797e 2e2f2336b5e6698b628afc75fa9a24c67b73d5872c1d4af99ca436064f636ee0
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/cookie-law-info/legacy/public/css/cookie-law-info-table.css?ver=3.1.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: text/css
last-modified: Tue, 12 Sep 2023 12:45:16 GMT
etag: "17e1-65005d5c-1d66f5dbd0fe1224;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 1604
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.9.2 | 185.224.138.61 | 200 OK | 40 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.9.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with no line terminators Hash94d041d462db321cdb888066586f2068 717d2f9da7fb9f9e2bf2058a8177a0344f8a8647 b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.9.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Sun, 27 Aug 2023 16:01:19 GMT
etag: "28-64eb734f-14660ce1aa59acb9;;;"
accept-ranges: bytes
content-length: 40
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.16.4 | 185.224.138.61 | 200 OK | 2.1 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.16.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (4957) Hash8405db95cdcd6a0739b93ff897cb3587 9745be0467bc1ffa5f25a0986422cb1a1367ce40 ff7dc3fe6d7b901d715ef747c92d3ad3727883dad6e3ac0e6fbc2eab73991b58
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.16.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "1385-650b176b-1fceea412187e625;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2065
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 185.224.138.61 | 200 OK | 2.8 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (12198), with no line terminators Hash3819c3569da71daec283a75483735f7e ecd40a5cc6f0b76200c454ca880210dc301cfab8 214674cc77aba35ab3567b88e2739fd08e8e96c61d279559ad61874069683ea0
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "2fa6-650b176b-4e2d538879b40807;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 2838
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.16.4 | 185.224.138.61 | 200 OK | 16 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.16.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeUnicode text, UTF-8 text, with very long lines (58819) Hash8197b3f397d3c28c3bf7d3482c51443d 47ca9c52f47af2b7145fb7786789829096e591c3 54bf58f6b534a750c255cd1d3f0d394e64c614c7df443ef5308722b20ae0c778
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.16.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 20 Sep 2023 16:01:46 GMT
etag: "e5ec-650b176a-7a39dc2c2c887ce7;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 16142
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 185.224.138.61 | 200 OK | 6.8 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeUnicode text, UTF-8 text, with very long lines (8189) Hashc4e68a0f3463c0bd3c39eab38815e881 0ce58644e9f3c5063a11453ff287c5ec096465a7 ca7dce2391845e8aec7da135f33fabd10f74eed28a532ac66fd01f761fcfb42f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 13 Sep 2023 07:24:47 GMT
etag: "53be-650163bf-7f152ab5cbdd91f8;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 6774
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.16.4 | 185.224.138.61 | 200 OK | 12 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.16.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (40396) Hasha17769ab512eb35479a698d4725a574b 4899552a6a21c52399b049e6a42da168c1ca8633 c6fe813db64c5ccae7d4c89067546910910b2316862218ce553a19cf23dae7e7
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.16.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 20 Sep 2023 16:01:46 GMT
etag: "9df4-650b176a-8aa4d5480160e4ba;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 11835
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js?ver=2.9.2 | 185.224.138.61 | 200 OK | 393 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js?ver=2.9.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (681), with no line terminators Hashf5945db2f3337fd9f1cbef5b07b2a493 8a11439d56af9fb27836bb5f2a30aeb35b93bb5a a8642bcd147ba3528345f5bd17f788cd524931e093255b2c1c8344677a1ab505
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js?ver=2.9.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Sun, 27 Aug 2023 16:01:19 GMT
etag: "2a9-64eb734f-77d46a81031e0cdb;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 393
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=2.9.2 | 185.224.138.61 | 200 OK | 5.0 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=2.9.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (18458), with no line terminators Hash0690a2cefe1d06fe211b57d2f5e530c1 eec3dc3057eed501d15d6e63f637d53d839be4a3 2c34c72649547631a667da33a6f1a5198c7005c5af2cf5ed2631db33150d1a58
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js?ver=2.9.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Sun, 27 Aug 2023 16:01:19 GMT
etag: "481a-64eb734f-f278ce4940f1b404;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 4990
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-includes/js/underscore.min.js?ver=1.13.4 | 185.224.138.61 | 200 OK | 7.2 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-includes/js/underscore.min.js?ver=1.13.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (18798) Hashf88d5720bb454ed5d204cbdb56901f6b f1952292fde4b15936e9aac16b2b9896684db95b 726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 13 Sep 2023 07:24:47 GMT
etag: "4991-650163bf-4c5466f637321d66;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 7150
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-includes/js/wp-util.min.js?ver=6.3.1 | 185.224.138.61 | 200 OK | 690 B |
URL GET HTTP/3donkeytourscroatia.com/wp-includes/js/wp-util.min.js?ver=6.3.1 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (1391) Hash19d386c9004e54941c1cc61d357efa5d 0a77594006c8d86fdcc0adbc2b9aecaef3869586 3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-includes/js/wp-util.min.js?ver=6.3.1 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 13 Sep 2023 07:24:47 GMT
etag: "592-650163bf-f6ba75f209e832cf;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 690
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.8.4 | 185.224.138.61 | 200 OK | 342 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.8.4 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (771), with no line terminators Hash2399ef783701f73c399589ae95298b0f 3e1f2a7ac9dcb2b50b1f1cf768441e46fd9f62ee 2dea57483641f8762937dfd9b09126a9b21c88bd3d7486186003e0bbb9043145
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/wpforms-lite/assets/js/integrations/elementor/frontend.min.js?ver=1.8.4 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Thu, 28 Sep 2023 16:05:06 GMT
etag: "303-6515a432-55bebe4db3e13778;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 342
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/js/trp-translate-dom-changes.js?ver=2.6.2 | 185.224.138.61 | 200 OK | 5.4 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/js/trp-translate-dom-changes.js?ver=2.6.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
Hash0a97e373c318180b7436dff7b387086c 54edf7ca6684b1f9b6cd9c474b7a6f8d8462a8b0 65afe6d18f961b81fdedc8009ed259ce07dba42a575e968fb65f63fdab7cbe03
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/translatepress-multilingual/assets/js/trp-translate-dom-changes.js?ver=2.6.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Wed, 20 Sep 2023 04:05:09 GMT
etag: "6806-650a6f75-8122df59479ec5e3;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 5443
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/themes/astra/assets/js/minified/style.min.js?ver=4.3.1 | 185.224.138.61 | 200 OK | 3.0 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/themes/astra/assets/js/minified/style.min.js?ver=4.3.1 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (11428), with no line terminators Hash92e8991a75b5cc1fff6de6b0e9a6713f 9c74a991a84e776a72a363830adff9e4bd7b0d62 aa9c277de05e89e36caa6cd139f4d2c870c9a51822f1ebe70a163802e48fdffe
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/astra/assets/js/minified/style.min.js?ver=4.3.1 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Mon, 04 Sep 2023 16:00:25 GMT
etag: "2ca4-64f5ff19-b24fa05c9f73b0fb;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 3004
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.9.2 | 185.224.138.61 | 200 OK | 40 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.9.2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (45047) Hash6c087aaba5bcb76bc96366600b854e20 6de8049f8f4e6c83300be31ffa9e54d652f10f1a 03ca8c38633872b885f1e54e729c4597da2f1c52d06f9a5289ddda7ca3a9930c
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.9.2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: application/x-javascript
last-modified: Sun, 27 Aug 2023 16:01:19 GMT
etag: "2194d-64eb734f-914098b34500633d;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 39981
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/uploads/2020/10/LOGO_OPG_LUCIC_mali-75x88.png | 185.224.138.61 | 200 OK | 3.8 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/uploads/2020/10/LOGO_OPG_LUCIC_mali-75x88.png IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typePNG image data, 75 x 88, 8-bit/color RGBA, non-interlaced\012- data Hash57fb66eede3d0d0a37664396d9c80e4e 4ee700563f10a2ee725e428dc8a57ebf4c523bf8 161f53137c934fd8d85adce79a707cbe29bba24999c89b27311c20bc267d6a85
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2020/10/LOGO_OPG_LUCIC_mali-75x88.png HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: image/png
last-modified: Fri, 12 Feb 2021 17:53:02 GMT
etag: "eae-6026c07e-49a45e52e5de6d0a;;;"
accept-ranges: bytes
content-length: 3758
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/images/flags/en_US.png | 185.224.138.61 | 200 OK | 502 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/images/flags/en_US.png IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typePNG image data, 18 x 12, 8-bit/color RGB, non-interlaced\012- data Hashab347ae5be9857bf2cd91fc8203ff20c 136ee4ffb05ee0c980c4beae0bc45abe8c103a2f 84554ad84b590aa4d161301d4abb95d5d3b7013f38bbb0c02ba0d506ce3c548e
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/translatepress-multilingual/assets/images/flags/en_US.png HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: image/png
last-modified: Wed, 20 Sep 2023 04:05:09 GMT
etag: "1f6-650a6f75-cc61b2f781c7f07f;;;"
accept-ranges: bytes
content-length: 502
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/images/flags/de_DE.png | 185.224.138.61 | 200 OK | 250 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/assets/images/flags/de_DE.png IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typePNG image data, 18 x 12, 8-bit/color RGB, non-interlaced\012- data Hash9106b58cd67a757d34013ad61e826fcb 5f01f848404a402ed52a377b718236d444d3205b fb8abf4975a70816d1ecb0e3dff7ed44ff73201795790a55b4abfb0d1b6d162f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/translatepress-multilingual/assets/images/flags/de_DE.png HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: image/png
last-modified: Wed, 20 Sep 2023 04:05:09 GMT
etag: "fa-650a6f75-9a6e0892b507e19e;;;"
accept-ranges: bytes
content-length: 250
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| www.googletagmanager.com/gtag/js?id=G-5QFX8BT826 | 142.250.74.72 | 200 OK | 86 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-5QFX8BT826 IP142.250.74.72:443
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18 ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File typeASCII text, with very long lines (3034) Hash34e32c6e8977a71b1deae894075a17e7 fab7dfd823093f84b8c61337f2d59f841144e1fb 65d1ea8da6b598003b2f3987589671e32b5843fd6e950e70bc50c3d27aa489ca
GET /gtag/js?id=G-5QFX8BT826 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 02 Oct 2023 03:52:06 GMT
expires: Mon, 02 Oct 2023 03:52:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85838
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| www.googletagmanager.com/gtag/js?id=G-5QFX8BT826&l=dataLayer&cx=c | 142.250.74.72 | 200 OK | 86 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-5QFX8BT826&l=dataLayer&cx=c IP142.250.74.72:443
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerGoogle Trust Services LLC Subject*.google-analytics.com Fingerprint00:ED:16:68:8D:DB:14:8B:43:01:81:CA:83:9A:AE:5B:24:AB:11:18 ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File typeASCII text, with very long lines (3034) Hash5c900d1d890a974bd83f1e7052313819 b99b9a5a8f37dbf61b1b9dfa5df5ac8e69324766 7d8f1ac0a629c8c1c8125e57dc408440fdb99e4502d13c5443a620606db810a1
GET /gtag/js?id=G-5QFX8BT826&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 02 Oct 2023 03:52:06 GMT
expires: Mon, 02 Oct 2023 03:52:06 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85922
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| donkeytourscroatia.com/wp-content/themes/astra/assets/fonts/astra.woff | 185.224.138.61 | 200 OK | 3.3 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/themes/astra/assets/fonts/astra.woff IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeWeb Open Font Format, TrueType, length 3304, version 1.0\012- data Hashbfe0ed8503c926d68f58ed0408dfe0d0 0346d02d96ff7d2a0278bc10f4dfdf365c80eac3 ec7ef7aa5fd1e019f1c26193e95e46d481d4983673936a9dda086705ada6e3d5
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/themes/astra/assets/fonts/astra.woff HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Cookie: _ga_EXJ05DBXNP=GS1.1.1696218726.1.0.1696218726.0.0.0; _ga=GA1.1.2130623569.1696218727
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/font-woff
last-modified: Mon, 04 Sep 2023 16:00:25 GMT
etag: "ce8-64f5ff19-60583acff47711b3;;;"
accept-ranges: bytes
content-length: 3304
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash545c3e123f300fb2b48301a5c4a40851 b63e30e69a8c4c03b8475ae638782fcfc6edc0b3 3204c9325b2e5994c3bf79310786fe970e89c35a214a843d2d399a55d97c270c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash545c3e123f300fb2b48301a5c4a40851 b63e30e69a8c4c03b8475ae638782fcfc6edc0b3 3204c9325b2e5994c3bf79310786fe970e89c35a214a843d2d399a55d97c270c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash545c3e123f300fb2b48301a5c4a40851 b63e30e69a8c4c03b8475ae638782fcfc6edc0b3 3204c9325b2e5994c3bf79310786fe970e89c35a214a843d2d399a55d97c270c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 7.7 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27 ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data Hasha09f2fccfee35b7247b08a1a266f0328 0da2d17e738f46d2a09e6fb7969da451719a9820 cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://donkeytourscroatia.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 30 Sep 2023 13:23:30 GMT
expires: Sun, 29 Sep 2024 13:23:30 GMT
cache-control: public, max-age=31536000
age: 138516
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 | 185.224.138.61 | 200 OK | 77 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 76764, version 331.-31261\012- data Hashf7307680c7fe85959f3ecf122493ea7d fce0da592a3e536d6d5df5b50cb513398d8c5161 43c072c16c9ee6d67acdfa6c6d6685ff1e74eb4237b7cc3c1348ab1c108b26af
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3
Cookie: _ga_EXJ05DBXNP=GS1.1.1696218726.1.0.1696218726.0.0.0; _ga=GA1.1.2130623569.1696218727
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: font/woff2
last-modified: Wed, 20 Sep 2023 16:01:47 GMT
etag: "12bdc-650b176b-dfa10d4085fae2ca;;;"
accept-ranges: bytes
content-length: 76764
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/uploads/2020/10/LOGO_OPG_LUCIC_mali.png | 185.224.138.61 | 200 OK | 5.1 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/uploads/2020/10/LOGO_OPG_LUCIC_mali.png IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typePNG image data, 100 x 117, 8-bit/color RGBA, non-interlaced\012- data Hash9aa48f45886b716772b40c2177eb74d4 327a7ee3474e4ec60a585c5a448e1d5db21a81c9 5e13d3ce65202eeca991d309f109c423c458c8b8e23048ae7f7ef5493f078fda
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2020/10/LOGO_OPG_LUCIC_mali.png HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Cookie: _ga_EXJ05DBXNP=GS1.1.1696218726.1.0.1696218726.0.0.0; _ga=GA1.1.2130623569.1696218727
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:06 GMT
content-type: image/png
last-modified: Thu, 15 Oct 2020 23:11:24 GMT
etag: "13cc-5f88d71c-f7d5bbb328a8570a;;;"
accept-ranges: bytes
content-length: 5068
date: Mon, 02 Oct 2023 03:52:06 GMT
server: LiteSpeed
platform: hostinger
|
|
| fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 | 216.58.207.227 | 200 OK | 7.9 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 IP216.58.207.227:443
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27 ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data Hash9212f6f9860f9fc6c69b02fedf6db8c3 ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b 7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://donkeytourscroatia.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 28 Sep 2023 15:18:26 GMT
expires: Fri, 27 Sep 2024 15:18:26 GMT
cache-control: public, max-age=31536000
age: 304421
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 | 216.58.207.227 | 200 OK | 8.0 kB |
URL GET HTTP/2fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 IP216.58.207.227:443
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint3D:35:56:30:C0:0F:0C:7F:20:BA:7D:A8:48:DB:24:1B:15:F5:48:27 ValidityMon, 04 Sep 2023 08:23:09 GMT - Mon, 27 Nov 2023 08:23:08 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 8000, version 1.0\012- data Hash72993dddf88a63e8f226656f7de88e57 179f97ec0275f09603a8db94d4380eb584d81cd5 f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149
GET /s/poppins/v20/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://donkeytourscroatia.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8000
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 29 Sep 2023 10:05:21 GMT
expires: Sat, 28 Sep 2024 10:05:21 GMT
cache-control: public, max-age=31536000
age: 236806
last-modified: Wed, 27 Apr 2022 16:59:07 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash545c3e123f300fb2b48301a5c4a40851 b63e30e69a8c4c03b8475ae638782fcfc6edc0b3 3204c9325b2e5994c3bf79310786fe970e89c35a214a843d2d399a55d97c270c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 02 Oct 2023 03:52:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| donkeytourscroatia.com/wp-content/uploads/2020/04/LOGO_happy-donkey-300x300.png | 185.224.138.61 | 200 OK | 9.3 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/uploads/2020/04/LOGO_happy-donkey-300x300.png IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typePNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data Hash111db2b96c62620d3276345cf0da647c 3c494e9b58274a4297977b0acf694ed66c2f72cd c39cbc375348f52cd74b6880ff0985d8423cb0f3af5be36cc9e147fb21cc2829
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2020/04/LOGO_happy-donkey-300x300.png HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Cookie: _ga_EXJ05DBXNP=GS1.1.1696218726.1.0.1696218726.0.0.0; _ga=GA1.1.2130623569.1696218727; _ga_5QFX8BT826=GS1.1.1696218727.1.1.1696218727.0.0.0; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:07 GMT
content-type: image/png
last-modified: Sun, 18 Oct 2020 22:01:52 GMT
etag: "2431-5f8cbb50-4d163ab3b884773;;;"
accept-ranges: bytes
content-length: 9265
date: Mon, 02 Oct 2023 03:52:07 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/uploads/2020/04/LOGO_happy-donkey-150x150.png | 185.224.138.61 | 200 OK | 4.6 kB |
URL GET HTTP/3donkeytourscroatia.com/wp-content/uploads/2020/04/LOGO_happy-donkey-150x150.png IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typePNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data Hash91971269448770b0d75b0bdb25277a91 465d0e36a8f4ac49b5634b5adbcea1de9f0e4515 9cd71f7a43a85bd272496a220b627f0e7a734c48d67216b482d907bda1b6cc06
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/uploads/2020/04/LOGO_happy-donkey-150x150.png HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Cookie: _ga_EXJ05DBXNP=GS1.1.1696218726.1.0.1696218726.0.0.0; _ga=GA1.1.2130623569.1696218727; _ga_5QFX8BT826=GS1.1.1696218727.1.1.1696218727.0.0.0; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:07 GMT
content-type: image/png
last-modified: Sun, 18 Oct 2020 22:01:52 GMT
etag: "11ed-5f8cbb50-7269676a2ef941a8;;;"
accept-ranges: bytes
content-length: 4589
date: Mon, 02 Oct 2023 03:52:07 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/includes/trp-ajax.php | 185.224.138.61 | 200 OK | 6 B |
URL POST HTTP/3donkeytourscroatia.com/wp-content/plugins/translatepress-multilingual/includes/trp-ajax.php IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeJSON data\012- , ASCII text, with no line terminators Hashd751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
POST /wp-content/plugins/translatepress-multilingual/includes/trp-ajax.php HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 1030
Origin: https://donkeytourscroatia.com
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Cookie: _ga_EXJ05DBXNP=GS1.1.1696218726.1.0.1696218726.0.0.0; _ga=GA1.1.2130623569.1696218727; _ga_5QFX8BT826=GS1.1.1696218727.1.1.1696218727.0.0.0; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
content-length: 6
content-encoding: br
vary: Accept-Encoding
date: Mon, 02 Oct 2023 03:52:07 GMT
server: LiteSpeed
platform: hostinger
|
|
| donkeytourscroatia.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js | 185.224.138.61 | 200 OK | 600 B |
URL GET HTTP/3donkeytourscroatia.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js IP185.224.138.61:443 ASN#47583 Hostinger International Limited
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerLet's Encrypt Subjectdonkeytourscroatia.com FingerprintA6:B2:BC:CA:E0:8C:5C:55:3A:AE:6B:65:87:FF:10:01:9F:9C:98:DF ValidityMon, 14 Aug 2023 02:52:21 GMT - Sun, 12 Nov 2023 02:52:20 GMT
File typeASCII text, with very long lines (1320) Hashc1e1216eea99ba07ed0f603ee552b8c0 fe3e1c313fbb9f49b88796a41f1ec0b81d2dce76 46ade2015c8f9b9cabbf67dfde5da6664f4690725cd94ee6215eeacfe9b19b3f
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1
Host: donkeytourscroatia.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/en/connect/
Cookie: _ga_EXJ05DBXNP=GS1.1.1696218726.1.0.1696218726.0.0.0; _ga=GA1.1.2130623569.1696218727; _ga_5QFX8BT826=GS1.1.1696218727.1.1.1696218727.0.0.0; cookielawinfo-checkbox-necessary=yes; cookielawinfo-checkbox-functional=no; cookielawinfo-checkbox-performance=no; cookielawinfo-checkbox-analytics=no; cookielawinfo-checkbox-advertisement=no; cookielawinfo-checkbox-others=no
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cache-control: public, max-age=604800
expires: Mon, 09 Oct 2023 03:52:07 GMT
content-type: application/x-javascript
last-modified: Wed, 20 Sep 2023 16:01:46 GMT
etag: "550-650b176a-1412c9527ad8a2a9;br"
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 600
date: Mon, 02 Oct 2023 03:52:07 GMT
server: LiteSpeed
platform: hostinger
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.3.1 | 142.250.74.106 | 200 OK | 46 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.3.1 IP142.250.74.106:443
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49 ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
Hash02a6a6e7556f157b213bca137ed5963c fd83a7174ad3c62ac0debbc7dfdd9ff59b136dc0 e52e193c7684009dc684b48156d4420c39458d9a2eb2f6dd462a3023f8ec4859
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=6.3.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 02 Oct 2023 03:52:06 GMT
date: Mon, 02 Oct 2023 03:52:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Poppins%3A400%2C600%2C500&display=fallback&ver=4.3.1 | 142.250.74.106 | 200 OK | 3.4 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Poppins%3A400%2C600%2C500&display=fallback&ver=4.3.1 IP142.250.74.106:443
Requested byhttps://donkeytourscroatia.com/en/connect/ CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com FingerprintBE:40:3A:A6:DE:CC:A7:8B:75:43:68:F2:F9:56:63:71:49:61:06:49 ValidityMon, 04 Sep 2023 08:23:18 GMT - Mon, 27 Nov 2023 08:23:17 GMT
File typeASCII text, with very long lines (3468), with no line terminators Hashebf06507c583dc48e34d1cffa65ba62b 37b688e0e43ff2fdbf3309fcb183a176cc34f0e2 df9c50bd6d5ed23b4854f2ad610e8e5e2ba8da75ee5b518f60bf95dec2d39e1e
GET /css?family=Poppins%3A400%2C600%2C500&display=fallback&ver=4.3.1 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://donkeytourscroatia.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 02 Oct 2023 03:52:06 GMT
date: Mon, 02 Oct 2023 03:52:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|