| i.postimg.cc/ZK9kQnXP/Busworld-Europe-Logo.png |  162.19.88.68 | 200 OK | 21 kB |
URL GET HTTP/2i.postimg.cc/ZK9kQnXP/Busworld-Europe-Logo.png IP162.19.88.68:443
CertificateIssuerLet's Encrypt Subjectpostimg.cc Fingerprint53:90:A2:AC:6E:D0:9C:56:06:D5:4F:6E:EE:C9:67:58:10:CF:9A:D6 ValidityMon, 22 Apr 2024 06:32:22 GMT - Sun, 21 Jul 2024 06:32:21 GMT
File typePNG image data, 330 x 129, 8-bit/color RGBA, non-interlaced Hash1f1a28c074d68bef13128ead3a34a4e3 60e47af289b10408ffc5ef70a6af8998970e8dda 7fa130c5989a3cedb8f4bbce60b89a1bc464d4ee1a95fcc97b5e3261b481a250
GET /ZK9kQnXP/Busworld-Europe-Logo.png HTTP/1.1
Host: i.postimg.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/png
content-length: 20747
last-modified: Thu, 21 Apr 2022 21:01:58 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2023/03/IMG-17f0eb7a6ae1a2f80d66743044ffb7ea-V.jpg |  78.46.204.80 | 200 OK | 26 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2023/03/IMG-17f0eb7a6ae1a2f80d66743044ffb7ea-V.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 728x90, components 3 Hashf5651c90746d8b4286fcafd4f1418933 aaffae4ca0cdfb285e7ccc91740859380c40ae22 f6f0127ef49915f3ed5095e3e939a86fad939c069d4ff754553f71a55fcdf5a3
GET /wp-content/uploads/2023/03/IMG-17f0eb7a6ae1a2f80d66743044ffb7ea-V.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/jpeg
content-length: 25526
last-modified: Thu, 02 Mar 2023 19:39:03 GMT
etag: "6400fb57-63b6"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/0-537x360.jpg | 78.46.204.80 | 200 OK | 51 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/0-537x360.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 537x360, components 3 Hashfad080fd8e3e38d58624705d405d6e65 83620241e99e9229660a0abf0a8e2bfa2d2cdcec 4c3570f464f240f07d7ddfd83967b12c1c3a91670d1c3a347e302855a013461f
GET /wp-content/uploads/2024/04/0-537x360.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/jpeg
content-length: 51403
last-modified: Fri, 26 Apr 2024 12:56:40 GMT
etag: "662ba488-c8cb"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/ebusco_30_12m_VBSG-2000x1552-1-238x178.jpg | 78.46.204.80 | 200 OK | 5.2 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/ebusco_30_12m_VBSG-2000x1552-1-238x178.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 238x178, components 3 Hash79416e273eaff7363cd1fac0cb19f11c 8dc284b213fe24cbe815874a8ed1d6d70a46dda3 ebe19eda97a72e112adf35858e0198606e670d27166878412756fdaf421ab213
GET /wp-content/uploads/2024/04/ebusco_30_12m_VBSG-2000x1552-1-238x178.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/jpeg
content-length: 5225
last-modified: Tue, 23 Apr 2024 12:38:11 GMT
etag: "6627abb3-1469"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/Foto4.ISUZU_.URPA6617ebf0e14a6-238x178.jpg | 78.46.204.80 | 200 OK | 16 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/Foto4.ISUZU_.URPA6617ebf0e14a6-238x178.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 238x178, components 3 Hashab306b3f8f9c6f1fcc8a68fac9f568c8 011226bf9b00cafc169842c55a34ca7e33781030 748b0c8d8c1b42150c48435779093961d6b6be60e9302beb3a843e92afbcc8e0
GET /wp-content/uploads/2024/04/Foto4.ISUZU_.URPA6617ebf0e14a6-238x178.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/jpeg
content-length: 15703
last-modified: Thu, 25 Apr 2024 13:44:22 GMT
etag: "662a5e36-3d57"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2019/10/bwl_zpsd1kr4bow.png | 78.46.204.80 | 200 OK | 29 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2019/10/bwl_zpsd1kr4bow.png IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typePNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced Hashf949b0098f0a280786ceb5ac16d38a3f 42a88b4e8f02f852986d3f27e43761f3ec835316 c1c4fe2894bf1be0d329d799c3398dd22e6d7338b4598c99bb8c8b0dd2d6732c
GET /wp-content/uploads/2019/10/bwl_zpsd1kr4bow.png HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/png
content-length: 28586
last-modified: Fri, 18 Oct 2019 18:52:12 GMT
etag: "5daa09dc-6faa"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2019/10/cbl_zpsapkfxxtz.png | 78.46.204.80 | 200 OK | 64 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2019/10/cbl_zpsapkfxxtz.png IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typePNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced Hash6251dc087a13edeb666327f53c02e9fe dfbd424e5570ab38f52da33599b7155ae48d047d 4eb6d80334c6e65f5353897fc6f9a229e0cafb81ed0a133ed5399f71978a7f86
GET /wp-content/uploads/2019/10/cbl_zpsapkfxxtz.png HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/png
content-length: 63737
last-modified: Fri, 18 Oct 2019 18:49:28 GMT
etag: "5daa0938-f8f9"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2019/10/btl_zps2bkssnx2.png | 78.46.204.80 | 200 OK | 54 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2019/10/btl_zps2bkssnx2.png IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typePNG image data, 300 x 80, 8-bit/color RGBA, non-interlaced Hash406e89895cdfc52157dc95f36e2fb678 5d8bf2c8321f2036879287ec1ee17f68ae79c642 4241337733aae9759da58000a34235cab391be09e0a831c4fb2e9d47996cae03
GET /wp-content/uploads/2019/10/btl_zps2bkssnx2.png HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/png
content-length: 53986
last-modified: Fri, 18 Oct 2019 18:49:26 GMT
etag: "5daa0936-d2e2"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2023/08/banner1.gif | 78.46.204.80 | 200 OK | 125 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2023/08/banner1.gif IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeGIF image data, version 89a, 728 x 90 Size125 kB (124749 bytes) Hash90626834fe6252c5948be3dcc52fb5c1 9c2c2bf1cd1cc94805c57bd23266f7be6241dd42 93f15e4a149078157ccdfecd9353dafaa13406be0881692e64a43944fc63ef1e
GET /wp-content/uploads/2023/08/banner1.gif HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/gif
content-length: 124749
last-modified: Tue, 08 Aug 2023 21:07:10 GMT
etag: "64d2ae7e-1e74d"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2019/10/300x250banner.jpg | 78.46.204.80 | 200 OK | 137 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2019/10/300x250banner.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2016:05:02 12:41:45], progressive, precision 8, 300x250, components 3 Size137 kB (137109 bytes) Hash983bfa220af9825e43c68b09865feb4a f440b2f24e3012359020663b1ad1484ea2a9d45f d4e5733f6f507123d456dccff64809d66244b4f2913e1eb90a1bb98870751956
GET /wp-content/uploads/2019/10/300x250banner.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/jpeg
content-length: 137109
last-modified: Sun, 27 Oct 2019 19:26:21 GMT
etag: "5db5ef5d-21795"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2015/10/viber-image.jpg | 78.46.204.80 | 200 OK | 21 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2015/10/viber-image.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1060x112, components 3 Hashd0672393332e8e24913b78b7bd74469d 26961704902100e6cecf787acc007dbce7d3ff88 8aedf3c23afd37975258681fcce0e35d836b80ab2d0b589509272c8ba1733a9f
GET /wp-content/uploads/2015/10/viber-image.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/jpeg
content-length: 21068
last-modified: Tue, 06 Oct 2015 18:06:48 GMT
etag: "56140db8-524c"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/themes/Newsmag/images/sprite/elements.png | 78.46.204.80 | 200 OK | 4.9 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/themes/Newsmag/images/sprite/elements.png IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typePNG image data, 90 x 2100, 8-bit colormap, non-interlaced Hashd86663ea23857bad96f3e0356ffe8685 7ca025ebca7c619c522625514dcbb4770d532057 b31639b1784eda51185ea2f620d531c1654d00790ce5ac16f333a88e23785d44
GET /wp-content/themes/Newsmag/images/sprite/elements.png HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/wp-content/themes/Newsmag/style.css?ver=4.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: image/png
content-length: 4875
last-modified: Wed, 12 Jul 2017 08:38:32 GMT
etag: "5965e008-130b"
expires: Tue, 25 Jun 2024 22:32:51 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/themes/Newsmag/images/icons/newsmag.woff?12 | 78.46.204.80 | 200 OK | 14 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/themes/Newsmag/images/icons/newsmag.woff?12 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeWeb Open Font Format, TrueType, length 14044, version 1.0 Hashd495214167e6c2c0cbb38fec8677a622 5feb0d04358ad29113382cd8f9b3492cbcfa5071 a63e53abfd30cc5be7558678f3137aaa45dfe79e3577299ad027f259b81d50f5
GET /wp-content/themes/Newsmag/images/icons/newsmag.woff?12 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/wp-content/themes/Newsmag/style.css?ver=4.0
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/font-woff
content-length: 14044
last-modified: Wed, 12 Jul 2017 08:38:32 GMT
etag: "5965e008-36dc"
expires: Tue, 25 Jun 2024 22:32:51 GMT
access-control-allow-origin: *
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 |  142.250.74.67 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.67:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.bhbus.ba
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:35:00 GMT
expires: Fri, 25 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 158271
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.67 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.67:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.bhbus.ba
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:35:00 GMT
expires: Fri, 25 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 158271
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 | 142.250.74.67 | 200 OK | 48 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 IP142.250.74.67:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 48236, version 1.0 Hash015c126a3520c9a8f6a27979d0266e96 2acf956561d44434a6d84204670cf849d3215d5f 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.bhbus.ba
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48236
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 25 Apr 2024 02:35:00 GMT
expires: Fri, 25 Apr 2025 02:35:00 GMT
cache-control: public, max-age=31536000
age: 158271
last-modified: Thu, 14 Dec 2023 02:08:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| bind.bestresulttostart.com/scripts/statistics.js?s=7.8.2 |  193.163.7.113 | 200 OK | 41 kB |
URL GET HTTP/2bind.bestresulttostart.com/scripts/statistics.js?s=7.8.2 IP193.163.7.113:443
CertificateIssuerLet's Encrypt Subjectbestresulttostart.com FingerprintF4:4C:F5:1D:A8:B6:9F:52:11:56:EC:A1:D7:C6:98:DF:2E:96:E0:4C ValidityMon, 08 Apr 2024 08:36:22 GMT - Sun, 07 Jul 2024 08:36:21 GMT
File typegzip compressed data, from Unix Hash10a5f293858efa4dfe570e25a2233ecd 4f875f8f093eb686c29385aa8bb8f4600f167dfc 1416a38eda165b87483aeded5dcd8a0f98a44bd761d3eab62b24c57edbb7320a
| Analyzer | Verdict | Alert |
|---|
| ThreatFox | malicious | Unknown malware | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /scripts/statistics.js?s=7.8.2 HTTP/1.1
Host: bind.bestresulttostart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 09 Apr 2024 17:57:49 GMT
vary: Accept-Encoding
etag: W/"6615819d-35d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 142.250.74.67 | 200 OK | 35 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP142.250.74.67:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 35328, version 1.0 Hash7670dba29aa2a1560c5d711ea6f6b369 6a2a620d2972f139c804c5a8363c91eb1a7595f6 adfa45260a1306cb5fefc1f17c1b5e7b61135534a82bf1b8e3d0540af7e07e3b
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.bhbus.ba
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:54:12 GMT
expires: Sat, 26 Apr 2025 05:54:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:00:45 GMT
content-type: font/woff2
age: 59919
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 | 142.250.74.67 | 200 OK | 35 kB |
URL GET HTTP/2fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 IP142.250.74.67:443
CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint93:EC:35:60:8A:5B:23:EA:C0:36:D7:AE:03:0C:C3:77:17:5A:20:33 ValidityMon, 08 Apr 2024 07:31:57 GMT - Mon, 01 Jul 2024 07:31:56 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 35328, version 1.0 Hash7670dba29aa2a1560c5d711ea6f6b369 6a2a620d2972f139c804c5a8363c91eb1a7595f6 adfa45260a1306cb5fefc1f17c1b5e7b61135534a82bf1b8e3d0540af7e07e3b
GET /s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.bhbus.ba
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 Apr 2024 05:54:12 GMT
expires: Sat, 26 Apr 2025 05:54:12 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 14 Dec 2023 02:00:45 GMT
content-type: font/woff2
age: 59919
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/20240326012355885-238x178.jpg | 78.46.204.80 | 200 OK | 12 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/20240326012355885-238x178.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 238x178, components 3 Hash2bf3ed602be13183253e8d006cf75b20 f8eff8480ac411c0971ac8ff689e92694ccd5452 1ce8f81a4f2fb0abf2bb635dc83d9dc292abdc224387c0c38468cbc5634c8812
GET /wp-content/uploads/2024/04/20240326012355885-238x178.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 12355
last-modified: Tue, 23 Apr 2024 12:45:59 GMT
etag: "6627ad87-3043"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/IMG_0390-1536x864-1-238x178.jpeg | 78.46.204.80 | 200 OK | 14 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/IMG_0390-1536x864-1-238x178.jpeg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 238x178, components 3 Hash2447b6cd0604f74b08e3a88a3ddf2a83 b89dd29a8b282b5b7f94e7c7ce05de294eb7028c b817e9873a8d99829fe4cd4776f8b53e0d184918f9a11ce6fb87d307295bbb8f
GET /wp-content/uploads/2024/04/IMG_0390-1536x864-1-238x178.jpeg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 14456
last-modified: Tue, 23 Apr 2024 12:32:28 GMT
etag: "6627aa5c-3878"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/0-300x194.jpg | 78.46.204.80 | 200 OK | 20 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/0-300x194.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 300x194, components 3 Hash1f5d283e5b8b0ee375cadb2e0d38aada 7a8bfd684e4f3e333e042992c32b85a0caa32810 20bfdaf83c39114e0eb8efdce489a1e2125b0c09f5e3a8c1d16af3226029e7a1
GET /wp-content/uploads/2024/04/0-300x194.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 19767
last-modified: Fri, 26 Apr 2024 12:56:39 GMT
etag: "662ba487-4d37"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/ebusco_30_12m_VBSG-2000x1552-1-100x75.jpg | 78.46.204.80 | 200 OK | 1.9 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/ebusco_30_12m_VBSG-2000x1552-1-100x75.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 100x75, components 3 Hash57cf41f0ce90165101ab6bffdd3c4128 00f3a9c9b998cc58326b25f092bc921fb997e1bc 59239a1f6b2c562bde5dc60aa8d426dccfc96d7bbd830df67cd8ccbfae7ca2d7
GET /wp-content/uploads/2024/04/ebusco_30_12m_VBSG-2000x1552-1-100x75.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 1913
last-modified: Tue, 23 Apr 2024 12:38:11 GMT
etag: "6627abb3-779"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/Foto4.ISUZU_.URPA6617ebf0e14a6-100x75.jpg | 78.46.204.80 | 200 OK | 4.4 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/Foto4.ISUZU_.URPA6617ebf0e14a6-100x75.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 100x75, components 3 Hash9a6ea28d74c86cdb7a8be87bec7a9f9b 9484160e5f89de63f15b23ec6366219ad5366894 0b079de788f0caa75b9f085ab5b62bf7893f90e982f4c1e7cc43072f83e58abc
GET /wp-content/uploads/2024/04/Foto4.ISUZU_.URPA6617ebf0e14a6-100x75.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 4376
last-modified: Thu, 25 Apr 2024 13:44:22 GMT
etag: "662a5e36-1118"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/20240326012355885-100x75.jpg | 78.46.204.80 | 200 OK | 3.6 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/20240326012355885-100x75.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 100x75, components 3 Hash638bdd0931ad807a051bc9fffb1f3fb7 ef267f362f3037bd2302514ce563ae0c00af9fd7 dc44cb5ab1ce377cd328097a1843443cb39eea5feab27b0c64379e9f52d15881
GET /wp-content/uploads/2024/04/20240326012355885-100x75.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 3624
last-modified: Tue, 23 Apr 2024 12:45:59 GMT
etag: "6627ad87-e28"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| api.startservicefounds.com/service/sort.js |  45.150.67.235 | 200 OK | 7.4 kB |
URL GET HTTP/2api.startservicefounds.com/service/sort.js IP45.150.67.235:443 ASN#44477 Stark Industries Solutions Ltd
CertificateIssuerLet's Encrypt Subjectapi.startservicefounds.com Fingerprint1D:32:DA:3C:D3:BE:68:81:45:97:BB:14:D2:E3:64:49:C3:5D:68:1A ValidityTue, 27 Feb 2024 18:47:25 GMT - Mon, 27 May 2024 18:47:24 GMT
File typegzip compressed data, from Unix Hash50d2f4938df059fe25ccbfce8d57b494 33250b02245b8354d76e3ae76c920964107f5cc6 f93cb7d2af1979098e129eff48120a1f47169d46558755c4fee8863c5c4f5b72
GET /service/sort.js HTTP/1.1
Host: api.startservicefounds.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 04 Apr 2024 09:45:04 GMT
etag: W/"660e76a0-1e21"
expires: Mon, 06 May 2024 22:32:51 GMT
cache-control: max-age=864000
access-control-allow-origin: *
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/0-238x178.jpg | 78.46.204.80 | 200 OK | 15 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/0-238x178.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 238x178, components 3 Hash6cc1aefa07da6eca4769680d38ceb69b e70b36b663a2933e02772412902fd2f8ab626f1d ffa0cd5eb3ba81899599e6ba4447a03d1ea4ca9fa7e34515f30f5ba2c1d0c75c
GET /wp-content/uploads/2024/04/0-238x178.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 14963
last-modified: Fri, 26 Apr 2024 12:56:39 GMT
etag: "662ba487-3a73"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/03/DSC_0796-300x194.jpg | 78.46.204.80 | 200 OK | 15 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/03/DSC_0796-300x194.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 300x194, components 3 Hashfa6479bfd7c57c70a3a5626d4016c9b2 8a443f1f94f08bd1c4bb7c0dc1282a82c7f52c12 25312d572632c4fdf3dc1e0e457be3b7976d9a21bd117c6e0e147963d5f8d3ee
GET /wp-content/uploads/2024/03/DSC_0796-300x194.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 14792
last-modified: Wed, 20 Mar 2024 11:32:25 GMT
etag: "65fac949-39c8"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/02/DSC_1188-100x75.jpg | 78.46.204.80 | 200 OK | 3.1 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/02/DSC_1188-100x75.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 100x75, components 3 Hashc71a46853502ccc9b11a449ecf7f5422 0b790c26ccae24cc982dad76c2da0851bef4f552 9e25adb37ce6ef828d5164fb584cd58e9c1b6f0ab187a2e3b59e2a2a381da290
GET /wp-content/uploads/2024/02/DSC_1188-100x75.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 3059
last-modified: Thu, 15 Feb 2024 19:11:43 GMT
etag: "65ce61ef-bf3"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2023/12/8-100x75.jpg | 78.46.204.80 | 200 OK | 3.6 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2023/12/8-100x75.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 100x75, components 3 Hashe8a5bf61b4c13015361f08f2c09a41f2 70e0da6ed4f199f5c2420d77a09dfeb1e8e051af 70ceb2c50cb7c2c93b094c4b69f82a84e7795abc3f7a116868ca3acaa312855b
GET /wp-content/uploads/2023/12/8-100x75.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 3579
last-modified: Fri, 22 Dec 2023 11:45:09 GMT
etag: "658576c5-dfb"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 | 78.46.204.80 | 200 OK | 14 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typegzip compressed data, from Unix Hash96f28551ed38d347c215af310c9cf385 0cfbd4111462a76446868654b9a359bc8de00c23 346dda0bd3a2d6d9fa70366c36b871bf97e2513e44793695aa42bb4744760dda
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.9.3 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript
last-modified: Fri, 29 Mar 2024 05:42:52 GMT
etag: W/"660654dc-2cf9"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| cdn.specialtaskevents.com/JZFYbC | 45.140.146.101 | 200 OK | 10 kB |
URL GET HTTP/2cdn.specialtaskevents.com/JZFYbC IP45.140.146.101:443 ASN#44477 Stark Industries Solutions Ltd
CertificateIssuerLet's Encrypt Subjectcdn.specialtaskevents.com FingerprintC7:57:A9:58:43:91:CF:C9:25:92:A5:7E:3A:17:9A:B8:B4:FD:00:FC ValidityFri, 15 Mar 2024 02:16:35 GMT - Thu, 13 Jun 2024 02:16:34 GMT
Hash71e4392ec91b41c05fb763df7d321506 22e7f6773b91f41030a7e6187b98ae7e058cbed2 8c92f0b6c3974ab53cac8837ade6ea25847f5da1d18d75a24685f0f858ebaea1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /JZFYbC HTTP/1.1
Host: cdn.specialtaskevents.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: application/javascript; charset=utf-8
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
expires: Fri, 26 Apr 2024 22:32:52 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| visit.startfinishthis.com/fGGy8K | 172.67.152.194 | 200 OK | 0 B |
URL GET HTTP/3visit.startfinishthis.com/fGGy8K IP172.67.152.194:443
CertificateIssuerGoogle Trust Services LLC Subjectstartfinishthis.com FingerprintD5:E5:97:E4:E8:D4:53:86:B2:E1:D7:EF:F4:69:83:94:C6:46:E9:8C ValidityMon, 04 Mar 2024 14:59:39 GMT - Sun, 02 Jun 2024 14:59:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| ThreatFox | malicious | Unknown malware |
GET /fGGy8K HTTP/1.1
Host: visit.startfinishthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: application/javascript
content-length: 0
cache-control: no-cache, no-store, must-revalidate
expires: Fri, 26 Apr 2024 22:32:52 GMT
set-cookie: _subid=376l60jgbij85; expires=Mon, 27 May 2024 22:32:52 GMT; path=/
a4fba=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQ1XCI6MTcxNDE3MDc3Mn0sXCJjYW1wYWlnbnNcIjp7XCIxNVwiOjE3MTQxNzA3NzJ9LFwidGltZVwiOjE3MTQxNzA3NzJ9In0.F7y1JuZ5AGIZf5_jHlR7JHsxXWdtOH5hRjUOANtIpYM; expires=Mon, 22 Aug 2078 09:05:44 GMT; path=/
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1qcFwLKhDrSBMKVf8CBUaAUHWAfk%2Fsxr%2B0ZhYgoPGUQzPqhjoqbp7BMCz45LalaH0YuBGVal4xwwtmINJ%2B1f%2F3rGc%2F34Z7W1YXGeekuXu63MxNIsz3uovk9qakwshcP5aP%2B3jNbOBPg5s3Cf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa07febc3db50b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| gate.getmygateway.com/KQGrXb?c=www.bhbus.ba | 45.140.146.101 | 200 OK | 0 B |
URL GET HTTP/2gate.getmygateway.com/KQGrXb?c=www.bhbus.ba IP45.140.146.101:443 ASN#44477 Stark Industries Solutions Ltd
CertificateIssuerLet's Encrypt Subjectgate.getmygateway.com FingerprintF2:E0:B0:7B:1E:89:C9:4D:C8:55:A1:09:83:F6:7D:58:9F:98:0A:46 ValidityFri, 15 Mar 2024 02:12:16 GMT - Thu, 13 Jun 2024 02:12:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /KQGrXb?c=www.bhbus.ba HTTP/1.1
Host: gate.getmygateway.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
cache-control: no-cache, no-store, must-revalidate
expires: Fri, 26 Apr 2024 22:32:52 GMT
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2015/10/grid_background_dark_texture_line_36217_3840x2160.jpg | 78.46.204.80 | 200 OK | 1.9 MB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2015/10/grid_background_dark_texture_line_36217_3840x2160.jpg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 97", baseline, precision 8, 3840x2160, components 3 Size1.9 MB (1915339 bytes) Hash01de27e7805e0ed12f57db79bd855562 57577df6c0af7d32173e2621c71511f7a6fcb826 bf2d346701eb834857fef40d4516b281ae84139b58102e5296bb411a4f048d82
GET /wp-content/uploads/2015/10/grid_background_dark_texture_line_36217_3840x2160.jpg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 1915339
last-modified: Mon, 05 Oct 2015 16:13:16 GMT
etag: "5612a19c-1d39cb"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| scripts.bestresulttostart.com/tDTDBJ | 193.163.7.113 | 200 OK | 5.9 kB |
URL GET HTTP/2scripts.bestresulttostart.com/tDTDBJ IP193.163.7.113:443
CertificateIssuerLet's Encrypt Subjectbestresulttostart.com FingerprintF4:4C:F5:1D:A8:B6:9F:52:11:56:EC:A1:D7:C6:98:DF:2E:96:E0:4C ValidityMon, 08 Apr 2024 08:36:22 GMT - Sun, 07 Jul 2024 08:36:21 GMT
File typeJavaScript source, ASCII text, with very long lines (13785) Hash58d15c8061659ef77d42e8c5d3ff4984 4fefb78331ee102e720c03a36265f3b286df3457 709f60c4e7be64193c1eff6aca024338e157da87200e114e84b061bfed693f98
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /tDTDBJ HTTP/1.1
Host: scripts.bestresulttostart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: application/javascript; charset=utf-8
content-length: 5919
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=31536000;
X-Firefox-Spdy: h2
|
|
| visit.startfinishthis.com/fGGy8K | 172.67.152.194 | 200 OK | 0 B |
URL GET HTTP/3visit.startfinishthis.com/fGGy8K IP172.67.152.194:443
CertificateIssuerGoogle Trust Services LLC Subjectstartfinishthis.com FingerprintD5:E5:97:E4:E8:D4:53:86:B2:E1:D7:EF:F4:69:83:94:C6:46:E9:8C ValidityMon, 04 Mar 2024 14:59:39 GMT - Sun, 02 Jun 2024 14:59:38 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| ThreatFox | malicious | Unknown malware |
GET /fGGy8K HTTP/1.1
Host: visit.startfinishthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 26 Apr 2024 22:32:53 GMT
content-type: application/javascript
content-length: 0
cache-control: no-cache, no-store, must-revalidate
expires: Fri, 26 Apr 2024 22:32:53 GMT
set-cookie: _subid=376l60jgbijab; expires=Mon, 27 May 2024 22:32:53 GMT; path=/
a4fba=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQ1XCI6MTcxNDE3MDc3M30sXCJjYW1wYWlnbnNcIjp7XCIxNVwiOjE3MTQxNzA3NzN9LFwidGltZVwiOjE3MTQxNzA3NzN9In0.Nm2w6Lj9GYhgjfbOtCHLEzOG-gB_u6PWTRdPbKs5538; expires=Mon, 22 Aug 2078 09:05:46 GMT; path=/
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EcNkS9xsb9Koq4XPG4A8xVeVTlh5H%2FNnAY0VJX8%2B7nRL8BdE%2BfmPFvnQTukDhpphfQKGoyCnSQ8w698ZFm2rus1YwdlaMnvlMmOZPEu7FsW9xHWEgSF29htVKt73gXwz2vZeB1AsvoSE0yja"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa08032ea6b50b-OSL
alt-svc: h3=":443"; ma=86400
|
|
| visit.startfinishthis.com/2L1mRj?q=www.bhbus.ba | 172.67.152.194 | 200 OK | 7.8 kB |
URL GET HTTP/2visit.startfinishthis.com/2L1mRj?q=www.bhbus.ba IP172.67.152.194:443
CertificateIssuerGoogle Trust Services LLC Subjectstartfinishthis.com FingerprintD5:E5:97:E4:E8:D4:53:86:B2:E1:D7:EF:F4:69:83:94:C6:46:E9:8C ValidityMon, 04 Mar 2024 14:59:39 GMT - Sun, 02 Jun 2024 14:59:38 GMT
File typeJavaScript source, ASCII text, with very long lines (7752), with no line terminators Hash36b37c2b32cb60a5f7689fc7bc992368 75c21b11e9d45c0f100caba87985605f0f68749b e5bd093f5b2293f655d1c324186c2241e2dc972d50c8ad68df56bbaff4d71e12
GET /2L1mRj?q=www.bhbus.ba HTTP/1.1
Host: visit.startfinishthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
expires: Fri, 26 Apr 2024 22:32:52 GMT
set-cookie: _subid=376l60jgbij7g; expires=Mon, 27 May 2024 22:32:52 GMT; path=/
a4fba=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQxXCI6MTcxNDE3MDc3Mn0sXCJjYW1wYWlnbnNcIjp7XCIxM1wiOjE3MTQxNzA3NzJ9LFwidGltZVwiOjE3MTQxNzA3NzJ9In0.G6WAmBCzqir7K1mL8phi3ZyPLNY0QmTehGK77OchP8Y; expires=Mon, 22 Aug 2078 21:05:44 GMT; path=/
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pA9pzr2ZFafuDlORneHQhML7rBbpWisu7g0%2FhQiqu5kHhXxUxsv3SqxnKN6H2y%2Bap4PC%2F%2FvpF%2BxMg46NrQR1XgnakNsmI%2FV2t5qwq%2B9R%2Fn%2BFMn9HeGttKOzY69H%2FXICR8AvrRBogETNy3pqU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa07fdc8e40b61-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| find.bestresulttostart.com/scripts/config.js?ver=2.56.3 | 193.163.7.113 | 200 OK | 7.8 kB |
URL GET HTTP/2find.bestresulttostart.com/scripts/config.js?ver=2.56.3 IP193.163.7.113:443
CertificateIssuerLet's Encrypt Subjectbestresulttostart.com FingerprintF4:4C:F5:1D:A8:B6:9F:52:11:56:EC:A1:D7:C6:98:DF:2E:96:E0:4C ValidityMon, 08 Apr 2024 08:36:22 GMT - Sun, 07 Jul 2024 08:36:21 GMT
File typeJavaScript source, ASCII text, with very long lines (7778), with no line terminators Hash1e4e5741c78676c52420cddd7864dba5 10c43392f24890dffaad0b33b850e67a9ace0bc2 854ca4102c845a10dbb33ca49e08bc428e865eaeed015bd002ee5620ec3711ad
| Analyzer | Verdict | Alert |
|---|
| mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /scripts/config.js?ver=2.56.3 HTTP/1.1
Host: find.bestresulttostart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 08 Apr 2024 10:13:07 GMT
vary: Accept-Encoding
etag: W/"6613c333-1e62"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 | 78.46.204.80 | 200 OK | 15 kB |
URL GET HTTP/2www.bhbus.ba/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJavaScript source, ASCII text, with very long lines (13479) Hashcea254aeb31784ac43466abb1777da8e 9e1955827a685c1615d8ad0a7650d572af556839 a6f275e1d2f7cf8c9af14aa903668ab8bfd36463d516f6d1cc30b48d666f08e5
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript
last-modified: Sun, 07 Apr 2024 09:11:48 GMT
etag: W/"66126354-38f6"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 | 78.46.204.80 | 200 OK | 2.9 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeASCII text, with very long lines (3172), with no line terminators Hash4ff394b4fc55e546c2457e1a49a044fa 0f3fe404c0821a795cb73aa6bb5c062d52af7e68 4858dafdb763b5027e97ca50c5747329e16d4c19ecc575aff7454335e71cba33
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.9.3 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: text/css
last-modified: Fri, 29 Mar 2024 05:42:52 GMT
etag: W/"660654dc-b4e"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| visit.startfinishthis.com/2L1mRj?q=www.bhbus.ba | 172.67.152.194 | 200 OK | 7.8 kB |
URL GET HTTP/3visit.startfinishthis.com/2L1mRj?q=www.bhbus.ba IP172.67.152.194:443
CertificateIssuerGoogle Trust Services LLC Subjectstartfinishthis.com FingerprintD5:E5:97:E4:E8:D4:53:86:B2:E1:D7:EF:F4:69:83:94:C6:46:E9:8C ValidityMon, 04 Mar 2024 14:59:39 GMT - Sun, 02 Jun 2024 14:59:38 GMT
File typeJavaScript source, ASCII text, with very long lines (7752), with no line terminators Hash36b37c2b32cb60a5f7689fc7bc992368 75c21b11e9d45c0f100caba87985605f0f68749b e5bd093f5b2293f655d1c324186c2241e2dc972d50c8ad68df56bbaff4d71e12
GET /2L1mRj?q=www.bhbus.ba HTTP/1.1
Host: visit.startfinishthis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: application/javascript
cache-control: no-cache, no-store, must-revalidate
expires: Fri, 26 Apr 2024 22:32:52 GMT
set-cookie: _subid=376l60jgbij9v; expires=Mon, 27 May 2024 22:32:52 GMT; path=/
a4fba=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoie1wic3RyZWFtc1wiOntcIjQxXCI6MTcxNDE3MDc3Mn0sXCJjYW1wYWlnbnNcIjp7XCIxM1wiOjE3MTQxNzA3NzJ9LFwidGltZVwiOjE3MTQxNzA3NzJ9In0.G6WAmBCzqir7K1mL8phi3ZyPLNY0QmTehGK77OchP8Y; expires=Mon, 22 Aug 2078 21:05:44 GMT; path=/
vary: Accept-Encoding
x-powered-by: PHP/7.4.33
access-control-allow-origin: *
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Enii3ux9ic%2B%2BfIWyekRc7OUit3auhYGqKka4UQrgyVOrYB35jpk7wk2G4cXgVVT8KebWB4%2FzxYi6sfOO4i%2Bi2AmG2Z19YnbJNZJXBYxh9T5FOmV%2BVRdTAylJ1XqVc2IRj2tK2rCwszri9PXN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87aa08026e41b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| www.bhbus.ba/wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 | 78.46.204.80 | 200 OK | 110 kB |
URL GET HTTP/2www.bhbus.ba/wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
Size110 kB (110147 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.4 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: text/css
last-modified: Wed, 31 Jan 2024 18:03:16 GMT
etag: W/"65ba8b64-1ae43"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2021/10/favicon.ico | 78.46.204.80 | 200 OK | 1.2 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2021/10/favicon.ico IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash18119379b1a4d7a1362538976d66eb7b abc27b730a2ac351f6763e6df934b9c491199ee7 8f113ad0b760045ede74677cdf07013aa705572bb58234c2d3bc058ce5919cfd
GET /wp-content/uploads/2021/10/favicon.ico HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/x-icon
last-modified: Tue, 05 Oct 2021 19:56:30 GMT
etag: W/"615cadee-47e"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| bind.bestresulttostart.com/scripts/statistics.js | 193.163.7.113 | 200 OK | 14 kB |
URL GET HTTP/2bind.bestresulttostart.com/scripts/statistics.js IP193.163.7.113:443
CertificateIssuerLet's Encrypt Subjectbestresulttostart.com FingerprintF4:4C:F5:1D:A8:B6:9F:52:11:56:EC:A1:D7:C6:98:DF:2E:96:E0:4C ValidityMon, 08 Apr 2024 08:36:22 GMT - Sun, 07 Jul 2024 08:36:21 GMT
File typeJavaScript source, ASCII text, with very long lines (13785), with no line terminators Hashdad59bad08a8fdf2f2ddf9cc28d23153 65c2b2ca6142364cfd1539c37828d2df06b4f572 dbc09b358c3f5de04d44f6158441259a2f29526008594e05a9ac3cc829186e27
| Analyzer | Verdict | Alert |
|---|
| ThreatFox | malicious | Unknown malware | | mnemonic secure dns | malicious | Sinkholed | | Quad9 DNS | malicious | Sinkholed |
GET /scripts/statistics.js HTTP/1.1
Host: bind.bestresulttostart.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript; charset=utf-8
last-modified: Tue, 09 Apr 2024 17:57:49 GMT
vary: Accept-Encoding
etag: W/"6615819d-35d9"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
strict-transport-security: max-age=31536000;
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 | 78.46.204.80 | 200 OK | 13 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJavaScript source, ASCII text, with very long lines (13054), with no line terminators Hash917602d642f84a211838f0c1757c4dc1 392df3fb4b0ec96ce4ebb5616e6b2a5c55a54bf8 d702e5ed1e573918d912775ac1e88987fc177aa51efe1253a08f71ab54f96516
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.9.3 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript
last-modified: Fri, 29 Mar 2024 05:42:52 GMT
etag: W/"660654dc-32fe"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2024/04/IMG_0390-1536x864-1-100x75.jpeg | 78.46.204.80 | 200 OK | 4.0 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2024/04/IMG_0390-1536x864-1-100x75.jpeg IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82", baseline, precision 8, 100x75, components 3 Hash45373e82c9af295a8b058dd3b1a932a8 9ceed0ff714d9aaa973fe70cd6a152524cf31eba 4fb4712c533b1e9ad9321558386cf81704198024bfff97fa294fec5ebcb9dbc7
GET /wp-content/uploads/2024/04/IMG_0390-1536x864-1-100x75.jpeg HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/jpeg
content-length: 3974
last-modified: Tue, 23 Apr 2024 12:32:28 GMT
etag: "6627aa5c-f86"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/themes/Newsmag/style.css?ver=4.0 | 78.46.204.80 | 200 OK | 758 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/themes/Newsmag/style.css?ver=4.0 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeASCII text, with CRLF line terminators Size758 kB (757914 bytes) Hashccd9ba308af40873af1dee9df0c30f61 888cc6c4e3f1d9fb42f43cc0d08a8513c623afe6 eb93ec4b4454109f74d0ebe6168802003822adcce581b69d28b82f702e25308a
GET /wp-content/themes/Newsmag/style.css?ver=4.0 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: text/css
last-modified: Tue, 14 Nov 2017 10:41:36 GMT
etag: W/"5a0ac860-b909a"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| four.startperfectsolutions.com/scripts/sold.js | 45.142.212.163 | 200 OK | 9.9 kB |
URL GET HTTP/2four.startperfectsolutions.com/scripts/sold.js IP45.142.212.163:443 ASN#44477 Stark Industries Solutions Ltd
CertificateIssuerLet's Encrypt Subjectone.startperfectsolutions.com Fingerprint20:04:AC:E0:60:46:43:C2:48:A5:53:D2:4B:77:FE:DE:8F:62:24:EA ValidityFri, 15 Mar 2024 04:15:26 GMT - Thu, 13 Jun 2024 04:15:25 GMT
File typeJavaScript source, ASCII text, with very long lines (9872), with no line terminators Hash1f50a5c345b32f00dac4cacdac6dee32 c9d7f3fbce7a52dee0707ea73a8a1c602a6a91c1 be94ab61751b7494ad15abe618c21824d31974ee0682c1470bf93236e01879f2
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /scripts/sold.js HTTP/1.1
Host: four.startperfectsolutions.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript; charset=utf-8
last-modified: Mon, 15 Jan 2024 16:21:09 GMT
etag: W/"65a55b75-2690"
expires: Mon, 06 May 2024 22:32:51 GMT
cache-control: max-age=864000
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=4.11.2 | 78.46.204.80 | 200 OK | 728 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=4.11.2 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeASCII text, with very long lines (65536), with no line terminators Size728 kB (728081 bytes) Hash75524a37b1fdfa976ca2a302619812ec 84631a5d9affdcdb4e57af64cc04f107e89bc02a 1eb8b0b461886b58a6d7a704ffc72912c4268363deecd5c963ed266c0fd709fd
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=4.11.2 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: text/css
last-modified: Sat, 15 Oct 2016 18:11:24 GMT
etag: W/"5802714c-b1c11"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/uploads/2021/10/favicon.ico | 78.46.204.80 | 200 OK | 1.2 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/uploads/2021/10/favicon.ico IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash18119379b1a4d7a1362538976d66eb7b abc27b730a2ac351f6763e6df934b9c491199ee7 8f113ad0b760045ede74677cdf07013aa705572bb58234c2d3bc058ce5919cfd
GET /wp-content/uploads/2021/10/favicon.ico HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:52 GMT
content-type: image/x-icon
last-modified: Tue, 05 Oct 2021 19:56:30 GMT
etag: W/"615cadee-47e"
expires: Tue, 25 Jun 2024 22:32:52 GMT
pragma: public
cache-control: max-age=5184000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 78.46.204.80 | 200 OK | 130 kB |
URL User Request GET HTTP/2IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
Size130 kB (129579 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:50 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
link: <https://www.bhbus.ba/wp-json/>; rel="https://api.w.org/", <https://www.bhbus.ba/wp-json/wp/v2/pages/4>; rel="alternate"; type="application/json", <https://www.bhbus.ba/>; rel=shortlink
x-dh-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/plugins/dropdown-menu-widget/scripts/include.js?ver=6.4.4 | 78.46.204.80 | 200 OK | 386 B |
URL GET HTTP/2www.bhbus.ba/wp-content/plugins/dropdown-menu-widget/scripts/include.js?ver=6.4.4 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJavaScript source, ASCII text, with very long lines (408), with no line terminators Hash9466acdc377539303267ba636d74c530 bf993acababe99e50b801dbc4646c17da9e192f0 69352cfe8c691c0d7b5988c3b31caf65a5c9483494e9eb25ff2b2b21c9262391
GET /wp-content/plugins/dropdown-menu-widget/scripts/include.js?ver=6.4.4 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript
last-modified: Fri, 28 Dec 2018 20:09:22 GMT
etag: W/"5c2682f2-182"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/plugins/dropdown-menu-widget/css/shailan-dropdown.min.css | 78.46.204.80 | 200 OK | 2.6 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/plugins/dropdown-menu-widget/css/shailan-dropdown.min.css IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeASCII text, with very long lines (2905), with no line terminators Hashf8f3671561a05290e1fd76915e055071 d20592d2a4c73cb41f05652ce7919fbaf768c77b 635287fa8dad7f8afc75639523b56ed099cef0c831284a05f215bf0b4a331aee
GET /wp-content/plugins/dropdown-menu-widget/css/shailan-dropdown.min.css HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: text/css
last-modified: Fri, 28 Dec 2018 20:09:22 GMT
etag: W/"5c2682f2-a3f"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/plugins/meks-easy-ads-widget/css/style.css?ver=2.0.8 | 78.46.204.80 | 200 OK | 705 B |
URL GET HTTP/2www.bhbus.ba/wp-content/plugins/meks-easy-ads-widget/css/style.css?ver=2.0.8 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeASCII text, with very long lines (790), with no line terminators Hash9626dade6fe0054a6f2b87cc2b69daab 34966e5662af549ce8c5f0fb07836a49dfba040f 882c1b4029cbf342b2de73173207e8aa3139b38de0bf8863be8979453d141e5d
GET /wp-content/plugins/meks-easy-ads-widget/css/style.css?ver=2.0.8 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: text/css
last-modified: Fri, 15 Sep 2023 20:17:23 GMT
etag: W/"6504bbd3-2c1"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/themes/Newsmag/js/tagdiv_theme.min.js?ver=4.0 | 78.46.204.80 | 200 OK | 203 kB |
URL GET HTTP/2www.bhbus.ba/wp-content/themes/Newsmag/js/tagdiv_theme.min.js?ver=4.0 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJavaScript source, ASCII text, with very long lines (670) Size203 kB (203213 bytes) Hashd754de26f4aa5b11a3161f23412d2c5e a2763d8238a00301564d1b2e5775c60d8d17a156 e06b5eee99f8b2417fab514f4d881ec0c604da462047b3393c6b864cf4a5f281
GET /wp-content/themes/Newsmag/js/tagdiv_theme.min.js?ver=4.0 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript
last-modified: Wed, 12 Jul 2017 08:38:38 GMT
etag: W/"5965e00e-319cd"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-includes/js/hoverIntent.min.js?ver=1.10.2 | 78.46.204.80 | 200 OK | 1.5 kB |
URL GET HTTP/2www.bhbus.ba/wp-includes/js/hoverIntent.min.js?ver=1.10.2 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJavaScript source, ASCII text, with very long lines (1528), with no line terminators Hash05dfab5ea94e431b975302359420e027 6fedd8876d4dd468783359ca3bc4882748dde111 d05f197f608d0f4f0eab7000e11622a7dfbb913b7aee1a1352496fa1fcfc5789
GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 19:41:34 GMT
etag: W/"632b68ee-5db"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-content/plugins/wp-disable-comments/javascript/wp-disable-comments.js?ver=0.4 | 78.46.204.80 | 200 OK | 588 B |
URL GET HTTP/2www.bhbus.ba/wp-content/plugins/wp-disable-comments/javascript/wp-disable-comments.js?ver=0.4 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeASCII text, with very long lines (617), with no line terminators Hasha5c2164f8ec8287c397af11d9c99e770 d1193ded6d4884f31c1cdb0632d950890a3bf3ff 7e2af8bf05e84e0cdb82c54533562b6bf792284ccbad699cdde29a670c0c75d8
GET /wp-content/plugins/wp-disable-comments/javascript/wp-disable-comments.js?ver=0.4 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript
last-modified: Mon, 05 Oct 2015 15:51:24 GMT
etag: W/"56129c7c-24c"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| www.bhbus.ba/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 | 78.46.204.80 | 200 OK | 88 kB |
URL GET HTTP/2www.bhbus.ba/wp-includes/js/jquery/jquery.min.js?ver=3.7.1 IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
File typeJavaScript source, ASCII text, with very long lines (65447) Hash826eb77e86b02ab7724fe3d0141ff87c 79cd3587d565afe290076a8d36c31c305a573d18 cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: www.bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 26 Apr 2024 22:32:51 GMT
content-type: application/javascript
last-modified: Mon, 29 Jan 2024 08:05:51 GMT
etag: W/"65b75c5f-15601"
expires: Sun, 26 May 2024 22:32:51 GMT
pragma: public
cache-control: max-age=2592000, public
vary: Accept-Encoding, Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| | 78.46.204.80 | 301 Moved Permanently | 130 kB |
URL User Request GET HTTP/2IP78.46.204.80:443 ASN#24940 Hetzner Online GmbH
CertificateIssuerLet's Encrypt Subjectbhbus.ba Fingerprint61:45:35:2F:4B:28:00:01:60:06:4C:B2:A7:BC:AB:E6:94:4F:E9:13 ValidityWed, 20 Mar 2024 01:01:16 GMT - Tue, 18 Jun 2024 01:01:15 GMT
Size130 kB (129579 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: bhbus.ba
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 26 Apr 2024 22:32:50 GMT
content-type: text/html; charset=UTF-8
location: https://www.bhbus.ba/
x-redirect-by: WordPress
x-dh-cache: MISS
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C600%2C700%7CRoboto+Condensed%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&ver=4.0 | 142.250.74.106 | 200 OK | 37 kB |
URL GET HTTP/2fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C600%2C700%7CRoboto+Condensed%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&ver=4.0 IP142.250.74.106:443
CertificateIssuerGoogle Trust Services LLC Subjectupload.video.google.com Fingerprint5F:6D:48:87:16:89:1E:A5:57:29:92:8B:34:BD:F2:92:0C:7F:F2:50 ValidityMon, 08 Apr 2024 07:32:03 GMT - Mon, 01 Jul 2024 07:32:02 GMT
File typeASCII text, with very long lines (1572) Hash08d582aa795d0b28b28da3d103335c5c 775b55f18da6c788824f421b0f23da235db4d345 a16d97cd8c64380eb1448fff8d93533c99aac829e4e9a2276c8cd7e8cb3b2d2a
GET /css?family=Open+Sans%3A300%2C400%2C600%2C700%7CRoboto+Condensed%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&ver=4.0 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.bhbus.ba
DNT: 1
Connection: keep-alive
Referer: https://www.bhbus.ba/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 26 Apr 2024 22:32:51 GMT
date: Fri, 26 Apr 2024 22:32:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
0.0.0.0