| osigurajimovinu.com/ |  185.65.123.230 | 301 Moved Permanently | 162 B |
IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 26 Dec 2022 08:38:07 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://osigurajimovinu.com/
|
|
| r3.o.lencr.org/ |  23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash96defe1601ba891731eee83f0830649d ba500679fd337488c3f60543561740ff0dfc1898 d2a320a9feb1a874af3da921db2a8619513968724ef8eb0715c010291c4cf8d9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D2A320A9FEB1A874AF3DA921DB2A8619513968724EF8EB0715C010291C4CF8D9"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3686
Expires: Mon, 26 Dec 2022 09:39:33 GMT
Date: Mon, 26 Dec 2022 08:38:07 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash67f508aae634a023b587a7129a5b8039 2ff7e1d29b497147941d0abf581411cbd2722d7b eee5fda5214bd4f75b0934bb1f14429fe01251628026fd0f18f117b38848601c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EEE5FDA5214BD4F75B0934BB1F14429FE01251628026FD0F18F117B38848601C"
Last-Modified: Sun, 25 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3969
Expires: Mon, 26 Dec 2022 09:44:16 GMT
Date: Mon, 26 Dec 2022 08:38:07 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ |  35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hashdcd75ca6daca51c5e39d431468511793 07f76d3bf23d65c9110d810fa71a994e39e085d3 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 26 Dec 2022 07:46:29 GMT
content-type: application/json
age: 3098
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash6b1d63d9d906daa309dc263b4991bbe9 04680ddd86781d46dfe6a9671571b3ad1f3758f3 46fff7230b88de4cd81dfb0feb783d2dec27e49041f9257d2fb891030781bf6c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46FFF7230B88DE4CD81DFB0FEB783D2DEC27E49041F9257D2FB891030781BF6C"
Last-Modified: Fri, 23 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13639
Expires: Mon, 26 Dec 2022 12:25:26 GMT
Date: Mon, 26 Dec 2022 08:38:07 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashb1fcd419a4245617397846e8d17233f6 2a037ce244587640b27ead9a0ec2af4f862d91b2 e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: E4TyO2acqtHIHhJ99uPd7v6M2yo3Qc27A2S81syXKME9aJ4S/YRvqioDjA4P2qhpRTdqDt8zN1k=
x-amz-request-id: RRKP0AGS1ZA44TPV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 26 Dec 2022 07:57:21 GMT
age: 2446
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:08 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash4eafe2cee9368bf511b433941e44ca98 aea9088c348037c0cdd7818a1cae61eb3658baa4 c423e718a4692ae2e67c50492b49307b5b8e92a1e9fe48fa290417bfa3328330
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C423E718A4692AE2E67C50492B49307B5B8E92A1E9FE48FA290417BFA3328330"
Last-Modified: Mon, 26 Dec 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21553
Expires: Mon, 26 Dec 2022 14:37:21 GMT
Date: Mon, 26 Dec 2022 08:38:08 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 26 Dec 2022 08:08:06 GMT
age: 1802
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hashbdc6ddd27a64c85bd15f78b39a79874c 965b8f1b763483b4b4dfe35526d27393d1fdf05c d2f4dee4d920109e0751634731bea278c9ea9e6c0120ac07969eba74ddbfe615
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4487
Cache-Control: max-age=92607
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 08:38:08 GMT
Etag: "63a812a8-1d7"
Expires: Tue, 27 Dec 2022 10:21:35 GMT
Last-Modified: Sun, 25 Dec 2022 09:06:48 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
|
|
| push.services.mozilla.com/ | 52.43.253.52 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP52.43.253.52:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: y5jlx0bV/aNV5rJ/NcJoEQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: SBlUr8ltZobwPUCOheomTHvqaSo=
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash68c4bcc8cffb2724729d50fc0f6e34ad 18c582032191ff03c2c6266341138b84853b3090 895c9bd5cf3d01f6e4870ec4f41b538b3f2568827ad37c626774a0aa8e5b5fd7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2690
Cache-Control: max-age=131504
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 08:38:09 GMT
Etag: "63a8b19f-117"
Expires: Tue, 27 Dec 2022 21:09:53 GMT
Last-Modified: Sun, 25 Dec 2022 20:25:03 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash68c4bcc8cffb2724729d50fc0f6e34ad 18c582032191ff03c2c6266341138b84853b3090 895c9bd5cf3d01f6e4870ec4f41b538b3f2568827ad37c626774a0aa8e5b5fd7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2690
Cache-Control: max-age=131504
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 08:38:09 GMT
Etag: "63a8b19f-117"
Expires: Tue, 27 Dec 2022 21:09:53 GMT
Last-Modified: Sun, 25 Dec 2022 20:25:03 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 279
|
|
| cdnjs.cloudflare.com/ajax/libs/gsap/1.20.3/TweenMax.min.js |  104.17.24.14 | 200 OK | 33 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/gsap/1.20.3/TweenMax.min.js IP104.17.24.14:0
File typeASCII text, with very long lines (32033) Hash15d5307f8617a5a0de3a7ef95be21eb8 4253e0905703862e9d8cd7c4f7a9a5731ebea926 5f05222f096fe50538ef759ce7804f09d735f1c2c85a6d1a818597838408d480
GET /ajax/libs/gsap/1.20.3/TweenMax.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 33383
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e71-1c0ed"
last-modified: Mon, 04 May 2020 16:10:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 3855615
expires: Sat, 16 Dec 2023 08:38:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dZrTslsP%2FgE4Rn6XIZuYAS%2FXSS9rqndjKOLYqtID9XwyO9q8UCAUdrzqnDwuHXQXOegpXiZzhAj7QPWFTwPeDJRtLZ%2BdM7MJVcMzDsVTBGpeC6Vkc%2FeB1rr3igXI0Rf9cEW2sz3O"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77f87fa33efd0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.7/plugins/animation.gsap.js | 104.17.24.14 | 200 OK | 3.6 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.7/plugins/animation.gsap.js IP104.17.24.14:0
File typeASCII text, with CRLF line terminators Hashf1a3b9a059e97571a3a68e94ceb270e6 a8cea06c027372b113092f60d434456e7808ad0b 3d62e41acd361f0771eaafc965ceeb7f761e71f270e4713053b01ebdc153959c
GET /ajax/libs/ScrollMagic/2.0.7/plugins/animation.gsap.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 3592
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf2-2fdc"
last-modified: Mon, 04 May 2020 16:04:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 22824091
expires: Sat, 16 Dec 2023 08:38:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ikwMGHosRrN5gf5iZbXEI9gNY2ZG4i%2FnM63IDaaFe8ybMnl1Et4P6xP6B%2F5hew1Rfzqy1PN9cgn04EVb1ghLkrflCr5evyT8CVoWu5a1EunBumJyTpVgdhlWmOpNrov5nbJE%2FgMt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77f87fa33eff0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.digicert.com/ | 93.184.220.29 | 200 OK | 279 B |
IP93.184.220.29:0
Hash68c4bcc8cffb2724729d50fc0f6e34ad 18c582032191ff03c2c6266341138b84853b3090 895c9bd5cf3d01f6e4870ec4f41b538b3f2568827ad37c626774a0aa8e5b5fd7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4184
Cache-Control: max-age=132998
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 08:38:09 GMT
Etag: "63a8b19f-117"
Expires: Tue, 27 Dec 2022 21:34:47 GMT
Last-Modified: Sun, 25 Dec 2022 20:25:03 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 279
|
|
| cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/easing/EasePack.min.js | 104.17.24.14 | 200 OK | 1.8 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/easing/EasePack.min.js IP104.17.24.14:0
File typeASCII text, with very long lines (5123) Hash3305cb649068418a02b04e41a4f70fa7 f9924810a40710bf5216b156d6865d4299548639 5e9d526fa56519382605909c014ff7c7d4cdb838c65bdf3c2957cd53c2b27560
GET /ajax/libs/gsap/1.20.2/easing/EasePack.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 1831
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e71-1584"
last-modified: Mon, 04 May 2020 16:10:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 17490611
expires: Sat, 16 Dec 2023 08:38:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j9cVY%2Fezm39efvUyzjbzGZmsq1n%2F3fGfmdIaTQEyTof1l8hIxzOreeOCqY9Wzg9F2WFsu2GH%2FzK0Bp9PUmxik2jfe%2B70mHg41mVZHkPM7ZXJBP47mu%2FLGzcg9oxFTZB5i1bnMA49"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77f87fa34f070b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/plugins/CSSPlugin.min.js | 104.17.24.14 | 200 OK | 15 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/plugins/CSSPlugin.min.js IP104.17.24.14:0
File typeASCII text, with very long lines (32010) Hasheabb0cb17ce842f7e8d6611da6dd3633 1910870ed464fab2bbbfe01fd8ff29d2dc5f41ee 453ade299e88e9f827341ee19fe20428a7fe5d2b45ad7a8874ee2e909453d154
GET /ajax/libs/gsap/1.20.2/plugins/CSSPlugin.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 14731
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e71-a694"
last-modified: Mon, 04 May 2020 16:10:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 17931829
expires: Sat, 16 Dec 2023 08:38:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KtsmpV9dzzStnzNcDgbBNyV5jlXFd77YzBLJnhrydsfL98EaQRd5iGmJXafJgiqgCMt9VJ8AiVUacu3PFBDcmhlhDSFsEhA1IVaOEJ4fF1KBgOsbEMtwAo%2FkHQcNZf%2Bz9uTEClw%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77f87fa37f2f0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash508c2c991a10f5f048c213f732698d4c 5a43bb96597ada2c1a16fb35c6cd74529bb306c4 bdf5e18cacb564fe4be4448d268ecee27b7139b91109b6d0727f2b809c6b5f3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 08:38:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.7/ScrollMagic.js | 104.17.24.14 | 200 OK | 21 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/ScrollMagic/2.0.7/ScrollMagic.js IP104.17.24.14:0
File typeUnicode text, UTF-8 text, with very long lines (330), with CRLF line terminators Hash6730ffe9f2a50b8cf5baa8fb51cc6395 8ded98b80b39ccbe0bce6bc456141641bccb36b5 5243123b31596ab4df6458e2b9647cb9328df2024e5a984fa3898020a1f74bdb
GET /ajax/libs/ScrollMagic/2.0.7/ScrollMagic.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 21223
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03cf2-1a98a"
last-modified: Mon, 04 May 2020 16:04:02 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 9990216
expires: Sat, 16 Dec 2023 08:38:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S5vi2qzzQtmMf0419GYAe5CbuaQA2bae8sFUvtvsJrs1MWWF53qtaK9xtoxpjDntz5up7ED6zBzAlmIlvM%2B5q6L8R3gDak2tPLt4QvPdF0bTMrpIjpxUvfxlwHuuYHbxhDRN37ji"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77f87fa39f400b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/plugins/ScrollToPlugin.min.js | 104.17.24.14 | 200 OK | 1.4 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/plugins/ScrollToPlugin.min.js IP104.17.24.14:0
File typeASCII text, with very long lines (3070) Hash63fe15680ce33e83edc76a868ef7dab9 7867632ec1f0900920ae4614ef1cfecf386d754d 492181aee5f21c6757bb84e8dea1c919717035912e388ce10fd9e47436caa1c6
GET /ajax/libs/gsap/1.20.2/plugins/ScrollToPlugin.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 1351
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e71-d7e"
last-modified: Mon, 04 May 2020 16:10:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 15086462
expires: Sat, 16 Dec 2023 08:38:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nEfCthkYbBxZti%2Fg7i97ZvtgwCxXOuZ8SLJlE7dqbF4ghNVY30bjCbeuNjlA6J2NU4M8z6iYhieVcodoyNhEY5ORqZb0gP9%2FiibqtvWxmYHjZA0SpJQrJ4pojw2gzPTIQ%2B6JNCML"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77f87fa39f430b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/ui/1.10.4/themes/flick/jquery-ui.css | 69.16.175.42 | 200 OK | 6.0 kB |
URL HTTP/2code.jquery.com/ui/1.10.4/themes/flick/jquery-ui.css IP69.16.175.42:0
File typeASCII text, with very long lines (1356) Hashe28d702e2b72ef56134d6be4789a3f4c fe5a80795c59faca1392b29c8caaa5d19e4a5cc8 3ef494fedff73d1314a7b699d271f8da150009014c940da0e8a5a61831ead584
GET /ui/1.10.4/themes/flick/jquery-ui.css HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-encoding: gzip
content-length: 5981
content-type: text/css
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
accept-ranges: bytes
server: nginx
etag: W/"28feccc0-7d37"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-sp-metadata: HS256.CIHXpZ0GEoYBCiRiNWI4OGU4Zi0yOWIyLTQ1NjEtOTljYy1iNTJlYjZhNzJjODcQ+OiCoKvU+wIaBgjxuqWdBiIMOTEuOTAuNDIuMTU0KL1bMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaKwgBEiRkM2QzZDE5Zi0yN2Q1LTQ2NDUtODJkMS0wZWIxNzFkMmUyYjcY3S4iGAgCEhRjZHMyMjkuc2sxLmh3Y2RuLm5ldA==.o6ksql6gqTszU9Sa5irK2AKsNogMmhJF6tfnijpuswM=
x-hw: 1672043889.dop026.sk1.t,1672043889.cds215.sk1.hn,1672043889.cds229.sk1.c
X-Firefox-Spdy: h2
|
|
| cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/TimelineLite.min.js | 104.17.24.14 | 200 OK | 3.8 kB |
URL HTTP/2cdnjs.cloudflare.com/ajax/libs/gsap/1.20.2/TimelineLite.min.js IP104.17.24.14:0
File typeASCII text, with very long lines (12240) Hash451efe1acdc0efd500168f3a2919ba14 f971259e73d6cb4a198e012957dfd7d904af7a8a 63f006a71cf9c6333f265acfcb9012789ec91f96a756ec8031b6d4fe9e97a369
GET /ajax/libs/gsap/1.20.2/TimelineLite.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript; charset=utf-8
content-length: 3805
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e71-3150"
last-modified: Mon, 04 May 2020 16:10:25 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 370089
expires: Sat, 16 Dec 2023 08:38:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NLED7H%2F%2BDwKXpaqxFQ2tP9iAX%2FWSi%2F8DtKB7fkT8uxFXO%2B8Qf1kaiQhRZecUY3APpYVDWDLZBnW75JM%2FiO5XusPA%2FXrXiZIsk7gJOWnH9FoO6ts0Ssu6TpA6UUrwTd5nRa%2FlrhyT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 77f87fa3af490b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| code.jquery.com/ui/1.11.1/jquery-ui.js | 69.16.175.42 | 200 OK | 112 kB |
URL HTTP/2code.jquery.com/ui/1.11.1/jquery-ui.js IP69.16.175.42:0
File typeASCII text, with very long lines (547) Size112 kB (112090 bytes) Hash01da7f8c936df7d340a804543cd22ec9 d57b7c63db2e4139984ccc22665634a5b11e98d2 f35418ead0ecbf5e93cdbde73efc3be453566be70755b37d532ac36d4894cd62
GET /ui/1.11.1/jquery-ui.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-encoding: gzip
content-length: 112090
content-type: application/javascript; charset=utf-8
last-modified: Fri, 18 Oct 1991 12:00:00 GMT
accept-ranges: bytes
server: nginx
etag: W/"28feccc0-71633"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-sp-metadata: HS256.CIHXpZ0GEoYBCiQ5MzFlNTg2My0zNWY4LTQ0ZDgtOTJmMC01MzRkMDA0YTdkZWIQ+OiCoKvU+wIaBgjxuqWdBiIMOTEuOTAuNDIuMTU0KL1bMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaLAgBEiQ4YTNhZDMxNi0xNTBiLTRhODAtYmUxMS00OGMzNWQ2MTFlOWUY2usGIhgIAhIUY2RzMjE4LnNrMS5od2Nkbi5uZXQ=.awgjYmStZDDobi0DvCjcWD9R9Ykhyd5bxbYgjfFTIfI=
x-hw: 1672043889.dop026.sk1.t,1672043889.cds215.sk1.hn,1672043889.cds218.sk1.c
X-Firefox-Spdy: h2
|
|
| code.jquery.com/jquery-2.1.1.js | 69.16.175.42 | 200 OK | 73 kB |
URL HTTP/2code.jquery.com/jquery-2.1.1.js IP69.16.175.42:0
Hash114d4d418d604686178833c7c80640b3 41e5e17bba301ddf562a2402cf0284e158d3c947 205fa3ed22c4dbe27752e632b4476fdbfb53dab29584b7e5aa82963461c37b8b
GET /jquery-2.1.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Dec 2022 08:38:09 GMT
content-encoding: gzip
content-length: 72985
content-type: application/javascript; charset=utf-8
last-modified: Fri, 20 Aug 2021 17:47:53 GMT
accept-ranges: bytes
server: nginx
etag: W/"611feac9-3c637"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-sp-metadata: HS256.CIHXpZ0GEoYBCiRmMmRlMjc5OS1iMjg0LTRiMGEtODA2NS0wYjlkMWZmNjRhMDIQ+OiCoKvU+wIaBgjxuqWdBiIMOTEuOTAuNDIuMTU0KL1bMAM4BEIWVExTX0FFU18xMjhfR0NNX1NIQTI1NlogYzdkMmI0YzQ4NGE0MTNlMTkxZGU2YWNmZjJkYjIwMDkaLAgBEiQ2NmQzOTVlNS04MTgzLTQ2NDctYjk4MS03YTQ3ZGM2OTA1NzYYmboEIhgIAhIUY2RzMjE0LnNrMS5od2Nkbi5uZXQ=.guVN8IMqJjvWukH6J7Nudl4mIuJce7jHliATdDpDWuo=
x-hw: 1672043889.dop026.sk1.t,1672043889.cds215.sk1.hn,1672043889.cds214.sk1.c
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 472 B |
IP216.58.211.3:0
Hash508c2c991a10f5f048c213f732698d4c 5a43bb96597ada2c1a16fb35c6cd74529bb306c4 bdf5e18cacb564fe4be4448d268ecee27b7139b91109b6d0727f2b809c6b5f3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 08:38:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.9.2 | 185.65.123.230 | 200 OK | 2.9 kB |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.9.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeASCII text, with very long lines (10019) Hashc2ec370c1e19b7997efa6346f2ac7bfa 639c223d0bd6ace4cf796f6646103ec300c6e250 1186e4a9c23e071f61fe2ea9c2f2fa42e6ca215dc2e7f9a81bfb30fd955be4fd
GET /wp-content/plugins/elementor/assets/lib/animations/animations.min.css?ver=3.9.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-4824"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.1 | 185.65.123.230 | 200 OK | 4.3 kB |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.1 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeHTML document, ASCII text, with very long lines (12652), with no line terminators Hashb7f07a5e35fd31ca48ed534a64621967 3731c84971dc1e8bf4fe61bd4061256fd3bc2784 3953a9afd509b776eb56d8a598829fb0bf06af7b9dd42e5a057453e41c2e8f7b
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.1 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Sat, 17 Dec 2022 06:17:58 GMT
vary: Accept-Encoding
etag: W/"639d5f16-316c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hash5b2790419bb1f19fd29300d548278b98 64671f1c88a1271e9bcda28ac13a01e330a2a07e 1ce1ca2a9d6783fa668b57c8764e8c3a17fde26812161af8ce8096b3691b9279
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1CE1CA2A9D6783FA668B57C8764E8C3A17FDE26812161AF8CE8096B3691B9279"
Last-Modified: Sun, 25 Dec 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7616
Expires: Mon, 26 Dec 2022 10:45:06 GMT
Date: Mon, 26 Dec 2022 08:38:10 GMT
Connection: keep-alive
|
|
| osigurajimovinu.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.1 | 185.65.123.230 | 200 OK | 3.4 kB |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.1 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeASCII text, with very long lines (10565), with no line terminators Hash626fd3d40f6b66a1dbf5252b3495aad4 80626b56739606198fe108e4f5f3822879ff60d2 8f152e13be3e50f97e71e579c125370af4f1c321d21daf9da9930fc75b3c0c27
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.1 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Sat, 17 Dec 2022 06:17:58 GMT
vary: Accept-Encoding
etag: W/"639d5f16-2945"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ad65fd6-c10d-4340-8a7a-8718c40ff3c0.jpeg | 34.120.237.76 | 200 OK | 7.2 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ad65fd6-c10d-4340-8a7a-8718c40ff3c0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashda166227e68fd9dedd6194cb99d5aebc edc937adabde929c8152b85df3806decbb286612 d415f381c63d04072ae49fc4aa19e375cc7c1c6d73220d364ea7bccd3f7fa163
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ad65fd6-c10d-4340-8a7a-8718c40ff3c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7167
x-amzn-requestid: ac5db47f-af55-4679-b8e7-d9ca8667cd43
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: do61aFQ1oAMFT2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a6a4ef-0da25d9723ad2fb8740c54f2;Sampled=0
x-amzn-remapped-date: Sat, 24 Dec 2022 07:06:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yKfutR86Kd2M01clEmxxJZuW4SvrJxtsKwqJwQJTZVQWWC2nSjE-mA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Dec 2022 06:13:53 GMT
age: 8657
etag: "edc937adabde929c8152b85df3806decbb286612"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15ba8929-c657-48a6-a579-360324426927.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15ba8929-c657-48a6-a579-360324426927.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8403a671b2c4b3b2ce2f8a9eba9de2c0 5437391241a500b6b0d2118120e835d2673e7d39 1e52a144b08ff6efe2da52dfdfeccbc4cea9270536cf5e7a2a769bbff9cd7d2f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15ba8929-c657-48a6-a579-360324426927.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11249
x-amzn-requestid: 6fdd6489-ffea-400f-9199-a20789160ba8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dlFk6FvuoAMFYcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a51c85-6805b25c54c3390e5c39c6e1;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 03:12:05 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gfO9Ei1XEd8cvE7CBnK5AUz1wIr890fLc9vwcZje7I23ZEjJkFLUDg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Dec 2022 03:52:37 GMT
age: 17133
etag: "5437391241a500b6b0d2118120e835d2673e7d39"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb995026c-9c36-40df-864d-b3c2b7e5482b.jpeg | 34.120.237.76 | 200 OK | 9.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb995026c-9c36-40df-864d-b3c2b7e5482b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe2665a6ae98ace2eab671f9e8a9f0978 d1b0b2b7bf8c8bf2e9765e9103908aba36989727 ae9125caee2dc267c67bf4f31f2669e03f65c47a43f2d0ab83081eb043d23d85
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb995026c-9c36-40df-864d-b3c2b7e5482b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9932
x-amzn-requestid: 280fdeaa-a0e1-4306-9adb-52c0f28b4002
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duNZzGcjoAMF5wg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c2a4-73e3e4b34b67da2d2dbb8020;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:37:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: nR7WiQ1kUfI129AOECPfR181bNjexz6B7BEIYxDRiGNqfKCQPiBKOQ==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 21:58:57 GMT
age: 38353
etag: "d1b0b2b7bf8c8bf2e9765e9103908aba36989727"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7dbee83-176a-4fa9-a42c-2a2c9db4001b.jpeg | 34.120.237.76 | 200 OK | 11 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7dbee83-176a-4fa9-a42c-2a2c9db4001b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashb46e077944b0d53e361327e6d690f2ec c9f17cad706817aa66832633d1307a91c8c7d61e b00a16c34c95675a08bafb198f7cc4b374e88a9041a6bb8593a61cb08ef3c306
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7dbee83-176a-4fa9-a42c-2a2c9db4001b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10961
x-amzn-requestid: 4013aad4-805c-4abd-a748-9619aad6c134
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duNb5Ha0oAMFzfA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c2b2-5701d49371016fb7580ba6c8;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:37:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Axg_RTSiVQPB7tFIaN91OfTysuh7NTs0FH5w_vI0SsV3Fv_m3X1YyQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 22:08:59 GMT
age: 37751
etag: "c9f17cad706817aa66832633d1307a91c8c7d61e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 | 185.65.123.230 | 200 OK | 42 kB |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeASCII text, with very long lines (65280) Hash8e6fe17e3e09599a366d0dffd6d9c10c ea9fc900687039bf94e2e2616db7d886da660f34 9e024c30d5c0f09f6a3c8f4e1a14d49a855fef526d99569a7e4b2caa8882707b
GET /wp-content/plugins/elementor/assets/lib/swiper/swiper.min.js?ver=5.3.6 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-21f91"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff70fb5bc-19d9-433d-adc5-222fa8c0b134.jpeg | 34.120.237.76 | 200 OK | 9.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff70fb5bc-19d9-433d-adc5-222fa8c0b134.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe38d94b0be1b10ecac941b497f57c861 12911cd039f5c7b05013ebbc369aec5613134906 38a41df0d4f4405e8ecf6b379431bdb87eaed40e20481262b43d1fd127c010fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff70fb5bc-19d9-433d-adc5-222fa8c0b134.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9452
x-amzn-requestid: 41b87e86-25f2-4d3b-a4ac-ae9a933a75b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: duMupEMdIAMF7Gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a8c190-22b2693c043757fb5d58dda7;Sampled=0
x-amzn-remapped-date: Sun, 25 Dec 2022 21:33:04 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: StP3cRZB5uQq5vj2oEZZmxAsLlu-nsnDNjQBdeb_o6Rd3YsP7p2Qlg==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Dec 2022 22:01:52 GMT
etag: "12911cd039f5c7b05013ebbc369aec5613134906"
content-type: image/jpeg
age: 38178
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/Popuni-formu-za-ponudu.png | 185.65.123.230 | 200 OK | 16 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/Popuni-formu-za-ponudu.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 430 x 318, 8-bit/color RGBA, non-interlaced\012- data Hash56603eb333c9fd6bbc5cea32e293bfd8 835646620b38ae9c9a7a6cd00d8305710aa695be 0ff849076798c862096f3ca2a86bebe9898ce9cbfce8cc63fdaf719c50651414
GET /wp-content/uploads/2021/04/Popuni-formu-za-ponudu.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: image/png
content-length: 15832
last-modified: Wed, 28 Apr 2021 15:11:44 GMT
etag: "60897b30-3dd8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/Odaberi-zelis-li-ponudu-na-e-mail-ili-kucnu-adresu.png | 185.65.123.230 | 200 OK | 23 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/Odaberi-zelis-li-ponudu-na-e-mail-ili-kucnu-adresu.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 433 x 318, 8-bit/color RGBA, non-interlaced\012- data Hash8b8c4684d6a2d56fe35f26a1b3ee06c4 94ac647f76300ac8ca0f53a6a7e13de2d7458726 cd2b5d8d3c91428eda14110c9f2a22f7c597b4b221b8c09980775626a045adc9
GET /wp-content/uploads/2021/04/Odaberi-zelis-li-ponudu-na-e-mail-ili-kucnu-adresu.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: image/png
content-length: 22924
last-modified: Wed, 28 Apr 2021 15:11:45 GMT
etag: "60897b31-598c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/Ponuda-ti-stize-na-odabran-nacin.png | 185.65.123.230 | 200 OK | 20 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/Ponuda-ti-stize-na-odabran-nacin.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 422 x 323, 8-bit/color RGBA, non-interlaced\012- data Hash09462452d27c57bafcbb209aaaa110e9 4dd23d00ffa609de1e56da31537e8cdbf6090102 8ba2ce511865150673467b60bfe35286b8a47718dd02e8bba44be4c8651dcff5
GET /wp-content/uploads/2021/04/Ponuda-ti-stize-na-odabran-nacin.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: image/png
content-length: 19551
last-modified: Wed, 28 Apr 2021 15:11:46 GMT
etag: "60897b32-4c5f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/kradja.png | 185.65.123.230 | 200 OK | 262 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/kradja.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 1563 x 800, 8-bit/color RGBA, non-interlaced\012- data Size262 kB (261764 bytes) Hash4368cba46b84ca04ff1c0c4b54c4a9ed 213fa518e19c6b82d2afa35781f98d3cb641702d d4a6c8fd37c7e696ce86f06ca98b6af0c238206152041ee6bc71a405cb8c3bf6
GET /wp-content/uploads/2021/04/kradja.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: image/png
content-length: 261764
last-modified: Mon, 26 Apr 2021 11:35:29 GMT
etag: "6086a581-3fe84"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 | 185.65.123.230 | 200 OK | 7.2 kB |
URL HTTP/2osigurajimovinu.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeUnicode text, UTF-8 text, with very long lines (8189) Hashc0380a667dcd7092ec2498d6413c5995 7b59e4990ff0469124bcbd465754bcbc309084a9 455cce9c4a90228e604da1f2ffaedab5ae4332c00de4a45d349bec0fc47b9a3d
GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 07:11:31 GMT
vary: Accept-Encoding
etag: W/"63621823-53c0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hasha4887aa0a07d726c889d8dfbddc359c6 83658ae9db1abb14fb2b869bf451caa97ef58e4d 085603732bde2eb04b81ae99e116350593ad282d21e81bfd624c0f9543247cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 08:38:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| osigurajimovinu.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.5.2 | 185.65.123.230 | 200 OK | 3.4 kB |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.5.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeASCII text, with very long lines (8741), with no line terminators Hash2cdfe2b1af42482078898f84aeab5a88 f3217202713b481437cd7d0d83ea1b913554a4a4 373a820fe83d9ad8fbc5cd927d4dd2edb22aa9aafb488ffb7aeb591e5e71b468
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=5.5.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:10 GMT
content-type: application/javascript
last-modified: Fri, 23 Dec 2022 06:26:34 GMT
vary: Accept-Encoding
etag: W/"63a54a1a-2225"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 | 142.250.74.35 | 200 OK | 31 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data Hashac0d2859ea5f8fd6bcb3c305c08ec184 7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7 ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://osigurajimovinu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 07:08:09 GMT
expires: Sat, 23 Dec 2023 07:08:09 GMT
cache-control: public, max-age=31536000
age: 264601
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.2 | 185.65.123.230 | 200 OK | 78 kB |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeASCII text, with very long lines (40657) Hashd0313afb7d43156349304edc9b5f5720 964cd428c5b028e40bb468f220c4481568efe81f 0b37ba39f607685132f4f0001be0f9bed5212bfef81d2c8ba1498814b7d144cf
GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.9.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-9ef8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/oblaci.png | 185.65.123.230 | 200 OK | 6.4 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/oblaci.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 817 x 98, 8-bit/color RGBA, non-interlaced\012- data Hash96a7485efd90b86f849c33b8ec28b6de 51cccc6146c5f76db8be646c4956c172f8026f9f 8f7820bee0b7d7edcfa5fa192f46776b5b98a368e8d961f636adad4b8a18abbe
GET /wp-content/uploads/2021/04/oblaci.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/wp-content/uploads/elementor/css/post-3318.css?ver=1671693013
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:10 GMT
content-type: image/png
content-length: 6435
last-modified: Tue, 27 Apr 2021 20:34:50 GMT
etag: "6088756a-1923"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hasha4887aa0a07d726c889d8dfbddc359c6 83658ae9db1abb14fb2b869bf451caa97ef58e4d 085603732bde2eb04b81ae99e116350593ad282d21e81bfd624c0f9543247cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 08:38:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2 | 142.250.74.35 | 200 OK | 25 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 25036, version 1.0\012- data Hash9dd150fb7229e143e0f71ba1fe8c8f63 664abfc4941054600213dda51a3d6f0d05b3c312 cffe139366b3882387dddbd10d59e7d9aa29345793fdbf51ddde809ca6a0bec2
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://osigurajimovinu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 25036
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 26 Dec 2022 05:36:56 GMT
expires: Tue, 26 Dec 2023 05:36:56 GMT
cache-control: public, max-age=31536000
age: 10874
last-modified: Mon, 11 Jul 2022 18:59:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.9.2 | 185.65.123.230 | 200 OK | 9.2 kB |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.9.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeASCII text, with very long lines (4918) Hashb8794879f25991c013a57f7e0948ae31 db8c7a06edd63cf0c057c9e249430203c37ce9cd 627c154ce765508ddb7a52ba743fd33339690472de25ef699ad2e145db5e2d04
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.9.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-135d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| ocsp.pki.goog/gts1c3 | 216.58.211.3 | 200 OK | 471 B |
IP216.58.211.3:0
Hasha4887aa0a07d726c889d8dfbddc359c6 83658ae9db1abb14fb2b869bf451caa97ef58e4d 085603732bde2eb04b81ae99e116350593ad282d21e81bfd624c0f9543247cd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Dec 2022 08:38:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| fonts.gstatic.com/s/montserrat/v25/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 | 142.250.74.35 | 200 OK | 32 kB |
URL HTTP/2fonts.gstatic.com/s/montserrat/v25/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 IP142.250.74.35:0
File typeWeb Open Font Format (Version 2), TrueType, length 31760, version 1.0\012- data Hashfda4d0b623999af43148ba34c3b1ff73 ca5496af89720cc3e94e6279132f252b7cd471a6 33befdbbb24930584f5ac94ea3117adcd56518f20ab1619d05de83ffd1821d38
GET /s/montserrat/v25/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://osigurajimovinu.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31760
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Dec 2022 13:33:13 GMT
expires: Sat, 23 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
age: 241497
last-modified: Mon, 11 Jul 2022 18:54:16 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/poplava.png | 185.65.123.230 | 200 OK | 26 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/poplava.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeWeb Open Font Format (Version 2), TrueType, length 25904, version 1.0\012- data Hash49b88e088a56d09d7fb43452ff333207 86360c1c9ae6962248a23a857d66ca480f566f7e 9df5f24278928433df82af2998cfb1054b856839bb9ff9a9d845f954d8e10138
GET /wp-content/uploads/2021/04/poplava.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: image/png
content-length: 212738
last-modified: Mon, 26 Apr 2021 11:36:29 GMT
etag: "6086a5bd-33f02"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/house-heart.png | 185.65.123.230 | 200 OK | 1.7 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/house-heart.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 85 x 77, 8-bit/color RGBA, non-interlaced\012- data Hashb324463706bbf871de4f360f67656018 c00409b3bf7d6fe9906e33fb569b12f243ec448e 3e1fe2a583e8499ad53c38c2c35f5afcd12d540ca4a10330a3b3821c7bffd462
GET /wp-content/uploads/2021/04/house-heart.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:10 GMT
content-type: image/png
content-length: 1659
last-modified: Mon, 12 Apr 2021 22:57:03 GMT
etag: "6074d03f-67b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/cijela-obitelj.png | 185.65.123.230 | 200 OK | 203 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/cijela-obitelj.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 2504 x 1379, 8-bit/color RGBA, non-interlaced\012- data Size203 kB (202850 bytes) Hash6df0ce71854d1f2ea66ef755c84cabff 865545b510166c1afef806b0a561704cc8f71cce b0e4e9084f6ac56120853005d7a5d43aadf56cab7a48b46581524a8bd993d767
GET /wp-content/uploads/2021/04/cijela-obitelj.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/wp-content/uploads/elementor/css/post-3318.css?ver=1671693013
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:10 GMT
content-type: image/png
content-length: 202850
last-modified: Mon, 26 Apr 2021 10:47:30 GMT
etag: "60869a42-31862"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/woman.png | 185.65.123.230 | 200 OK | 346 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/woman.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 1600 x 2181, 8-bit/color RGBA, non-interlaced\012- data Size346 kB (345648 bytes) Hash149ae0054bf170d150ece98b86bcc9c7 c2749bf70a92cdd6c9a1c2765f08a0b14b37028e 5ddda18364a48c877b7ae536b516e4e652e2650ea5150566d1d9e414490ad3f6
GET /wp-content/uploads/2021/04/woman.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/wp-content/uploads/elementor/css/post-3318.css?ver=1671693013
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:10 GMT
content-type: image/png
content-length: 345648
last-modified: Mon, 26 Apr 2021 12:10:19 GMT
etag: "6086adab-54630"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/obitlje-doma.png | 185.65.123.230 | 200 OK | 200 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/obitlje-doma.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 2910 x 1309, 8-bit/color RGBA, non-interlaced\012- data Size200 kB (200362 bytes) Hashc6c688a6e654cd55338057543d0f81a7 ee44f156ebd5b145ebb9ca9dc73088f636edb078 75341adc869ad636b83c6a8a6608bb42e099a56b50de990fe3582b1cd7a241b0
GET /wp-content/uploads/2021/04/obitlje-doma.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/wp-content/uploads/elementor/css/post-3318.css?ver=1671693013
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:10 GMT
content-type: image/png
content-length: 200362
last-modified: Mon, 26 Apr 2021 10:47:27 GMT
etag: "60869a3f-30eaa"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/Ellipse.png | 185.65.123.230 | 200 OK | 320 B |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/Ellipse.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced\012- data Hash2be4661fed380d3065e61a5d26a49870 117d810e05c823cb2c0c865a8eed7f83d37e3b7c e2b3b51d8bc88e14875c1e26573763addc47558f583aa230df8a5ab18452ad86
GET /wp-content/uploads/2021/04/Ellipse.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:11 GMT
content-type: image/png
content-length: 320
x-accel-version: 0.01
last-modified: Mon, 12 Apr 2021 23:31:01 GMT
etag: "140-5bfcee816d736"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/dijete-668x1024.png | 185.65.123.230 | 200 OK | 23 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/dijete-668x1024.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 668 x 1024, 8-bit/color RGBA, non-interlaced\012- data Hashc2289a40130d082c35bb2fc68356b6a8 5885cac0a6c1d887bcebfd038991101618fa8e61 e6a89a35f20c3e014f7388d514e73b958baadd34ffbdd5a2e14af087d4a7b38b
GET /wp-content/uploads/2021/04/dijete-668x1024.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:11 GMT
content-type: image/png
content-length: 22619
last-modified: Fri, 23 Apr 2021 16:33:42 GMT
etag: "6082f6e6-585b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/04/obitelj-668x1024.png | 185.65.123.230 | 200 OK | 72 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/04/obitelj-668x1024.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 668 x 1024, 8-bit/color RGBA, non-interlaced\012- data Hash9ba3e92d9519227b25a0ac478c870de4 0df66569cdec6bf5ef3900577376dee1bc4accf4 a4ceeb25dd27bc26b5fb1d29cdad7152cdae64f116a1d72122a950cfd603ccfe
GET /wp-content/uploads/2021/04/obitelj-668x1024.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:11 GMT
content-type: image/png
content-length: 71929
last-modified: Fri, 23 Apr 2021 16:33:41 GMT
etag: "6082f6e5-118f9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.2 | 185.65.123.230 | 200 OK | 12 kB |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typeUnicode text, UTF-8 text, with very long lines (31482) Hashc29e5920889d6f64a02e9de7f2bc0ae5 25b87c3aeb6eeb4441474d0bfd2ed64782177a25 de33b76050a1acc06e84bb69ca507c2470cfa90a04469c377c792eeec4f42d48
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.9.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-7b22"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/2021/05/mf-poklon.png | 185.65.123.230 | 200 OK | 26 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/2021/05/mf-poklon.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 497 x 509, 8-bit/color RGBA, non-interlaced\012- data Hash0088dc7770f8b40157fe9b3880cc49ad 7f7440d5604f7a077c12137b46a048024069d689 35956ce91c4e93bf0dd06c55a35a0ce9107144fc122bb78237b0cf26c272e192
GET /wp-content/uploads/2021/05/mf-poklon.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:11 GMT
content-type: image/png
content-length: 26456
last-modified: Mon, 10 May 2021 11:57:42 GMT
etag: "60991fb6-6758"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/fbrfg/apple-touch-icon.png | 185.65.123.230 | 200 OK | 4.4 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/fbrfg/apple-touch-icon.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 76 x 76, 8-bit/color RGBA, non-interlaced\012- data Hash5f3ec3fe9aa9cd96b7b2cc8d5ca82ac5 a4f152aecfb81f101faf86051b82201f582fcbfc 6219d45ab7ef279c6e36d78991283ff033d75def779b2ebed237e70f8b458282
GET /wp-content/uploads/fbrfg/apple-touch-icon.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:11 GMT
content-type: image/png
content-length: 4400
last-modified: Thu, 13 May 2021 11:52:05 GMT
etag: "609d12e5-1130"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/fbrfg/favicon-16x16.png | 185.65.123.230 | 200 OK | 1.1 kB |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/fbrfg/favicon-16x16.png IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data Hash8e9cd14e1299e6bf0e398f0868be6bc1 efae3bcf27c7bdda29a83a17d52545d9746ca9a0 d7d79ac6b792e8a7b5755ed3de3056ea4d284a87da0b67c7b7c6e5207cddfd72
GET /wp-content/uploads/fbrfg/favicon-16x16.png HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:11 GMT
content-type: image/png
content-length: 1088
last-modified: Thu, 13 May 2021 11:52:05 GMT
etag: "609d12e5-440"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.2.4 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.2.4 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.2.4 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Wed, 14 Dec 2022 07:49:45 GMT
vary: Accept-Encoding
etag: W/"63998019-1b1c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/elementor/css/post-3318.css?ver=1671693013 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/elementor/css/post-3318.css?ver=1671693013 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/elementor/css/post-3318.css?ver=1671693013 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 07:10:13 GMT
vary: Accept-Encoding
etag: W/"63a402d5-944b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.1 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.1 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.1 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Sat, 17 Dec 2022 06:17:58 GMT
vary: Accept-Encoding
etag: W/"639d5f16-af3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-includes/js/wp-emoji-release.min.js?ver=b3ce1e890b3f9ba245ebec76e6018746 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-includes/js/wp-emoji-release.min.js?ver=b3ce1e890b3f9ba245ebec76e6018746 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/wp-emoji-release.min.js?ver=b3ce1e890b3f9ba245ebec76e6018746 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Wed, 25 May 2022 05:23:02 GMT
vary: Accept-Encoding
etag: W/"628dbd36-48b9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.min.css?ver=5.15.3 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-e238"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.9.2 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.9.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
GET /wp-content/plugins/elementor/assets/js/preloaded-modules.min.js?ver=3.9.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:10 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-a868"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-includes/css/dist/block-library/style.min.css?ver=b3ce1e890b3f9ba245ebec76e6018746 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-includes/css/dist/block-library/style.min.css?ver=b3ce1e890b3f9ba245ebec76e6018746 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
GET /wp-includes/css/dist/block-library/style.min.css?ver=b3ce1e890b3f9ba245ebec76e6018746 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Wed, 16 Nov 2022 06:23:37 GMT
vary: Accept-Encoding
etag: W/"637481e9-172a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-includes/css/classic-themes.min.css?ver=1 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-includes/css/classic-themes.min.css?ver=1 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Wed, 02 Nov 2022 07:11:31 GMT
etag: W/"d9-5ec778cd0b66f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
GET /wp-content/plugins/elementor/assets/lib/waypoints/waypoints.min.js?ver=4.0.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-2fa6"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/ | 185.65.123.230 | 200 OK | 0 B |
IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET / HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:08 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-ua-compatible: IE=edge
link: <https://osigurajimovinu.com/wp-json/>; rel="https://api.w.org/", <https://osigurajimovinu.com/wp-json/wp/v2/pages/3318>; rel="alternate"; type="application/json", <https://osigurajimovinu.com/>; rel=shortlink
x-powered-by: PHP/7.4.33, PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Wed, 18 Nov 2020 09:06:06 GMT
vary: Accept-Encoding
etag: W/"5fb4e3fe-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
GET /wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js?ver=4.9.0 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-29ba"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMontserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=b3ce1e890b3f9ba245ebec76e6018746 | 142.250.74.74 | 200 OK | 0 B |
URL HTTP/2fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMontserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=b3ce1e890b3f9ba245ebec76e6018746 IP142.250.74.74:0
GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMontserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic&display=auto&ver=b3ce1e890b3f9ba245ebec76e6018746 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Dec 2022 08:38:09 GMT
date: Mon, 26 Dec 2022 08:38:09 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.16.0 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-4b4f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.5.2 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.5.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=5.5.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Fri, 23 Dec 2022 06:26:34 GMT
vary: Accept-Encoding
etag: W/"63a54a1a-db5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.9.2 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.9.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/share-link/share-link.min.js?ver=3.9.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-a3c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.9.2 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.9.2 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.9.2 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:10 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
vary: Accept-Encoding
etag: W/"63a3f5f1-21a96"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.2.4 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.2.4 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/themes/generatepress/assets/css/main.min.css?ver=3.2.4 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Wed, 14 Dec 2022 07:49:45 GMT
vary: Accept-Encoding
etag: W/"63998019-4c6e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/elementor/css/post-16.css?ver=1671692071 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/elementor/css/post-16.css?ver=1671692071 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/elementor/css/post-16.css?ver=1671692071 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 06:54:31 GMT
vary: Accept-Encoding
etag: W/"63a3ff27-44c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: application/javascript
last-modified: Wed, 02 Nov 2022 07:11:31 GMT
vary: Accept-Encoding
etag: W/"63621823-15e54"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/uploads/elementor/css/global.css?ver=1671692071 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/uploads/elementor/css/global.css?ver=1671692071 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/uploads/elementor/css/global.css?ver=1671692071 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
last-modified: Thu, 22 Dec 2022 06:54:31 GMT
vary: Accept-Encoding
etag: W/"63a3ff27-27ac"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|
| osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 | 185.65.123.230 | 200 OK | 0 B |
URL HTTP/2osigurajimovinu.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 IP185.65.123.230:0 ASN#201719 Teleklik d.o.o.
| Analyzer | Verdict | Alert |
|---|
| fortinet | Malware | |
GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3 HTTP/1.1
Host: osigurajimovinu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://osigurajimovinu.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Dec 2022 08:38:09 GMT
content-type: text/css
vary: Accept-Encoding
x-accel-version: 0.01
last-modified: Thu, 22 Dec 2022 06:15:13 GMT
etag: W/"29d-5f064979239d2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
|
|