| 142.93.8.134/wp-admin/network/index.php |  142.93.8.134 | 302 Found | 0 B |
URL User Request GET HTTP/1.1142.93.8.134/wp-admin/network/index.php IP142.93.8.134:80 ASN#14061 DIGITALOCEAN-ASN
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /wp-admin/network/index.php HTTP/1.1
Host: 142.93.8.134
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 25 Apr 2024 21:41:31 GMT
Server: Apache/2.4.29 (Ubuntu)
Location: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php |  185.104.45.37 | 301 Moved Permanently | 162 B |
URL User Request GET HTTP/2oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php IP185.104.45.37:443 ASN#200000 Hosting Ukraine LTD
CertificateIssuerLet's Encrypt Subjectwww.oklvld.pl.ua Fingerprint25:9E:ED:88:FC:6E:ED:3F:DC:19:28:36:45:BC:86:B2:12:9F:BD:08 ValidityWed, 06 Mar 2024 13:21:30 GMT - Tue, 04 Jun 2024 13:21:29 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hash4f8e702cc244ec5d4de32740c0ecbd97 3adb1f02d5b6054de0046e367c1d687b6cdf7aff 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Office365 |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET PHISHING Generic Multibrand NewInjection Phishing Landing Template | | suricata | medium | ET PHISHING Generic Multibrand NewInjection Phishing Landing Template |
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 25 Apr 2024 21:41:32 GMT
content-type: text/html
content-length: 162
location: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
x-ray: wnp20029:0.000/wn20029:0.000/
X-Firefox-Spdy: h2
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php | 185.104.45.37 | 301 Moved Permanently | 2.5 kB |
URL User Request GET HTTP/2oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php IP185.104.45.37:443 ASN#200000 Hosting Ukraine LTD
CertificateIssuerLet's Encrypt Subjectwww.oklvld.pl.ua Fingerprint25:9E:ED:88:FC:6E:ED:3F:DC:19:28:36:45:BC:86:B2:12:9F:BD:08 ValidityWed, 06 Mar 2024 13:21:30 GMT - Tue, 04 Jun 2024 13:21:29 GMT
File typeHTML document, Unicode text, UTF-8 (with BOM) text Hash81cea4bdba0ba9eef5abbb36ab13ada8 c7b19dd724b70964b4eff28371e5b4c487b22637 95f183af7a833564d5ee78ef700436b2f290f2db920e1c2e4730c3d4cc8207ef
| Analyzer | Verdict | Alert |
|---|
| OpenPhish | phishing | Office365 |
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET PHISHING Generic Multibrand NewInjection Phishing Landing Template | | suricata | medium | ET PHISHING Generic Multibrand NewInjection Phishing Landing Template |
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
x-ray: wnp20029:0.000/wn20029:0.000/wa20029:D=2779
Content-Encoding: gzip
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.3.1.js | 185.104.45.37 | 404 Not Found | 1.6 kB |
URL GET HTTP/1.1oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.3.1.js IP185.104.45.37:80 ASN#200000 Hosting Ukraine LTD
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
File typeHTML document, Unicode text, UTF-8 text Hashb7636fed457cdb66aac1d5979c484b00 2fe05632a06ba3f06c83e12cbd82a0886eff3722 b96f817be2e49d97fd9647a4744f5d37507ad1cad3260a8f2a8b37414a6d8566
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.3.1.js HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: text/html
Content-Length: 1613
Connection: keep-alive
x-ray: wnp20029:0.010/wn20029:0.000/wa20029:D=723
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery.min.js | 185.104.45.37 | 200 OK | 30 kB |
URL GET HTTP/1.1oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery.min.js IP185.104.45.37:80 ASN#200000 Hosting Ukraine LTD
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
File typeJavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators Hashadb784ef9dc257b32965a5da7ee82a8b 7a41c488d820ea08231d1d393e5f4daed4d25041 8e09aa31f396ea41d698f437dc5fc7125e931d400eb2873f5b68ef78c1e6f3a6
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery.min.js HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Oct 2020 05:28:00 GMT
ETag: W/"5f9a52e0-14e4c"
x-ray: wnp20029:0.011/wn20029:0.000/
Content-Encoding: gzip
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/popper.min.js | 185.104.45.37 | 200 OK | 6.9 kB |
URL GET HTTP/1.1oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/popper.min.js IP185.104.45.37:80 ASN#200000 Hosting Ukraine LTD
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
File typeJavaScript source, ASCII text, with very long lines (19015) Hash124bf4d1a7db31dd60d4642dce268035 d3745247363d9cb016aaef057bbf2a363796cc01 5614d21225b2e012e3765c1b32fba0b8762bcecd8863c8705c1bcc0d03ec19de
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/popper.min.js HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Oct 2020 05:35:26 GMT
ETag: W/"5f9a549e-4af3"
x-ray: wnp20029:0.000/wn20029:0.000/
Content-Encoding: gzip
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.1.1.min.js | 185.104.45.37 | 200 OK | 30 kB |
URL GET HTTP/1.1oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.1.1.min.js IP185.104.45.37:80 ASN#200000 Hosting Ukraine LTD
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
File typeJavaScript source, ASCII text, with very long lines (32030), with CRLF line terminators Hash81ed7a494e1943be2844e95f9770844c b063d0aa57f0c50d9bfb9895b76a9467155df7f1 70dae469f94f214b589d53521b903830a08b4fb589d47a4c269a83c79116886a
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.1.1.min.js HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Oct 2020 05:28:00 GMT
ETag: W/"5f9a52e0-152b7"
x-ray: wnp20029:0.000/wn20029:0.000/
Content-Encoding: gzip
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.2.1.slim.min.js | 185.104.45.37 | 200 OK | 24 kB |
URL GET HTTP/1.1oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.2.1.slim.min.js IP185.104.45.37:80 ASN#200000 Hosting Ukraine LTD
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
File typeJavaScript source, ASCII text, with very long lines (32012) Hashe4f60e36fb624b3b4dd616ce75a0bf3c 8856754bdf9b102d046b16f91feb203c606b32bd 91a04a5dfe501d54af8a59b942495bd7ab26bb811ab34f460115fc0267f825f1
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.2.1.slim.min.js HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Oct 2020 05:33:16 GMT
ETag: W/"5f9a541c-10fdc"
x-ray: wnp20029:0.000/wn20029:0.000/
Content-Encoding: gzip
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.3.1.js | 185.104.45.37 | 404 Not Found | 1.6 kB |
URL GET HTTP/1.1oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.3.1.js IP185.104.45.37:80 ASN#200000 Hosting Ukraine LTD
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
File typeHTML document, Unicode text, UTF-8 text Hashb7636fed457cdb66aac1d5979c484b00 2fe05632a06ba3f06c83e12cbd82a0886eff3722 b96f817be2e49d97fd9647a4744f5d37507ad1cad3260a8f2a8b37414a6d8566
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery-3.3.1.js HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: text/html
Content-Length: 1613
Connection: keep-alive
x-ray: wnp20029:0.000/wn20029:0.000/wa20029:D=826
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery.min.js | 185.104.45.37 | 200 OK | 30 kB |
URL GET HTTP/1.1oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery.min.js IP185.104.45.37:80 ASN#200000 Hosting Ukraine LTD
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
File typeJavaScript source, ASCII text, with very long lines (32065), with CRLF line terminators Hashadb784ef9dc257b32965a5da7ee82a8b 7a41c488d820ea08231d1d393e5f4daed4d25041 8e09aa31f396ea41d698f437dc5fc7125e931d400eb2873f5b68ef78c1e6f3a6
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/js/jquery.min.js HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 29 Oct 2020 05:28:00 GMT
ETag: W/"5f9a52e0-14e4c"
x-ray: wnp20029:0.000/wn20029:0.000/
Content-Encoding: gzip
|
|
| stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js |  104.18.11.207 | 200 OK | 357 kB |
URL GET HTTP/2stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (50758) Size357 kB (357039 bytes) Hash67176c242e1bdc20603c878dee836df3 27a71b00383d61ef3c489326b3564d698fc1227c 56c12a125b021d21a69e61d7190cefa168d6c28ce715265cea1b3b0112d169c4
GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:41:32 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:06 GMT
cdn-cachedat: 11/15/2021 23:30:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: a35b0179a28ed953258d0fb41376a09c
cdn-cache: HIT
cf-cache-status: HIT
age: 1995893
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a17f6df8ba1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/images/lin.ico | 185.104.45.37 | 200 OK | 165 kB |
URL GET HTTP/1.1oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/images/lin.ico IP185.104.45.37:80 ASN#200000 Hosting Ukraine LTD
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
File typeMS Windows icon resource - 9 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel Size165 kB (165003 bytes) Hash6288e3bafe5576eaac15893ce3ed9359 1f5b46cbde606da717ed6c912a407608b6b2e384 89e8a0214f242e7a5321dd5bb0f6c11279edc545a994c6633938d1a5ca72bae4
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/images/lin.ico HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: image/x-icon
Content-Length: 165003
Connection: keep-alive
Last-Modified: Wed, 21 Jun 2023 23:38:26 GMT
ETag: "649389f2-2848b"
x-ray: wnp20029:0.000/wn20029:0.000/
Accept-Ranges: bytes
|
|
| ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251 | 104.21.26.223 | 200 OK | 21 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=585b051251 IP104.21.26.223:443
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (60130) Hasha12ec7ebe75a4d59a5dd6b79e2ba2e16 28f5dcc595ee6d4163481ef64170180502c8629b fc5128dfdcdfa0c3a9967a6d2f19399d7bf1aaae6ad7571b96b03915a1f30dda
GET /releases/v5.15.4/css/free.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://oklvld.pl.ua/
Origin: http://oklvld.pl.ua
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:41:32 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3UDQGlfGaJQRyHD_WsXsJg_fTLoLLR3vEYGuwLIbhWkdYfrl4xSWzQ==
age: 72631
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=anUsB%2FmbcjEyDQJRTpZiUNG6DvOpBjo%2BRLwVfz%2F8pUElVyaE9DeT700sRcwXV57ODZ7EF1lDcFa%2BrJo8RwALFXbISx%2Be5J%2B24qsrB7rIkJntyAXX5dHTvmdlpOGw5VwzAWCE8yq1Pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a17f6fce98568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 | 104.21.26.223 | 200 OK | 27 kB |
URL GET HTTP/2ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 IP104.21.26.223:443
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php CertificateIssuerGoogle Trust Services LLC Subjectka-f.fontawesome.com Fingerprint8D:43:33:42:48:C0:F5:34:71:EC:49:69:9C:62:01:4A:6F:41:11:98 ValidityTue, 05 Mar 2024 09:23:28 GMT - Mon, 03 Jun 2024 09:23:27 GMT
File typeASCII text, with very long lines (26500) Hash76f34b71fc9fb641507ff6a822cc07f5 73ed2f8f21cd40fb496e61306acbb5849d4dbff4 6dea47458a4cd7cd7312cc780a53c62e0c8b3ccc8d0b13c1ac0ea6e3dfcecea8
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=585b051251 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://oklvld.pl.ua/
Origin: http://oklvld.pl.ua
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:41:32 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: pwKTV8b1hK7rcCe1nJTLcvr4z0gvpLr_BjU0sE5emEM3AesO02tu1Q==
age: 72631
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nQHVRs7%2FK33sqsEdZCy7cD9vIVvjNQTRHBiS70hwG8Vy%2F%2ByGJjnF0UyqCk7X%2FWzbHppUxTzigqBB9ubK5G%2FVW5o9rq50xJzMFeUKY7sAim8drhEDl%2Bfll8dDiDZ5%2FwIgexHzg90vxg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87a17f6fce9e568f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css | 104.18.11.207 | 200 OK | 145 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css IP104.18.11.207:443
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeASCII text, with very long lines (65325) Size145 kB (144877 bytes) Hash450fc463b8b1a349df717056fbb3e078 895125a4522a3b10ee7ada06ee6503587cbf95c5 2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d
GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:41:32 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"450fc463b8b1a349df717056fbb3e078"
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 10/31/2023 18:48:44
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 6f2d14e9436097e66447b103aa0360de
cdn-cache: HIT
cf-cache-status: HIT
age: 13191615
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a17f6df8b81c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js | 104.18.11.207 | 200 OK | 49 kB |
URL GET HTTP/2maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js IP104.18.11.207:443
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php CertificateIssuerGoogle Trust Services LLC Subjectbootstrapcdn.com Fingerprint57:B4:25:B9:9C:88:A1:A3:3D:F7:31:74:02:E4:D1:E0:0A:F5:11:63 ValidityWed, 27 Mar 2024 00:22:09 GMT - Tue, 25 Jun 2024 00:22:08 GMT
File typeJavaScript source, ASCII text, with very long lines (48664) Hash14d449eb8876fa55e1ef3c2cc52b0c17 a9545831803b1359cfeed47e3b4d6bae68e40e99 e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b
GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:41:32 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: US
cdn-edgestorageid: 617, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 2021-06-08 14:29:21
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 395e10f82368220a7b7579d8f1c28956
cdn-cache: HIT
cf-cache-status: HIT
age: 13455625
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 87a17f6df8bf1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| kit.fontawesome.com/585b051251.js | 172.64.147.188 | 200 OK | 12 kB |
URL GET HTTP/2kit.fontawesome.com/585b051251.js IP172.64.147.188:443
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php CertificateIssuerDigiCert Inc Subject*.fontawesome.com Fingerprint93:F9:69:8C:73:B0:08:60:65:F3:39:41:39:66:D3:2B:78:3A:6E:3D ValidityMon, 04 Dec 2023 00:00:00 GMT - Fri, 03 Jan 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (11461) Hash55d343a40c7166a79fd314f13cbb2e93 96904a849c32ca220e0aaa2ae3e81cf2b5cdf764 a1f75d6278713a84a8f28a392c77ca8a6a7c32bf14314d4a34a6ce2f06cfdf7a
GET /585b051251.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://oklvld.pl.ua
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 21:41:32 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, stale-while-revalidate=30
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: F8mj2qLeNlIkYnICdQgh
cf-cache-status: MISS
server: cloudflare
cf-ray: 87a17f6e5bcab505-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/images/bg.png | 185.104.45.37 | 200 OK | 343 kB |
URL GET HTTP/1.1oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/images/bg.png IP185.104.45.37:80 ASN#200000 Hosting Ukraine LTD
Requested byhttp://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
File typePNG image data, 1440 x 756, 8-bit/color RGBA, non-interlaced Size343 kB (342575 bytes) Hash75edc15f3146b40ed6ab2de7c0b0c18a 88c3e78b960670e4dbc07f28b78c485be325bc0c bd622cede46ca7fc8302b92f9875d25661cbc1139b78892ebe8fe875279522a6
GET /wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/images/bg.png HTTP/1.1
Host: oklvld.pl.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://oklvld.pl.ua/wp-content/plugins/backup-backup/includes/dashboard/modals/neteasyes/neteasyest/900/index.php
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 25 Apr 2024 21:41:32 GMT
Content-Type: image/png
Content-Length: 342575
Connection: keep-alive
Last-Modified: Sat, 30 Jul 2022 11:24:02 GMT
ETag: "62e514d2-53a2f"
x-ray: wnp20029:0.000/wn20029:0.000/
Accept-Ranges: bytes
|
|