301 Moved Permanently 0 B URL User Request GET HTTP/2 IP
ASN #46606 UNIFIEDLAYER-AS-1
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?p=574573 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
x-pingback: https://www.vugla.com/xmlrpc.php
x-redirect-by: WordPress
content-security-policy: upgrade-insecure-requests;
location: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
cache-control: max-age=10800
expires: Fri, 01 Dec 2023 23:23:48 GMT
vary: User-Agent
referrer-policy:
content-length: 0
content-type: text/html; charset=UTF-8
date: Fri, 01 Dec 2023 20:23:48 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.3
409 Conflict 83 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.8.3 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 409 Conflict
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
200 OK 398 B URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
Hash 4f140b946bdc4cb833896a992db68c6d
52d6c64f9c5478bb70604068a66f06283ecff968
f8f90d1cacc59cf90886948787ef5c723b8de9e41092285611f2f915b5996ef2
GET /wp-content/themes/vugla/style.css?ver=6.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Tue, 24 Mar 2020 17:57:12 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 398
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/vn-featured-image-gallery/css/style.css?ver=6.4.1
200 OK 320 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/vn-featured-image-gallery/css/style.css?ver=6.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash 199decab27dd471d35814631e71e6fea
42c2847529b6859230bc2f4e8e6432805a06148b
7279594a46188e3246db42ffd4c609fc254c6fa06bfca8b72dd82e63fa4e6385
GET /wp-content/plugins/vn-featured-image-gallery/css/style.css?ver=6.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 26 May 2014 20:39:02 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 320
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/vn-video-player/style/theme-city.css?ver=6.4.1
200 OK 733 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/vn-video-player/style/theme-city.css?ver=6.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with very long lines (2553), with no line terminators
Hash 229bf132659b3607e05296743613ecca
2f498516b73ae5f087904669ccd6b3eb57054711
73214adfea5dc8d2ab7aae66baec56aab47e70224557c08f424b80909d1acd7c
GET /wp-content/plugins/vn-video-player/style/theme-city.css?ver=6.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 26 Nov 2021 15:34:33 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 733
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/vn-video-player/style/video-js.css?ver=6.4.1
200 OK 14 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/vn-video-player/style/video-js.css?ver=6.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type Unicode text, UTF-8 text, with very long lines (5844)
Hash 514fccb15bdc95ea2c2b6fddaded8ecc
4c999194bb19b83cc85f40621fa1c74cd1a4cbf7
d86730f73982f170cb0943d0d47c3c2520743d6a3d6cf5330cde12667df675ca
GET /wp-content/plugins/vn-video-player/style/video-js.css?ver=6.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 26 Nov 2021 15:34:35 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 13761
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
200 OK 5.4 kB URL GET HTTP/2 www.vugla.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with very long lines (13479)
Hash 9ffeb32e2d9efbf8f70caabded242267
3ad0c10e501ac2a9bfa18f9cd7e700219b378738
5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:25:19 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 5422
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/responsive-lightbox/assets/swipebox/swipebox.min.css?ver=2.4.6
200 OK 1.4 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/responsive-lightbox/assets/swipebox/swipebox.min.css?ver=2.4.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with very long lines (4310), with CRLF line terminators
Hash b236fbc68ad6824d6fd4be9501a56ea5
5147f5e6779b335a45771a6a9ec9f0a1db8079ef
d49c9ad378618e0a0eb8e6fca04c13f6005e13badf79e0c977d76d851f7aa60a
GET /wp-content/plugins/responsive-lightbox/assets/swipebox/swipebox.min.css?ver=2.4.6 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 27 Nov 2023 23:58:55 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 1410
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/vn-video-player/style/vn_player_container.css?ver=6.4.1
200 OK 89 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/vn-video-player/style/vn_player_container.css?ver=6.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash b20aaffdf9d8e1f413b536edb9d1b649
0f3afd6ef6940700eb7f245629d1b79c52f45b47
9534982bd24eaa3205ac2e5a4dbd6a16a3129b70df981f422562ef3a30ade7cd
GET /wp-content/plugins/vn-video-player/style/vn_player_container.css?ver=6.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 26 Nov 2021 15:50:56 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 89
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.3
409 Conflict 83 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.3 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 409 Conflict
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.3
409 Conflict 83 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.3 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 409 Conflict
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/images/logo.png
200 OK 7.9 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/images/logo.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 254 x 96, 8-bit/color RGBA, non-interlaced\012- data
Hash f8e78d7eed20f4d77ca41cbf9700c0fa
9c40c7c5ae212e070b2aceda05b7e34de143a670
cf314f8938fb5d378e49a7e09683a206e244024b7ca3a7ec1676f22804285ca7
GET /wp-content/themes/vugla/images/logo.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 18 Nov 2013 11:35:09 GMT
accept-ranges: bytes
content-length: 7870
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/images/mobile-share/fb-messenger-64x64.png
200 OK 2.6 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/images/mobile-share/fb-messenger-64x64.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 56735b8135d0a3b1db1b1e1a34945e85
dc604b4e7030d9fe583393b94f1811fe69628107
7ef39fd53ffb21c300f78615faa8eab8eb1163ad1b70843efa4550a0bda364bc
GET /wp-content/themes/vugla/images/mobile-share/fb-messenger-64x64.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Wed, 26 Jul 2017 12:44:40 GMT
accept-ranges: bytes
content-length: 2562
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/facebook.png
200 OK 584 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/facebook.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 114d84e23ab95df71589ab5e67b93b85
2270334f4b83486ceaab53133e4706537c16f38a
1353c448068301ee8534bd1d3c8eb214863afa0b9f716222dfe93e2739cffac2
GET /wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/facebook.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:26:48 GMT
accept-ranges: bytes
content-length: 584
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2021/11/zagreb-trg-bana-jelacica-2-150x150.jpg
200 OK 7.0 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2021/11/zagreb-trg-bana-jelacica-2-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 1fc23d41bb894274b7cf389d2bfcf57c
b752e2962b4feea7ae0eaf899b0c6b4e818c413d
8f5be453ac83ca763b56a8708ca2232490946e1620c1cb20f37947d376411e71
GET /wp-content/uploads/2021/11/zagreb-trg-bana-jelacica-2-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 29 Nov 2021 17:20:28 GMT
accept-ranges: bytes
content-length: 6982
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/responsive-lightbox/assets/infinitescroll/infinite-scroll.pkgd.min.js?ver=6.4.1
200 OK 8.7 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/responsive-lightbox/assets/infinitescroll/infinite-scroll.pkgd.min.js?ver=6.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with very long lines (17739), with CRLF line terminators
Hash 3229aa93c44fa4628707e80959a97bc1
5a2d4dbc4d1df02e7a386489e7b5c5a9e22dd40f
095834cc86bd018fdb4a9e31c99f9f96904b819be2b9dc16b3390383288d4d90
GET /wp-content/plugins/responsive-lightbox/assets/infinitescroll/infinite-scroll.pkgd.min.js?ver=6.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 27 Nov 2023 23:58:55 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 8747
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2021/11/hvar-webcam-150x150.jpg
200 OK 7.7 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2021/11/hvar-webcam-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 62774f92064e395fda65b50793c90f6d
9f53f11b2a92302becdcc5f0f46ac07468ea7510
2f86b046ac5c1148f0e69510d44889d7ddb1bbaa1d3f2d4606e9fd93e4c0de82
GET /wp-content/uploads/2021/11/hvar-webcam-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 25 Nov 2021 11:02:45 GMT
accept-ranges: bytes
content-length: 7651
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/linkedin.png
200 OK 725 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/linkedin.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 5da9fb18cfc9264a6e95b4a8bf4d2fcb
7bb78a36bc621ea268a0dad519c9c5c539e751ce
c6e399926b1aeb3634681cf7eb6af4e355325a6b2b6f8a89ad65ece3523fab18
GET /wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/linkedin.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:26:48 GMT
accept-ranges: bytes
content-length: 725
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/mail.png
200 OK 1.7 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/mail.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 42bec42b54ef1bb6bb9596efa815973d
88145ca02b72936eb430e818cd7a80f189ca9166
154a5b712eedff5cdee156292d8795dd139a350c7ed09982e5faec55a0ab2f42
GET /wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/mail.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:26:48 GMT
accept-ranges: bytes
content-length: 1659
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2021/11/beograd-most-miladina-zivica-webcam-150x150.jpg
200 OK 5.5 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2021/11/beograd-most-miladina-zivica-webcam-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 3fddda90683b7416f197bf988102840f
267cd52c70c992251e044b48ac04dcae61114c93
669bd143aeb2909494a8efa6031423535f6d79c5c0ed0c4f820ec6a064b3ef90
GET /wp-content/uploads/2021/11/beograd-most-miladina-zivica-webcam-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 25 Nov 2021 11:05:33 GMT
accept-ranges: bytes
content-length: 5510
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/images/mobile-share/whatsapp-64x64.png
200 OK 5.9 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/images/mobile-share/whatsapp-64x64.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 616a93e26f2d9261cd8412a8741f7be8
5fbfd88e502bcc766a9c9ef1d1751ed16ce1197c
306accb5ad46635aeb9481a9bc934c14ae474e924ec52b6673141c5acacd800d
GET /wp-content/themes/vugla/images/mobile-share/whatsapp-64x64.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 22 Dec 2016 10:00:28 GMT
accept-ranges: bytes
content-length: 5880
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/plusone.js
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
Fingerprint06:87:C0:63:02:21:98:02:BD:FC:A0:11:93:E9:3A:9F:51:21:06:D8
ValidityMon, 23 Oct 2023 11:25:10 GMT - Mon, 15 Jan 2024 11:25:09 GMT
File type ASCII text, with very long lines (2664)
Hash 12476fdc6b8599d03eac729748337611
7a15dc04ad6e77026bf45927b78247411e3e0466
c5be6532f19ca90fb5966ed89be694f2bc2cded1e443d3489467cb28cd69af43
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 21930
date: Fri, 01 Dec 2023 20:23:50 GMT
expires: Fri, 01 Dec 2023 20:23:50 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "b82ec1e6cb6f99ed"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=t3wHmYRISW1RKhTu-C_bEWrSOSoYMygWggggdQNp--2rP1wvHJ11q5DEAUihStIzNxS9dW8GHUyqSdQ2q6JYm6-kvGSzi9AzMhkAo50URhRBlA5WUbS-CXubEcLM_-OmJSnS9a_Qu4TRwNTBQ8qN3_G6VGrDEJjm7Q9OktcNyyQ; expires=Sat, 01-Jun-2024 20:23:50 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/reddit.png
200 OK 2.3 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/reddit.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 91d33236832e22fe9743606623bd001a
d7101e60e49e86dbe1f34876228aa6831ad568f7
5571cdc5e0d90001474bf488c142929a02a39e55a4a7f61c44d1f94a4087eda1
GET /wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/reddit.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:26:48 GMT
accept-ranges: bytes
content-length: 2328
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/vn-video-player/js_scripts/jquery.fitvids.js?ver=0.1
200 OK 1.4 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/vn-video-player/js_scripts/jquery.fitvids.js?ver=0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type HTML document, ASCII text
Hash 6755415003869bd599c3fae8e9792027
57946a22c79654014eb00fb548f727d302221873
07f79fbda35a2bf03f2940978670a2a53cf21e490ecce887bf92fc2e3f359293
GET /wp-content/plugins/vn-video-player/js_scripts/jquery.fitvids.js?ver=0.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 26 Nov 2021 15:34:28 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 1389
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2023/12/zivotinje-kako-su-39-rok-zvezde-39-pande-ostale-bez-ljubavne-price.jpg
200 OK 16 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2023/12/zivotinje-kako-su-39-rok-zvezde-39-pande-ostale-bez-ljubavne-price.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=3, xresolution=50, yresolution=58, resolutionunit=2], baseline, precision 8, 320x180, components 3\012- data
Hash 5147e42fc6edd7b965161a3ef6e6179d
3876b2ae7f66a9e74421dcd51747b09a009ebb71
f26cd12b51fcab079129c832ee9cedaa51294edb14b93cc749cae74b56b62463
GET /wp-content/uploads/2023/12/zivotinje-kako-su-39-rok-zvezde-39-pande-ostale-bez-ljubavne-price.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 01 Dec 2023 09:55:19 GMT
accept-ranges: bytes
content-length: 15801
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2023/12/backa-west-ham-golovi-30-11-2023-150x150.jpg
200 OK 4.2 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2023/12/backa-west-ham-golovi-30-11-2023-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Hash d2944a2988ea437dd47e366c35318287
bb2ce83b81e69d624aebf85a53d328b79e794fe0
3e810cdaa1d877d350dcc84007411d3df081852910972b4cbae76eccbc14a39d
GET /wp-content/uploads/2023/12/backa-west-ham-golovi-30-11-2023-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 30 Nov 2023 23:14:23 GMT
accept-ranges: bytes
content-length: 4163
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2023/11/mallorca-cadiz-golovi-29-11-2023-150x150.jpg
200 OK 3.2 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2023/11/mallorca-cadiz-golovi-29-11-2023-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Hash c4ac3f2f10ead27a6c470fae8fc5c5e7
33d7f8215ac9949c54459676bf8048df6d51d73b
ba12aca2f09ad73a05991204f75c235aedee8fd2265f66d6d5e26384cea71e34
GET /wp-content/uploads/2023/11/mallorca-cadiz-golovi-29-11-2023-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 30 Nov 2023 19:26:29 GMT
accept-ranges: bytes
content-length: 3206
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2023/11/bayern-munich-fc-copenhagen-golovi-29-11-2023-150x150.jpg
200 OK 6.5 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2023/11/bayern-munich-fc-copenhagen-golovi-29-11-2023-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Hash 7b7ac3fe315dc9eb4b7939372ed450e9
6a2a2a5470e3648a563cce65ac6d1cd6ac8428ee
54d808ec3b10ea6b3b241b4703caabe1170aa6d07e91c54cb0b68784478ad51d
GET /wp-content/uploads/2023/11/bayern-munich-fc-copenhagen-golovi-29-11-2023-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 30 Nov 2023 19:26:18 GMT
accept-ranges: bytes
content-length: 6455
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2021/11/las-vegas-webcam-150x150.jpg
200 OK 6.2 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2021/11/las-vegas-webcam-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 7232d222adbf508fe855c86ec73f32bd
802aff30255dd767e5829d7a3100e8be30d69675
db2852d9d1823c9a769e60dd23aab9df1abad22a0077d9f8c2e5e209e8d630a8
GET /wp-content/uploads/2021/11/las-vegas-webcam-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Wed, 24 Nov 2021 17:47:32 GMT
accept-ranges: bytes
content-length: 6150
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/responsive-lightbox/js/front.js?ver=2.4.6
200 OK 8.6 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/responsive-lightbox/js/front.js?ver=2.4.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type Unicode text, UTF-8 text, with very long lines (629), with CRLF line terminators
Hash 68f8af044f685b84c7d49ac2356acabf
585889874b36224e980f4d285044ec0fb478dc7c
9fe6a07f596d507305d1480e6bb301d04cbf5ef8660b24b9fa411e39607a7ab5
GET /wp-content/plugins/responsive-lightbox/js/front.js?ver=2.4.6 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 27 Nov 2023 23:58:55 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 8560
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2023/11/real-sociedad-salzburg-golovi-29-11-2023-150x150.jpg
200 OK 5.4 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2023/11/real-sociedad-salzburg-golovi-29-11-2023-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Hash 3dd0b6a881bcbf037b6fc140e05dc03e
88a53f3308d933fe32230071702ebd547d7ea65f
2acd2ffefda761e9164ef6e6107caed96686c26e1af57498ba71d448c6c1766d
GET /wp-content/uploads/2023/11/real-sociedad-salzburg-golovi-29-11-2023-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 30 Nov 2023 19:26:27 GMT
accept-ranges: bytes
content-length: 5353
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/vn-video-player/js_scripts/vn_player_fit.js?ver=0.1
200 OK 106 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/vn-video-player/js_scripts/vn_player_fit.js?ver=0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash 64829824ee643f09fb3821dc49b3089a
446608ff9f4128b9503476135a8c28599f8d5c2e
0b967c52b8e899c4266110c97fa50018d61ccf1365144d16f09f901523d48c95
GET /wp-content/plugins/vn-video-player/js_scripts/vn_player_fit.js?ver=0.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 26 Nov 2021 15:34:31 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 106
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-7NCJ73THPT
200 OK 86 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-7NCJ73THPT
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (3034)
Hash 210ba9286974f8f27d255054f707c2f7
c81b45b1bfdd2bf9a1ec824ef97c908483948ded
4e73dc2ae2f5be4cfb44779d6f708dce8a98d3c16904c41d5864fc8c3245075d
GET /gtag/js?id=G-7NCJ73THPT HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 01 Dec 2023 20:23:50 GMT
expires: Fri, 01 Dec 2023 20:23:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85508
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/tumblr.png
200 OK 861 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/tumblr.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 64 x 64, 8-bit colormap, non-interlaced\012- data
Hash 1d8dab6f1066b94b74f5611a8c918681
4e0edc7ba1ada49418772d8d581cd3d38518d490
bac6d2c8418e543d967d6e57710eda1ca4318ddd917c19a28fd63b4240e8d150
GET /wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/tumblr.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:26:48 GMT
accept-ranges: bytes
content-length: 861
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2023/11/benfica-inter-golovi-29-11-2023-150x150.jpg
200 OK 4.6 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2023/11/benfica-inter-golovi-29-11-2023-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Hash f25ddb130bb8a894d4b33c0b2dc7f1c1
c385eb5107fcb92146738fe1846ce4b33cd41659
3c03f20d9971177deee5a25b222a9af1dc8eb62a5c4b24fbde4ac84ba7360421
GET /wp-content/uploads/2023/11/benfica-inter-golovi-29-11-2023-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 30 Nov 2023 19:26:20 GMT
accept-ranges: bytes
content-length: 4550
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/images/mobile-share/viber-64x64.png
200 OK 7.1 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/images/mobile-share/viber-64x64.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash de186be4358ae6892385bcb78cc79b01
d933c306c857b9e84e321c4756d384a6e8093da2
c912b95fc0e537dbd5d103172a9ad3df2a3c8ad4ce5e6d6cebbaf31d7f6d58be
GET /wp-content/themes/vugla/images/mobile-share/viber-64x64.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 22 Dec 2016 10:00:29 GMT
accept-ranges: bytes
content-length: 7120
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/responsive-lightbox/assets/swipebox/jquery.swipebox.min.js?ver=2.4.6
200 OK 4.7 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/responsive-lightbox/assets/swipebox/jquery.swipebox.min.js?ver=2.4.6
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with very long lines (12917), with CRLF line terminators
Hash 416d2c5e5425c640a7d63f25e0376fd6
a95b218161d94bdb148d108aedf065b4a4762045
b875bead01dfa1b02a553e8efda0f3a65d39da24f19ad37af95f06795eee76dc
GET /wp-content/plugins/responsive-lightbox/assets/swipebox/jquery.swipebox.min.js?ver=2.4.6 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 27 Nov 2023 23:58:55 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 4708
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/twitter.png
200 OK 1.8 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/twitter.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 9cb3d67f468539abb72395dc73934190
9928de37e21649c1799e3287a13f897a34aab5e1
04a457e988270cb1dc76bd57ac8e62fddf02c02b618a1ac6cb0880b93633f5e0
GET /wp-content/plugins/social-media-feather/synved-social/image/social/regular/64x64/twitter.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:26:48 GMT
accept-ranges: bytes
content-length: 1762
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2021/11/pula-veruda-1-webcam-150x150.jpg
200 OK 5.3 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2021/11/pula-veruda-1-webcam-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash 545ec6f4f211e438ebfa5d45422b8a6a
a0b51351671fa7f76b0053283a1f7dd38e728008
c36775e46bd960eb1d8c52af2a281dbd404becc78547155debd5faa8f65f775b
GET /wp-content/uploads/2021/11/pula-veruda-1-webcam-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Wed, 24 Nov 2021 17:11:32 GMT
accept-ranges: bytes
content-length: 5261
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2023/11/real-madrid-napoli-golovi-29-11-2023-150x150.jpg
200 OK 7.0 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2023/11/real-madrid-napoli-golovi-29-11-2023-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Hash 4776d86e08cc2943fbe3b675ec2c3727
692544e5a085db465793d417ab2c5e74f3551d73
9635934bdad0b3ce053f55c3dc84166f64e4a3ca982589117b9b79a01989d46e
GET /wp-content/uploads/2023/11/real-madrid-napoli-golovi-29-11-2023-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 30 Nov 2023 19:26:24 GMT
accept-ranges: bytes
content-length: 7027
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/js/libs/modernizr-2.0.6.min.js?ver=6.4.1
200 OK 7.0 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/js/libs/modernizr-2.0.6.min.js?ver=6.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type HTML document, ASCII text, with very long lines (14641), with CRLF line terminators
Hash ad955f14cdcc21d58014f25ab7c8d46d
8915b95d672d54be6fb01a239088aba305d4798e
d6304e162f8fe5054a4c5430d2f1d78ea2ad54c1ff61ea708d148bf385312407
GET /wp-content/themes/vugla/js/libs/modernizr-2.0.6.min.js?ver=6.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 12:00:08 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 6964
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2021/11/venezia-campo-santa-maria-formosa-webcam-150x150.jpg
200 OK 6.9 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2021/11/venezia-campo-santa-maria-formosa-webcam-150x150.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 150x150, components 3\012- data
Hash c74f31b086db5e5227fd0f55ea243323
b6af0bcea2b75890836d2f8d642cdd5422f77d3f
4369ba2bcee1b40fd34f118e2fe8e91b1de1039ed28d203c051c3ec22aefa92b
GET /wp-content/uploads/2021/11/venezia-campo-santa-maria-formosa-webcam-150x150.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Sun, 28 Nov 2021 17:36:52 GMT
accept-ranges: bytes
content-length: 6911
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:50 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-includes/js/underscore.min.js?ver=1.13.4
200 OK 8.3 kB URL GET HTTP/2 www.vugla.com/wp-includes/js/underscore.min.js?ver=1.13.4
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with very long lines (18798)
Hash f88d5720bb454ed5d204cbdb56901f6b
f1952292fde4b15936e9aac16b2b9896684db95b
726b820e44f6ab90ad991d30a4bf26d3a5d71493cbcd1fb1efd0d14e89b9df2a
GET /wp-includes/js/underscore.min.js?ver=1.13.4 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:25:19 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 8305
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/style_reset.css
200 OK 1.2 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/style_reset.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash b5ae6c0ccd961d29a2924b03b0cbdd6e
3293dc40aa870c1cf79180eb7bd5c2ff28f3bd0a
0838fff76cfa3bad87963e64a610ea8d60b2dc8d0781a7531a2385f65de1ab2f
GET /wp-content/themes/vugla/css/style_reset.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:52:34 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 1152
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/elastislide.css
200 OK 674 B URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/elastislide.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash fac0ce1d7bcbe2001f963e204b03b3a4
fe650403bcbc74567e384eb3762c874835f6cad1
d8dcd83dfb6275b55ae8e495f6924dcfc52024a52f5639446a00de846ec7c7b9
GET /wp-content/themes/vugla/css/elastislide.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:52:21 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 674
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/style_400.css
200 OK 2.4 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/style_400.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash 1150741460f65df53d2a23c598e5807c
5520fd0a709fdfdc80089452403dbfa49b79f7d4
e0e19f2d1b42abb0a12a95da1488a3fb300ceeb34984bc9e321063184acb019b
GET /wp-content/themes/vugla/css/style_400.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:52:30 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 2412
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/style_768.css
200 OK 2.5 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/style_768.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with very long lines (408), with CRLF line terminators
Hash 14b717ed0c77c605f84b5b9a6b9892e9
5723bca38e18b8155b26f923590a05657911a377
6f37f5624b7bc60317a9c37a473fdf7dc34474d5f52cf169a7d52b35ca1dc0dd
GET /wp-content/themes/vugla/css/style_768.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:52:32 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 2538
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/style_320.css
200 OK 2.4 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/style_320.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash cc437b9ea4ed072bf7636ec9013f026d
df8db436e5193d474b97364dc0cd532a9b390fe5
4e92c5bc2c3f90209e1bec52f50461d8c04d82a539296918f0db0c61af63aab2
GET /wp-content/themes/vugla/css/style_320.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:52:29 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 2413
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/flexslider.css
200 OK 1.5 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/flexslider.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash aed0d9c2792c1ca777bfce04eb08ae7a
64e98271e4539dbf8819fa9d801017423c9bc30b
7f7b09426068a9bacddeefcf29f89063307fdc903ac45a569853b8c452d9b62d
GET /wp-content/themes/vugla/css/flexslider.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Thu, 08 May 2014 09:18:47 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 1526
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/style_1024.css
200 OK 2.3 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/style_1024.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash 7f4d3aa769cc8bb0e3c77745ff5c9d64
2da3458d48663a397a5a42c3bb52777bc5889dc0
7a6c4ca634ef663c6a3887df843fc04c40632ff46c53eb9f7d35bfcde21453b4
GET /wp-content/themes/vugla/css/style_1024.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:52:28 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 2267
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/tabber.css
200 OK 1.7 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/tabber.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash a3e36a4db7b488bd984dd17c6e17cf63
33e7b11f7e1f149f954b6d938db9e36599816e8a
3609900b90f9835e1525c38bb6b1bcbffea0a14894799e54a07c2a9df09cb03d
GET /wp-content/themes/vugla/css/tabber.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:52:36 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 1710
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/wpp.css
200 OK 357 B URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/wpp.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with CRLF line terminators
Hash 6b44660f121f565e2aab91b7b321ff28
62628718b7edeaccc74d1943d36bc1e0c9d16512
467aa063b813fd2fc1b3ebabc45d6e840d807dad90c169f0ee12f93bcf667851
GET /wp-content/themes/vugla/css/wpp.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:52:37 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-length: 357
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/vn-video-player/js_scripts/video.min.js?ver=0.1
200 OK 213 kB URL GET HTTP/2 www.vugla.com/wp-content/plugins/vn-video-player/js_scripts/video.min.js?ver=0.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type gzip compressed data, from Unix\012- data
Size 213 kB (212851 bytes)
Hash 652e963f909f4451ec3c1878fa110aec
26d52c2abcd375fcac8682a466d7817674a29fee
bf74d6519b7f214180883770cc68b680690aa5868c55688e2104d2b74ebbee40
GET /wp-content/plugins/vn-video-player/js_scripts/video.min.js?ver=0.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 26 Nov 2021 15:34:30 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
pl16411290.alternativecpmgate.com/c9123167a2366d360cd4d80dad2ac358/invoke.js
200 OK 9.3 kB URL GET HTTP/1.1 pl16411290.alternativecpmgate.com/c9123167a2366d360cd4d80dad2ac358/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectalternativecpmgate.com
FingerprintC9:1F:74:2C:C9:F2:3A:E6:2D:4F:6C:DC:DD:18:6E:93:10:75:9E:24
ValidityFri, 20 Oct 2023 06:02:37 GMT - Thu, 18 Jan 2024 06:02:36 GMT
File type Unicode text, UTF-8 text, with very long lines (25067), with no line terminators
Hash bd979a1a07bb541e2edfbe8a50ca4aa6
46f6d137280f6170219c6f493e6eed270c20b80c
df5d6678b1243a3cabae669d7dd8f73048dbffbff1f5a2fb302762fae1569a0e
GET /c9123167a2366d360cd4d80dad2ac358/invoke.js HTTP/1.1
Host: pl16411290.alternativecpmgate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 20:23:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d9845f6c5a7b5679b6aa8ecf4207dd15
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.kursnalista.co/banners/banners.js
200 OK 1.3 kB URL GET HTTP/2 www.kursnalista.co/banners/banners.js
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.kursnalista.co
Fingerprint1C:D4:9B:DE:4F:51:D3:F0:32:B2:6C:A1:1C:03:E2:3E:18:FC:D4:2A
ValidityMon, 20 Nov 2023 10:01:16 GMT - Sun, 18 Feb 2024 10:01:15 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (394), with CRLF line terminators
Hash 0fa58c243ecc9c6ff829da27563c78c4
771e757dcaddc90a127b557e6a8a69b9dfe4767d
4631955f687225007a1227be7e662f1f45798c13a573f70670e748ff50aa194b
GET /banners/banners.js HTTP/1.1
Host: www.kursnalista.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
last-modified: Sun, 10 Jul 2022 10:44:43 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 1261
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:51 GMT
server: Apache
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 141773
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 141773
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
200 OK 35 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data
Hash dd986ff1050050613be051863773d677
51a12487fd51cc02ca54a984f82d63318807ca2e
d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:36:49 GMT
expires: Thu, 28 Nov 2024 21:36:49 GMT
cache-control: public, max-age=31536000
age: 168422
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 50 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 50368, version 1.0\012- data
Hash 4facfd6ff39e147b7e39c4b1abe4117d
0f7c0d978c209d21eb3f55950fc43e77c196ec3b
a246c4de8a0f1f1fdb6ee52565018dc341063aa9efe8481034bc3ef7d697e334
GET /s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 50368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:48:09 GMT
expires: Fri, 29 Nov 2024 04:48:09 GMT
cache-control: public, max-age=31536000
age: 142542
last-modified: Thu, 14 Sep 2023 01:04:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/images/search-arrow.png
200 OK 3.1 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/images/search-arrow.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 75 x 64, 8-bit/color RGBA, non-interlaced\012- data
Hash 3f8933cdf4d27e317eb59959257f8c7a
b16e414fcb1561603cbf4ac404ec8b6fae1563ff
167925a8f225d7fc340317265409496b2d90e4313bd7d70bca4262bb1477eaf0
GET /wp-content/themes/vugla/images/search-arrow.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/css/style_main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:53:13 GMT
accept-ranges: bytes
content-length: 3075
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:51 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:51 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/images/preloader.gif
200 OK 1.7 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/images/preloader.gif
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type GIF image data, version 89a, 16 x 16\012- data
Hash dd6b7b0bf5c3af22499abc0a9ee1e1b2
e8c0018145d616fac4deb460d9c1d9c9dd4d3302
0eddaab3b8cb0b15d81d62e5ae5960329c3e576ea78dc321b20734ab20271847
GET /wp-content/themes/vugla/images/preloader.gif HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/css/style_main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:53:08 GMT
accept-ranges: bytes
content-length: 1737
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:51 GMT
referrer-policy:
pragma: public
content-type: image/gif
date: Fri, 01 Dec 2023 20:23:51 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
200 OK 0 B URL HEAD HTTP/2 www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-pingback: https://www.vugla.com/xmlrpc.php
link: <https://www.vugla.com/wp-json/>; rel="https://api.w.org/", <https://www.vugla.com/wp-json/wp/v2/posts/574573>; rel="alternate"; type="application/json", <https://www.vugla.com/?p=574573>; rel=shortlink
content-security-policy: upgrade-insecure-requests;
cache-control: max-age=10800
expires: Fri, 01 Dec 2023 23:23:51 GMT
vary: User-Agent
referrer-policy:
content-type: text/html; charset=UTF-8
date: Fri, 01 Dec 2023 20:23:51 GMT
server: Apache
X-Firefox-Spdy: h2
pl15560907.passtechusa.com/d1/37/02/d137022925bcc2a680f8a4476ff94144.js
200 OK 15 kB URL GET HTTP/1.1 pl15560907.passtechusa.com/d1/37/02/d137022925bcc2a680f8a4476ff94144.js
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectpasstechusa.com
FingerprintF4:5F:CD:11:B9:E4:E0:B6:E3:01:2A:A2:FB:0E:11:26:44:B4:D0:9D
ValidityFri, 13 Oct 2023 07:12:41 GMT - Thu, 11 Jan 2024 07:12:40 GMT
File type ASCII text, with very long lines (42790), with no line terminators
Hash d57d10b07d3e1fa7a1b52fd891483d81
cae3e2e765509b001eb69db52908723c6c441b78
07075c8188860c165386f127e566493c650752354ba55fbc461566d9c62c6c6f
GET /d1/37/02/d137022925bcc2a680f8a4476ff94144.js HTTP/1.1
Host: pl15560907.passtechusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a91c2717ddf048e401ef555bf41bf2d2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
200 OK 0 B URL HEAD HTTP/2 www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
HEAD /zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
x-pingback: https://www.vugla.com/xmlrpc.php
link: <https://www.vugla.com/wp-json/>; rel="https://api.w.org/", <https://www.vugla.com/wp-json/wp/v2/posts/574573>; rel="alternate"; type="application/json", <https://www.vugla.com/?p=574573>; rel=shortlink
content-security-policy: upgrade-insecure-requests;
cache-control: max-age=10800
expires: Fri, 01 Dec 2023 23:23:51 GMT
vary: User-Agent
referrer-policy:
content-type: text/html; charset=UTF-8
date: Fri, 01 Dec 2023 20:23:51 GMT
server: Apache
X-Firefox-Spdy: h2
eehuzaih.com/400/5005565
200 OK 35 kB IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecteehuzaih.com
FingerprintAC:55:E9:5B:5B:87:BF:89:7C:BE:E0:77:14:BE:B7:B4:16:AB:70:5A
ValiditySun, 12 Nov 2023 08:38:54 GMT - Sat, 10 Feb 2024 08:38:53 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 62fbee44ed9cca0fe577949272352a44
00346350c2529e333de308c0208f31a1bdb3486c
60023a6d7d2f933c6f26b2e064842b0f488cba61cc66f48488da5d66735b6d6c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /400/5005565 HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:51 GMT
content-type: application/javascript
x-trace-id: 025c110ed364edc224e530cbef3a2762
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=01182d7aed3b4fef8c59af58a596d388; expires=Sat, 30 Nov 2024 20:23:51 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
www.variouscreativeformats.com/c3b6bab9a3e6c622d733121998e0014d/invoke.js
200 OK 11 kB URL GET HTTP/1.1 www.variouscreativeformats.com/c3b6bab9a3e6c622d733121998e0014d/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.variouscreativeformats.com
Fingerprint8B:21:A3:61:01:C7:2D:29:AF:11:C7:A7:A5:5E:E5:FD:AF:0E:05:43
ValidityMon, 27 Nov 2023 07:10:34 GMT - Sun, 25 Feb 2024 07:10:33 GMT
File type exported SGML document, ASCII text, with very long lines (29643), with no line terminators
Hash 223406d9dbf6d31ee7d9236d1c95ea29
8a45024df7b5013212b1fd369c5670655bd55b66
8eb1cd23b38e67fb1ec812debb06ff9f68891aeecaf2edeba8c0a73081c27ed0
GET /c3b6bab9a3e6c622d733121998e0014d/invoke.js HTTP/1.1
Host: www.variouscreativeformats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 20:23:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 67a21bb45807e6456e5fbcba2f515b52
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 5b7b378f2f2e1279be0c0f57ceb0cf93
f03e52739a3a7e746036c3b8b7c42015632a931a
a801964dabaa860b97b788b0dd71cc601c6b38279cf522be462c816352ce1265
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Fri, 01 Dec 2023 20:23:52 GMT
Last-Modified: Fri, 01 Dec 2023 18:43:52 GMT
Server: ECAcc (ska/F73C)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: x7EGqATOKIkAEqXIWY5Wze-spfc7X1YufZ-7YPQc6GYc-PRKCRkmXA==
Age: 6000
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
200 OK 35 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 35120, version 1.0\012- data
Hash dd986ff1050050613be051863773d677
51a12487fd51cc02ca54a984f82d63318807ca2e
d9784dbf11886ea032ffbd00f499d333519babe001eacc19df7ab89de17bec47
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35120
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:36:49 GMT
expires: Thu, 28 Nov 2024 21:36:49 GMT
cache-control: public, max-age=31536000
age: 168423
last-modified: Thu, 14 Sep 2023 01:03:47 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 50 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 50368, version 1.0\012- data
Hash 4facfd6ff39e147b7e39c4b1abe4117d
0f7c0d978c209d21eb3f55950fc43e77c196ec3b
a246c4de8a0f1f1fdb6ee52565018dc341063aa9efe8481034bc3ef7d697e334
GET /s/opensans/v36/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 50368
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:48:09 GMT
expires: Fri, 29 Nov 2024 04:48:09 GMT
cache-control: public, max-age=31536000
age: 142543
last-modified: Thu, 14 Sep 2023 01:04:20 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 0d160cc89869905fe3ecacb479ad6e33
5dad8de8840fe36c258a201a843f73ea4a7770f3
f9579f3da0ea87e4b77529945714b25e3c981d240285069878eb70df1d352187
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.vugla.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=aa147afb-384f-420d-85a5-82ce2ce5a288:3:1; expires=Mon, 28 Nov 2033 20:23:52 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
my.rtmark.net/gid.js
200 OK 65 B IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash 978aa30287aab0f796c6847bbe637e36
3f5f11fe581c1e33e468f2c5ab5da73a338d7c26
316809d3f02fb80de3fe6cbc850e45f4176469057203de1d4f5529f4620bd095
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.vugla.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=fc6b62f817f7473a906e4e9a39f79ea0; expires=Sat, 30 Nov 2024 20:23:52 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL POST HTTP/1.1 fleraprt.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerSectigo Limited
Subjectfleraprt.com
FingerprintA4:AF:A0:00:99:C9:85:E5:30:F6:F3:F2:B5:4F:AE:4F:D0:46:74:A9
ValidityMon, 09 Jan 2023 00:00:00 GMT - Sun, 14 Jan 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: fleraprt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1724
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Fri, 01 Dec 2023 20:24:30 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://www.vugla.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
www.vugla.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.3
409 Conflict 83 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.8.3 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Cookie: _ga_7NCJ73THPT=GS1.1.1701462236.1.0.1701462236.60.0.0; _ga=GA1.1.463628786.1701462236
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 409 Conflict
date: Fri, 01 Dec 2023 20:23:52 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/js/scripts.js?ver=6.4.1
200 OK 31 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/js/scripts.js?ver=6.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type gzip compressed data, from Unix\012- data
Hash 2272f63467858a44e426913d59e79d83
97f3a795ba2106df931d34a50f9bef8426b14ed4
1545bdef6bba8c6baf420eaca62103d48e1fae1f85a4c6622cadc5d4a2087c31
GET /wp-content/themes/vugla/js/scripts.js?ver=6.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 12:00:03 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 0d160cc89869905fe3ecacb479ad6e33
5dad8de8840fe36c258a201a843f73ea4a7770f3
f9579f3da0ea87e4b77529945714b25e3c981d240285069878eb70df1d352187
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: uid_id2=aa147afb-384f-420d-85a5-82ce2ce5a288:3:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://www.vugla.com
vary: Origin
access-control-allow-credentials: true
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/images/top-arrow.png
200 OK 305 B URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/images/top-arrow.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 50 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 1fe20be2c98304e84623d10905435835
7ba0264f96984d92cfe0750c802f9af1ee7cb88b
1c3cbd61a972428028066c1e9abcfa7c0ef37d3b1de39d7b09455177a94eec52
GET /wp-content/themes/vugla/images/top-arrow.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/css/style_main.css
Cookie: _ga_7NCJ73THPT=GS1.1.1701462236.1.0.1701462236.60.0.0; _ga=GA1.1.463628786.1701462236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:53:25 GMT
accept-ranges: bytes
content-length: 305
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:52 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:52 GMT
server: Apache
X-Firefox-Spdy: h2
vaugroar.com/zone?pub=0&zone_id=1548391&is_mobile=false&domain=www.vugla.com&var=&ymid=&var_3=&tg=0&sw=3.1.471
200 OK 972 B URL GET HTTP/2 vaugroar.com/zone?pub=0&zone_id=1548391&is_mobile=false&domain=www.vugla.com&var=&ymid=&var_3=&tg=0&sw=3.1.471
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectvaugroar.com
FingerprintF5:48:7D:7C:B6:28:8D:55:D3:7D:CF:03:2F:84:BE:B7:FD:20:F0:EE
ValiditySun, 12 Nov 2023 05:15:08 GMT - Sat, 10 Feb 2024 05:15:07 GMT
File type JSON data\012- , ASCII text, with very long lines (971)
Hash 64f047fe127c40083700b04d3811ca27
8f6e71715f3ae8766c33ae08d590fdc202bd865d
0dd4bfd4e574ecf2df30bcd49a6afbc84ffe9a14227f17502561dfca63a51ac7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /zone?pub=0&zone_id=1548391&is_mobile=false&domain=www.vugla.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: application/json; charset=utf-8
content-length: 972
x-trace-id: 69a7b12e96e68edb7f66ea0010888440
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
eehuzaih.com/500/5005565?excludes=&oaid=fc6b62f817f7473a906e4e9a39f79ea0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 0 B URL GET HTTP/2 eehuzaih.com/500/5005565?excludes=&oaid=fc6b62f817f7473a906e4e9a39f79ea0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecteehuzaih.com
FingerprintAC:55:E9:5B:5B:87:BF:89:7C:BE:E0:77:14:BE:B7:B4:16:AB:70:5A
ValiditySun, 12 Nov 2023 08:38:54 GMT - Sat, 10 Feb 2024 08:38:53 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /500/5005565?excludes=&oaid=fc6b62f817f7473a906e4e9a39f79ea0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://www.vugla.com/
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:52 GMT
content-length: 0
allow: GET, OPTIONS
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://www.vugla.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-allow-credentials: true
access-control-max-age: 600
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
tharbadir.com/2?z=1347951
200 OK 16 kB URL GET HTTP/2 tharbadir.com/2?z=1347951
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecttharbadir.com
FingerprintA5:91:BD:23:83:6F:FE:A6:06:78:AE:E7:58:60:8E:74:B2:BA:C3:64
ValidityThu, 21 Sep 2023 16:36:00 GMT - Wed, 20 Dec 2023 16:35:59 GMT
File type ASCII text, with very long lines (41880)
Hash ba0dd3ea6eec9ca6464177053d3bcfed
a5e58bf2799e21df6f951e0b24f963a4a9c1bf27
e0735c3a840dd4ba2c1d51cdc5e1eac581976f82eb7f725f2a2c5f49cfb48e6b
GET /2?z=1347951 HTTP/1.1
Host: tharbadir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:50 GMT
content-type: text/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 3c91f5599561eb5bcb4df234981af250
access-control-expose-headers: X-Sc
x-sc: bf5nEK284VtHN75wUNYPqXAZ2wCkjfpmx0og4XbuA_kon8M51BRS0gbxus4gw3ID-ELQi3YoKu7gf0oBmxuXfcU1CiY=
set-cookie: scm=1; expires=Sat, 30 Nov 2024 20:23:50 GMT; secure; SameSite=None
OAID=e456aec1966749a8928819fc64f26b4d; expires=Sat, 30 Nov 2024 20:23:50 GMT; secure; SameSite=None
oaidts=1701462230; expires=Sat, 30 Nov 2024 20:23:50 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
www.vugla.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.3
409 Conflict 83 B URL GET HTTP/2 www.vugla.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.3
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type HTML document, ASCII text, with no line terminators
Hash 26267cd8990f15d3bbea71684a6d5995
ac3b38cf3fe0e112bb6aeb7e05226b7133575d93
769e8ab745a0fe4bf811036e75a8630e38c50a18cb3e24d539ce4a0722c7c85e
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.8.3 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Cookie: _ga_7NCJ73THPT=GS1.1.1701462236.1.0.1701462236.60.0.0; _ga=GA1.1.463628786.1701462236
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 409 Conflict
date: Fri, 01 Dec 2023 20:23:52 GMT
server: Apache
content-length: 83
content-type: text/html; charset=iso-8859-1
X-Firefox-Spdy: h2
www.kursnalista.co/banners/sutrasnji_kurs_300x600.jpg
200 OK 133 kB URL GET HTTP/2 www.kursnalista.co/banners/sutrasnji_kurs_300x600.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.kursnalista.co
Fingerprint1C:D4:9B:DE:4F:51:D3:F0:32:B2:6C:A1:1C:03:E2:3E:18:FC:D4:2A
ValidityMon, 20 Nov 2023 10:01:16 GMT - Sun, 18 Feb 2024 10:01:15 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x600, components 3\012- data
Size 133 kB (132746 bytes)
Hash 03cb0234e6286a8521c7e91836880c7f
ad08e9c34a8756fdb4405f1173e35c27ba5accc3
0420c0254ff2755372ffa257d45fb7624a82ca37e99286dca68d6a1813a5d755
GET /banners/sutrasnji_kurs_300x600.jpg HTTP/1.1
Host: www.kursnalista.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 06 Jun 2015 11:16:35 GMT
accept-ranges: bytes
content-length: 132746
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:52 GMT
server: Apache
X-Firefox-Spdy: h2
tharbadir.com/9?z=2892323&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&oaid=fc6b62f817f7473a906e4e9a39f79ea0
200 OK 0 B URL POST HTTP/2 tharbadir.com/9?z=2892323&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&oaid=fc6b62f817f7473a906e4e9a39f79ea0
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecttharbadir.com
FingerprintA5:91:BD:23:83:6F:FE:A6:06:78:AE:E7:58:60:8E:74:B2:BA:C3:64
ValidityThu, 21 Sep 2023 16:36:00 GMT - Wed, 20 Dec 2023 16:35:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /9?z=2892323&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&oaid=fc6b62f817f7473a906e4e9a39f79ea0 HTTP/1.1
Host: tharbadir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.vugla.com/
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Fri, 01 Dec 2023 20:23:52 GMT
access-control-allow-credentials: true
access-control-allow-origin: https://www.vugla.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
psuftoum.com/?rb=pCybLJcKZOCg9Z--9MCREpxzocb7FGSU9th2U26jNqNC5aLzyHqs9FGOWfC3ALcPOeAX3Bt2O1B_EXZWkARh6rs_jbQQ9_iheIDsJKUPtz4qzSw1JQP7owlD6JzDJ6XAhw9WOgMTp1oPfx6JuHNwLCCuvRihYEv1QUAIqJL182lXiinXT4_-VeFnVUZXHf0TREObGbNGNQsHZAEDoEkUOqhP7OaYcYl3sJxLxQl7RBE%3D&request_ab2=0&zoneid=1316441&js_build=iclick-v1.635.3-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=4&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.635.3-auto&bs=5e14a520-a1ed-4363-a26a-67cabdda6195&userId=fc6b62f817f7473a906e4e9a39f79ea0&m=link
200 OK 2.0 kB URL GET HTTP/2 psuftoum.com/?rb=pCybLJcKZOCg9Z--9MCREpxzocb7FGSU9th2U26jNqNC5aLzyHqs9FGOWfC3ALcPOeAX3Bt2O1B_EXZWkARh6rs_jbQQ9_iheIDsJKUPtz4qzSw1JQP7owlD6JzDJ6XAhw9WOgMTp1oPfx6JuHNwLCCuvRihYEv1QUAIqJL182lXiinXT4_-VeFnVUZXHf0TREObGbNGNQsHZAEDoEkUOqhP7OaYcYl3sJxLxQl7RBE%3D&request_ab2=0&zoneid=1316441&js_build=iclick-v1.635.3-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=4&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.635.3-auto&bs=5e14a520-a1ed-4363-a26a-67cabdda6195&userId=fc6b62f817f7473a906e4e9a39f79ea0&m=link
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectpsuftoum.com
Fingerprint2C:F3:EA:66:F3:74:01:A6:A1:04:29:7A:60:60:06:A7:A5:C0:93:CC
ValidityTue, 19 Sep 2023 05:22:30 GMT - Mon, 18 Dec 2023 05:22:29 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash fb5b129703663817b02e0d30f6985c87
e396b324f4b61088d2a0ecacf1c2a9da5534af1f
63c141cd028ac33d64f69434b7b75dec286400057dcb49b9260ccf557b9c8aba
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /?rb=pCybLJcKZOCg9Z--9MCREpxzocb7FGSU9th2U26jNqNC5aLzyHqs9FGOWfC3ALcPOeAX3Bt2O1B_EXZWkARh6rs_jbQQ9_iheIDsJKUPtz4qzSw1JQP7owlD6JzDJ6XAhw9WOgMTp1oPfx6JuHNwLCCuvRihYEv1QUAIqJL182lXiinXT4_-VeFnVUZXHf0TREObGbNGNQsHZAEDoEkUOqhP7OaYcYl3sJxLxQl7RBE%3D&request_ab2=0&zoneid=1316441&js_build=iclick-v1.635.3-auto&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=4&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&wgl=&js_build=iclick-v1.635.3-auto&bs=5e14a520-a1ed-4363-a26a-67cabdda6195&userId=fc6b62f817f7473a906e4e9a39f79ea0&m=link HTTP/1.1
Host: psuftoum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Cookie: OAID=a5780e9dbaf141bd9aea777aa3fd0756; oaidts=1701462230
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: application/json
x-trace-id: 90fa1726757b008ae1e22bc2e7388e78
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: OAID=fc6b62f817f7473a906e4e9a39f79ea0; expires=Sat, 30 Nov 2024 20:23:52 GMT; path=/; secure; SameSite=None
oaidts=1701462232; expires=Sat, 30 Nov 2024 20:23:52 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Fri, 08 Dec 2023 20:23:52 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/images/pattern-filter.png
200 OK 2.8 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/images/pattern-filter.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced\012- data
Hash 6d6f2d483736ba6f70063740ddf2841b
3b9dee704da0bf19a56b46584a55226a137504a9
dca9f66f2ff2d735f415080def56d34e60cf13cc65668bf9b422103cd3bee2a5
GET /wp-content/themes/vugla/images/pattern-filter.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/css/style_main.css
Cookie: _ga_7NCJ73THPT=GS1.1.1701462236.1.0.1701462236.60.0.0; _ga=GA1.1.463628786.1701462236; dom3ic8zudi28v8lr6fgphwffqoz0j6c=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1; prefetchAd_1316441=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:53:06 GMT
accept-ranges: bytes
content-length: 2804
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:52 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.vugla.com/wp-content/uploads/2013/11/bckg-vugla-dark.jpg
200 OK 267 kB URL GET HTTP/2 www.vugla.com/wp-content/uploads/2013/11/bckg-vugla-dark.jpg
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 2000x1200, components 3\012- data
Size 267 kB (267247 bytes)
Hash 11e97d76a4b329319978b9da6f46b5b0
ae03d14a5b568ed59c1772ee2065e160e93428ae
9fbe33f0e52a532495bb5d56584e250e0d3cf1acc5a04acb7cbb2e39bb6c6a42
GET /wp-content/uploads/2013/11/bckg-vugla-dark.jpg HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Cookie: _ga_7NCJ73THPT=GS1.1.1701462236.1.0.1701462236.60.0.0; _ga=GA1.1.463628786.1701462236; dom3ic8zudi28v8lr6fgphwffqoz0j6c=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1; prefetchAd_1316441=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Wed, 20 Nov 2013 16:40:33 GMT
accept-ranges: bytes
content-length: 267247
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:52 GMT
referrer-policy:
pragma: public
content-type: image/jpeg
date: Fri, 01 Dec 2023 20:23:52 GMT
server: Apache
X-Firefox-Spdy: h2
www.profitabledisplaycontent.com/watch.1550490905068.js?key=c3b6bab9a3e6c622d733121998e0014d&kw=%5B%22%C5%BEivotinje%22%2C%22kako%22%2C%22su%22%2C%22rok%22%2C%22zvezde%22%2C%22pande%22%2C%22ostale%22%2C%22bez%22%2C%22ljubavne%22%2C%22pri%C4%8De%22%2C%22-%22%2C%22vugla%22%5D&refer=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&tz=0&dev=e&res=14.3095&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 www.profitabledisplaycontent.com/watch.1550490905068.js?key=c3b6bab9a3e6c622d733121998e0014d&kw=%5B%22%C5%BEivotinje%22%2C%22kako%22%2C%22su%22%2C%22rok%22%2C%22zvezde%22%2C%22pande%22%2C%22ostale%22%2C%22bez%22%2C%22ljubavne%22%2C%22pri%C4%8De%22%2C%22-%22%2C%22vugla%22%5D&refer=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&tz=0&dev=e&res=14.3095&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.profitabledisplaycontent.com
Fingerprint5B:BD:54:33:2B:86:AB:1A:82:90:2C:D6:FE:04:C7:39:78:8E:80:0E
ValidityFri, 01 Dec 2023 06:55:29 GMT - Thu, 29 Feb 2024 06:55:28 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /watch.1550490905068.js?key=c3b6bab9a3e6c622d733121998e0014d&kw=%5B%22%C5%BEivotinje%22%2C%22kako%22%2C%22su%22%2C%22rok%22%2C%22zvezde%22%2C%22pande%22%2C%22ostale%22%2C%22bez%22%2C%22ljubavne%22%2C%22pri%C4%8De%22%2C%22-%22%2C%22vugla%22%5D&refer=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&tz=0&dev=e&res=14.3095&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1 HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.vugla.com
Access-Control-Allow-Origin: https://www.vugla.com
Access-Control-Allow-Credentials: true
Location: https://www.profitabledisplaycontent.com/watch.1550490905068.js?key=c3b6bab9a3e6c622d733121998e0014d&kw=%5B%22%C5%BEivotinje%22%2C%22kako%22%2C%22su%22%2C%22rok%22%2C%22zvezde%22%2C%22pande%22%2C%22ostale%22%2C%22bez%22%2C%22ljubavne%22%2C%22pri%C4%8De%22%2C%22-%22%2C%22vugla%22%5D&refer=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&tz=0&dev=e&res=14.3095&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1&shu=50ba52d6a4813c24ae864131db4680582ed6dfe4ec39be3f894cda1e436da297b7357beda1cad82a0f2b457a4f8e8e57b4af2a2504c318733af52f777a8f69556aacdf19cd79f7f8a18dd8ba5d0bf6518fe7c3974f0cb8b00e8a01f482ae78&pst=1701462292&rmtc=t
Set-Cookie: u_pl=14611544; expires=Sat, 02 Dec 2023 20:23:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.w0H8pXh9kR92g8ALkDv9JfRuEfH_QXKMIGAdc5ycWvU; expires=Fri, 01 Dec 2023 20:24:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fa746dc7622dd8f35f90e37d2a8ea9af
Strict-Transport-Security: max-age=0; includeSubdomains
buttersource.com/ntv.json?key=c9123167a2366d360cd4d80dad2ac358&vstc=3
200 OK 13 kB URL GET HTTP/1.1 buttersource.com/ntv.json?key=c9123167a2366d360cd4d80dad2ac358&vstc=3
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectbuttersource.com
FingerprintFA:3D:D1:74:88:B5:6E:F0:15:0C:E7:94:01:5D:C7:6B:18:60:BE:7F
ValidityTue, 28 Nov 2023 07:57:17 GMT - Mon, 26 Feb 2024 07:57:16 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (12683), with no line terminators
Hash a03e21947fb13f6dbe2ff140fcee8ac2
3f442a198d750c378731621427e8ea6955beea0c
e662e139fc13b5a5dbef62adc4f9c4a9f71fff1978a660870b7821e919d8fc70
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ntv.json?key=c9123167a2366d360cd4d80dad2ac358&vstc=3 HTTP/1.1
Host: buttersource.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:52 GMT
Content-Type: application/json
Content-Length: 12684
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.vugla.com
Access-Control-Allow-Origin: https://www.vugla.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16310791; expires=Sat, 02 Dec 2023 20:23:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 02 Dec 2023 20:23:52 GMT; secure; SameSite=None
uncs=1; expires=Sat, 02 Dec 2023 20:23:52 GMT; secure; SameSite=None
pdhtkv49=true; expires=Sat, 02 Dec 2023 20:23:52 GMT; secure; SameSite=None
uncs49=1; expires=Sat, 02 Dec 2023 20:23:52 GMT; secure; SameSite=None
nlecc9123167a2366d360cd4d80dad2ac358=[2229212,2229214,3637745]; expires=Fri, 01 Dec 2023 20:23:57 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 78672f127b76b1a0c4ce32aa8c207c5b
Strict-Transport-Security: max-age=0; includeSubdomains
www.profitabledisplaycontent.com/watch.1550490905068.js?key=c3b6bab9a3e6c622d733121998e0014d&kw=%5B%22%C5%BEivotinje%22%2C%22kako%22%2C%22su%22%2C%22rok%22%2C%22zvezde%22%2C%22pande%22%2C%22ostale%22%2C%22bez%22%2C%22ljubavne%22%2C%22pri%C4%8De%22%2C%22-%22%2C%22vugla%22%5D&refer=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&tz=0&dev=e&res=14.3095&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1&shu=50ba52d6a4813c24ae864131db4680582ed6dfe4ec39be3f894cda1e436da297b7357beda1cad82a0f2b457a4f8e8e57b4af2a2504c318733af52f777a8f69556aacdf19cd79f7f8a18dd8ba5d0bf6518fe7c3974f0cb8b00e8a01f482ae78&pst=1701462292&rmtc=t
200 OK 2.1 kB URL GET HTTP/1.1 www.profitabledisplaycontent.com/watch.1550490905068.js?key=c3b6bab9a3e6c622d733121998e0014d&kw=%5B%22%C5%BEivotinje%22%2C%22kako%22%2C%22su%22%2C%22rok%22%2C%22zvezde%22%2C%22pande%22%2C%22ostale%22%2C%22bez%22%2C%22ljubavne%22%2C%22pri%C4%8De%22%2C%22-%22%2C%22vugla%22%5D&refer=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&tz=0&dev=e&res=14.3095&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1&shu=50ba52d6a4813c24ae864131db4680582ed6dfe4ec39be3f894cda1e436da297b7357beda1cad82a0f2b457a4f8e8e57b4af2a2504c318733af52f777a8f69556aacdf19cd79f7f8a18dd8ba5d0bf6518fe7c3974f0cb8b00e8a01f482ae78&pst=1701462292&rmtc=t
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.profitabledisplaycontent.com
Fingerprint5B:BD:54:33:2B:86:AB:1A:82:90:2C:D6:FE:04:C7:39:78:8E:80:0E
ValidityFri, 01 Dec 2023 06:55:29 GMT - Thu, 29 Feb 2024 06:55:28 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (2664)
Hash 70bc22a01df6b2044fffd3668ec02993
479ab799320cdc24178ed0fba5f68546bd9ce12d
6c48cc3c2436ec28a9c058f48a1bf6d2fe1df5e34a8df7335e772f70575f0a52
GET /watch.1550490905068.js?key=c3b6bab9a3e6c622d733121998e0014d&kw=%5B%22%C5%BEivotinje%22%2C%22kako%22%2C%22su%22%2C%22rok%22%2C%22zvezde%22%2C%22pande%22%2C%22ostale%22%2C%22bez%22%2C%22ljubavne%22%2C%22pri%C4%8De%22%2C%22-%22%2C%22vugla%22%5D&refer=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&tz=0&dev=e&res=14.3095&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1&shu=50ba52d6a4813c24ae864131db4680582ed6dfe4ec39be3f894cda1e436da297b7357beda1cad82a0f2b457a4f8e8e57b4af2a2504c318733af52f777a8f69556aacdf19cd79f7f8a18dd8ba5d0bf6518fe7c3974f0cb8b00e8a01f482ae78&pst=1701462292&rmtc=t HTTP/1.1
Host: www.profitabledisplaycontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
Referer: https://www.vugla.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=14611544; ain=eyJhbGciOiJIUzI1NiJ9.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.w0H8pXh9kR92g8ALkDv9JfRuEfH_QXKMIGAdc5ycWvU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.vugla.com
Access-Control-Allow-Origin: https://www.vugla.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=aa147afb-384f-420d-85a5-82ce2ce5a288:3:1; expires=Fri, 08 Dec 2023 20:23:53 GMT; secure; SameSite=None
iprc7ec6d4bb82a68b997c6c463c73571bdf=3569807; expires=Sat, 02 Dec 2023 00:23:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 02 Dec 2023 20:23:53 GMT; secure; SameSite=None
uncs=1; expires=Sat, 02 Dec 2023 20:23:53 GMT; secure; SameSite=None
pdhtkv27=true; expires=Sat, 02 Dec 2023 20:23:53 GMT; secure; SameSite=None
uncs27=1; expires=Sat, 02 Dec 2023 20:23:53 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 23e2ff7533cdff1091f429620e75293a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
offerimage.com/www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg
200 OK 19 kB URL GET HTTP/2 offerimage.com/www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 71581bf2ce9a00138faf7dd80fe3e12e
56479135ed64bf23e1037067c0c87047eb8a414c
5d9f95c8c06343cc189b38268296615ed8816d8154b4b782ad0d62bedd23525e
GET /www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:53 GMT
content-type: image/jpeg
content-length: 19381
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
cache-control: max-age=86400
cf-bgj: h2pri
etag: "65674405-4bb5"
expires: Sat, 02 Dec 2023 14:07:42 GMT
last-modified: Wed, 29 Nov 2023 14:00:37 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 22571
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0ced3d2d2dfa-ARN
X-Firefox-Spdy: h2
vaugroar.com/custom
200 OK 0 B IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectvaugroar.com
FingerprintF5:48:7D:7C:B6:28:8D:55:D3:7D:CF:03:2F:84:BE:B7:FD:20:F0:EE
ValiditySun, 12 Nov 2023 05:15:08 GMT - Sat, 10 Feb 2024 05:15:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /custom HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.vugla.com/
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:53 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
tharbadir.com/9?z=2892323&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&oaid=fc6b62f817f7473a906e4e9a39f79ea0
200 OK 2.8 kB URL POST HTTP/2 tharbadir.com/9?z=2892323&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&oaid=fc6b62f817f7473a906e4e9a39f79ea0
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecttharbadir.com
FingerprintA5:91:BD:23:83:6F:FE:A6:06:78:AE:E7:58:60:8E:74:B2:BA:C3:64
ValidityThu, 21 Sep 2023 16:36:00 GMT - Wed, 20 Dec 2023 16:35:59 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 294bbe9aad8861f43a59268d89d7705d
bdcbf3db9a8faec51a42b16fafc6a2173567dc91
b4780c7079a5d813deacbf81d55c2b0c1205e890e5901bdcd0fc25f40f1322b1
POST /9?z=2892323&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&oaid=fc6b62f817f7473a906e4e9a39f79ea0 HTTP/1.1
Host: tharbadir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 162
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: scm=1; OAID=e456aec1966749a8928819fc64f26b4d; oaidts=1701462230
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: application/json
access-control-allow-credentials: true
access-control-allow-origin: https://www.vugla.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 3744707cc00311ffe6593d4c11b6c281
access-control-expose-headers: X-Sc
set-cookie: OAID=fc6b62f817f7473a906e4e9a39f79ea0; expires=Sat, 30 Nov 2024 20:23:52 GMT; secure; SameSite=None
oaidts=1701462230; expires=Sat, 30 Nov 2024 20:23:52 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
vaugroar.com/custom
200 OK 39 B IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectvaugroar.com
FingerprintF5:48:7D:7C:B6:28:8D:55:D3:7D:CF:03:2F:84:BE:B7:FD:20:F0:EE
ValiditySun, 12 Nov 2023 05:15:08 GMT - Sat, 10 Feb 2024 05:15:07 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /custom HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/
Content-Type: application/json
Content-Length: 424
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:53 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 07b9ad0e248f14c872bf69d4aa36d0d7
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
tharbadir.com/27/b7af9eee900df9a8aa2af9ad8ee46174
200 OK 158 kB URL GET HTTP/2 tharbadir.com/27/b7af9eee900df9a8aa2af9ad8ee46174
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecttharbadir.com
FingerprintA5:91:BD:23:83:6F:FE:A6:06:78:AE:E7:58:60:8E:74:B2:BA:C3:64
ValidityThu, 21 Sep 2023 16:36:00 GMT - Wed, 20 Dec 2023 16:35:59 GMT
File type gzip compressed data, max speed, from Unix\012- data
Size 158 kB (158070 bytes)
Hash 84be41e94b4d4758099871f5fec56ae3
095f16765c066f239e568e89750b58b9521901b8
4eeb99ca32296ac1c37945ce7ee9e6fcaa1e821cd2c43df0bc38914b3e267085
GET /27/b7af9eee900df9a8aa2af9ad8ee46174 HTTP/1.1
Host: tharbadir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: scm=1; OAID=e456aec1966749a8928819fc64f26b4d; oaidts=1701462230
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: application/javascript
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: e618604a3ae17487b69cc610e251409c
cache-control: max-age:290304000, public
last-modified: Fri, 24 Nov 2023 06:46:08 GMT
expires: Fri, 24 Dec 2083 06:46:08 GMT
access-control-expose-headers: X-Sc
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 0 B IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.vugla.com/
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:53 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
eehuzaih.com/500/5005565?excludes=&oaid=fc6b62f817f7473a906e4e9a39f79ea0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 1.3 kB URL GET HTTP/2 eehuzaih.com/500/5005565?excludes=&oaid=fc6b62f817f7473a906e4e9a39f79ea0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecteehuzaih.com
FingerprintAC:55:E9:5B:5B:87:BF:89:7C:BE:E0:77:14:BE:B7:B4:16:AB:70:5A
ValiditySun, 12 Nov 2023 08:38:54 GMT - Sat, 10 Feb 2024 08:38:53 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 069454d39e9ebc2942a640b06665e4fc
6952863e9f4fb2b6896282ed93a5a2db98dbe50c
d360f320f84ae6317b7a62223c7212599a68ca7249a00f690936908c5a7287e4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /500/5005565?excludes=&oaid=fc6b62f817f7473a906e4e9a39f79ea0&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: OAID=810a510d0b024955be20ecc297313da8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: application/javascript
x-trace-id: 41ed50c531fe635c5d81ef830bebaa96
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://www.vugla.com
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
set-cookie: OAID=fc6b62f817f7473a906e4e9a39f79ea0; expires=Sat, 30 Nov 2024 20:23:52 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
tharbadir.com/11?rnd=1404754519&z=2892323&b=15763363&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=GFOt6dZtFtUvadx--7WZItHuwKOehtJ_sVwEBamYXT-HGbzJGaPeV9lYpZqi5siCf7di2jCOdPuFDX-gNQg32aNKOq5i0LlSBmTd9SXGTZos1zOf3mG4ejyO42GlyNdoVrxUUx2LmDygsvn_cZYIuRI1m0ez4vOU_s85VofWorYLyimjQJ_vWGcY9oxl1zx03HYpjD9qo4SaTKUyHLxpWowt4hvcCWnmQHRwwEnNZ52DF0Y08uuFBtZ2vupO3jz7UBnWkCtUcm5E73JxTjrVBW9ejjdJORDPFkqOedvekev2i763kXRFGMCXCZOcIyCh8MNK3RYvq9tRvlAn4zIsqtBNtWfs9O4sORiugwTT-tya2DSsbkipPDDNC6Yzws9C4HnrRRmH_MEFK3uBzcZBghobKM0jf-NU2TwpRl9lsxvVlIsiWSny9f2gEQU2PNBMBxrl3T9QRSJapLdZ-aCXoNLX600KglmVmhVDDbNZjyYcPbmDHS949EpiTE_3Xoh3nvTnsRSB_as9AFLF4kdU1Aws8JRDsdlxzyFLPKH_06Nxcy5cg2FgZcXdnXJavdZN9w_z7q09Y7UV2cvjUSTFsNLooamCXlc9btprKRl15GS_FxkeqiSAkluw9NZLBrQldZ5MmJHqJCuobEuq26tYB64Z4UQ6qGgldX4Pzrgo3KFyRbHePETHSGioFv6V8dt-RDrDdmyIuPP4PIbB-tvCdlnm6Nq6o-cHwTf1Uw==&ruid=36d21996-3161-4244-a1dd-aa2fea7ab614&subid=754549898436681728&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&ot=896
200 OK 0 B URL GET HTTP/2 tharbadir.com/11?rnd=1404754519&z=2892323&b=15763363&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=GFOt6dZtFtUvadx--7WZItHuwKOehtJ_sVwEBamYXT-HGbzJGaPeV9lYpZqi5siCf7di2jCOdPuFDX-gNQg32aNKOq5i0LlSBmTd9SXGTZos1zOf3mG4ejyO42GlyNdoVrxUUx2LmDygsvn_cZYIuRI1m0ez4vOU_s85VofWorYLyimjQJ_vWGcY9oxl1zx03HYpjD9qo4SaTKUyHLxpWowt4hvcCWnmQHRwwEnNZ52DF0Y08uuFBtZ2vupO3jz7UBnWkCtUcm5E73JxTjrVBW9ejjdJORDPFkqOedvekev2i763kXRFGMCXCZOcIyCh8MNK3RYvq9tRvlAn4zIsqtBNtWfs9O4sORiugwTT-tya2DSsbkipPDDNC6Yzws9C4HnrRRmH_MEFK3uBzcZBghobKM0jf-NU2TwpRl9lsxvVlIsiWSny9f2gEQU2PNBMBxrl3T9QRSJapLdZ-aCXoNLX600KglmVmhVDDbNZjyYcPbmDHS949EpiTE_3Xoh3nvTnsRSB_as9AFLF4kdU1Aws8JRDsdlxzyFLPKH_06Nxcy5cg2FgZcXdnXJavdZN9w_z7q09Y7UV2cvjUSTFsNLooamCXlc9btprKRl15GS_FxkeqiSAkluw9NZLBrQldZ5MmJHqJCuobEuq26tYB64Z4UQ6qGgldX4Pzrgo3KFyRbHePETHSGioFv6V8dt-RDrDdmyIuPP4PIbB-tvCdlnm6Nq6o-cHwTf1Uw==&ruid=36d21996-3161-4244-a1dd-aa2fea7ab614&subid=754549898436681728&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&ot=896
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecttharbadir.com
FingerprintA5:91:BD:23:83:6F:FE:A6:06:78:AE:E7:58:60:8E:74:B2:BA:C3:64
ValidityThu, 21 Sep 2023 16:36:00 GMT - Wed, 20 Dec 2023 16:35:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /11?rnd=1404754519&z=2892323&b=15763363&var=&varid=0&rqtdbc=1&rcvdbc=1&btp=7&rb=GFOt6dZtFtUvadx--7WZItHuwKOehtJ_sVwEBamYXT-HGbzJGaPeV9lYpZqi5siCf7di2jCOdPuFDX-gNQg32aNKOq5i0LlSBmTd9SXGTZos1zOf3mG4ejyO42GlyNdoVrxUUx2LmDygsvn_cZYIuRI1m0ez4vOU_s85VofWorYLyimjQJ_vWGcY9oxl1zx03HYpjD9qo4SaTKUyHLxpWowt4hvcCWnmQHRwwEnNZ52DF0Y08uuFBtZ2vupO3jz7UBnWkCtUcm5E73JxTjrVBW9ejjdJORDPFkqOedvekev2i763kXRFGMCXCZOcIyCh8MNK3RYvq9tRvlAn4zIsqtBNtWfs9O4sORiugwTT-tya2DSsbkipPDDNC6Yzws9C4HnrRRmH_MEFK3uBzcZBghobKM0jf-NU2TwpRl9lsxvVlIsiWSny9f2gEQU2PNBMBxrl3T9QRSJapLdZ-aCXoNLX600KglmVmhVDDbNZjyYcPbmDHS949EpiTE_3Xoh3nvTnsRSB_as9AFLF4kdU1Aws8JRDsdlxzyFLPKH_06Nxcy5cg2FgZcXdnXJavdZN9w_z7q09Y7UV2cvjUSTFsNLooamCXlc9btprKRl15GS_FxkeqiSAkluw9NZLBrQldZ5MmJHqJCuobEuq26tYB64Z4UQ6qGgldX4Pzrgo3KFyRbHePETHSGioFv6V8dt-RDrDdmyIuPP4PIbB-tvCdlnm6Nq6o-cHwTf1Uw==&ruid=36d21996-3161-4244-a1dd-aa2fea7ab614&subid=754549898436681728&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&ot=896 HTTP/1.1
Host: tharbadir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: scm=1; OAID=fc6b62f817f7473a906e4e9a39f79ea0; oaidts=1701462230
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:53 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.vugla.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 33b4b277b0503c59ceab6cb3b44c622d
access-control-expose-headers: X-Sc
set-cookie: OAID=fc6b62f817f7473a906e4e9a39f79ea0; expires=Sat, 30 Nov 2024 20:23:53 GMT; secure; SameSite=None
oaidts=1701462230; expires=Sat, 30 Nov 2024 20:23:53 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
vaugroar.com/pfe/current/universal.min.js?v=3.1.471
200 OK 33 kB URL GET HTTP/2 vaugroar.com/pfe/current/universal.min.js?v=3.1.471
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectvaugroar.com
FingerprintF5:48:7D:7C:B6:28:8D:55:D3:7D:CF:03:2F:84:BE:B7:FD:20:F0:EE
ValiditySun, 12 Nov 2023 05:15:08 GMT - Sat, 10 Feb 2024 05:15:07 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d46d2997ab218d1dba1ab614422ed53f
3f1f6b9847c8ad209835db366c62fcb209b83a67
09e8ce2dfeac0ad09cd24788931b38ea7e7592f2c28eecc324b2dd1cd69d1b42
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pfe/current/universal.min.js?v=3.1.471 HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-1572c"
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_1?le=scs
200 OK 34 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_1?le=scs
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1586)
Hash e0fbc84518a1bab9c8bad9f76463d338
ecce9ef563bc5170ebcfcfd35e0dd5b17bc0b874
d99dd3891be0d37edbcc13fdaad780f164a758be5d0c8a71f66596e6cda04f70
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_1?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 34324
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:23:52 GMT
expires: Fri, 29 Nov 2024 05:23:52 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 140401
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
200 OK 56 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Hash 4a256001cbbe7af37c71afbd89ba1656
4760f1dee9f6ff6db6f33eeee3dc7ec76155f7dd
5b683a525a2a814b27fc09152ee8030b6d542cd24a61de371bbe5e8815e9d0b1
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 55751
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:12:01 GMT
expires: Fri, 29 Nov 2024 04:12:01 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 144712
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7NCJ73THPT&cid=463628786.1701462236>m=45je3bt0v879882835&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=319057620
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7NCJ73THPT&cid=463628786.1701462236>m=45je3bt0v879882835&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=319057620
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
Fingerprint6E:E4:BC:4A:67:5E:46:6A:B3:E4:CA:61:A7:C0:97:AB:14:F0:34:32
ValidityMon, 23 Oct 2023 11:27:27 GMT - Mon, 15 Jan 2024 11:27:26 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7NCJ73THPT&cid=463628786.1701462236>m=45je3bt0v879882835&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=319057620 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 01 Dec 2023 20:23:53 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.vugla.com/favicon.ico
302 Found 0 B URL GET HTTP/2 www.vugla.com/favicon.ico
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Cookie: _ga_7NCJ73THPT=GS1.1.1701462236.1.0.1701462236.60.0.0; _ga=GA1.1.463628786.1701462236; dom3ic8zudi28v8lr6fgphwffqoz0j6c=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1; prefetchAd_1316441=true; sb_main_d137022925bcc2a680f8a4476ff94144=1; sb_count_d137022925bcc2a680f8a4476ff94144=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
link: <https://www.vugla.com/wp-json/>; rel="https://api.w.org/"
x-redirect-by: WordPress
content-security-policy: upgrade-insecure-requests;
location: https://www.vugla.com/wp-includes/images/w-logo-blue-white-bg.png
cache-control: max-age=10800
expires: Fri, 01 Dec 2023 23:23:53 GMT
vary: User-Agent
referrer-policy:
content-length: 0
content-type: text/html; charset=UTF-8
date: Fri, 01 Dec 2023 20:23:53 GMT
server: Apache
X-Firefox-Spdy: h2
rollerstrayprawn.com/sbar.json?key=d137022925bcc2a680f8a4476ff94144&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1
200 OK 3.2 kB URL GET HTTP/1.1 rollerstrayprawn.com/sbar.json?key=d137022925bcc2a680f8a4476ff94144&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectrollerstrayprawn.com
Fingerprint9E:74:D1:93:DF:47:C6:06:84:EA:02:9E:E8:F3:B5:CF:52:D3:9F:D0
ValidityTue, 28 Nov 2023 10:59:19 GMT - Mon, 26 Feb 2024 10:59:18 GMT
File type JSON data\012- , ASCII text, with very long lines (6160), with no line terminators
Hash 54aede7bd196a6c7755693563a1322da
fb469de554ce4817f3d7a5f9a0c5c434c279eb3e
a9d3dc64c81fc64486ff53a9a5cb62f1aac041c9c17d422be2b1ac124078488f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sbar.json?key=d137022925bcc2a680f8a4476ff94144&uuid=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1 HTTP/1.1
Host: rollerstrayprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 20:23:53 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://www.vugla.com
Access-Control-Allow-Origin: https://www.vugla.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=15460408; expires=Sat, 02 Dec 2023 20:23:53 GMT; secure; SameSite=None
uid_id2=aa147afb-384f-420d-85a5-82ce2ce5a288:3:1; expires=Fri, 08 Dec 2023 20:23:53 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 02 Dec 2023 20:23:53 GMT; secure; SameSite=None
uncs=1; expires=Sat, 02 Dec 2023 20:23:53 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 02 Dec 2023 20:23:53 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 02 Dec 2023 20:23:53 GMT; secure; SameSite=None
slecd137022925bcc2a680f8a4476ff94144=[4691073]; expires=Fri, 01 Dec 2023 20:23:58 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fc529525108b7ea6f4e8591ab8a07179
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
apis.google.com/js/rpc:shindig_random.js?onload=init
200 OK 7.1 kB URL GET HTTP/3 apis.google.com/js/rpc:shindig_random.js?onload=init
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.vugla.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#rpctoken=376691146&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (2056)
Hash 84a5ff7df274c2aa0f5db3d0db8deb60
fe9d4e60961ea15195134fa043256585a3956984
0d3c50c1af81534edee9a430edb5d09c6068348173496657982a4546ff2ee231
GET /js/rpc:shindig_random.js?onload=init HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-length: 7121
date: Fri, 01 Dec 2023 20:23:53 GMT
expires: Fri, 01 Dec 2023 20:23:53 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "14543ead6f363f55"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
set-cookie: NID=511=rNGUjY096AqRFWnMpdMqbqjNxTEsAwkL34o3TR4PmzdjkaLX0RxgdWwWdQOEtsQYZK_pLqFwIdiNFC6bdrrFKpNbhg_h6_jpRlHvXQL4J0kpKk45KB0Hbc5tiSZBmm3O0FpRv34T7b4X8oG8udbkSJOh2g90aBNC2ypBd7d2Xks; expires=Sat, 01-Jun-2024 20:23:53 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.vugla.com/wp-includes/images/w-logo-blue-white-bg.png
200 OK 4.1 kB URL GET HTTP/2 www.vugla.com/wp-includes/images/w-logo-blue-white-bg.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 000bf649cc8f6bf27cfb04d1bcdcd3c7
d73d2f6d74ec6cdcbae07955592962e77d8ae814
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0
GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
DNT: 1
Connection: keep-alive
Cookie: _ga_7NCJ73THPT=GS1.1.1701462236.1.0.1701462236.60.0.0; _ga=GA1.1.463628786.1701462236; dom3ic8zudi28v8lr6fgphwffqoz0j6c=aa147afb-384f-420d-85a5-82ce2ce5a288%3A3%3A1; prefetchAd_1316441=true; sb_main_d137022925bcc2a680f8a4476ff94144=1; sb_count_d137022925bcc2a680f8a4476ff94144=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:25:19 GMT
accept-ranges: bytes
content-length: 4119
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:53 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:53 GMT
server: Apache
X-Firefox-Spdy: h2
ssl.gstatic.com/accounts/o/478691279-postmessagerelay.js
200 OK 5.2 kB URL GET HTTP/2 ssl.gstatic.com/accounts/o/478691279-postmessagerelay.js
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.vugla.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#rpctoken=376691146&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (3496)
Hash 92169c8a0fbf6e404267d0705cdbdf42
a5cd88b74ca5ced239cdbfb458fe25540d671f46
dba668b49a111527aac8f616b9053ea57c944e01a84ebdcd02a13da921223384
GET /accounts/o/478691279-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 5186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 16:02:08 GMT
expires: Thu, 28 Nov 2024 16:02:08 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 17 Nov 2023 17:06:44 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 188506
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.nbfcs.org/
1.2 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1177), with no line terminators
Hash ac31a44b8e766d58079bd7a52676f652
0e924164f1acd9d700002cb942b58964b12f8e00
5f44fbb4e200e2691a00fe45d975e24b4c4d29434893cab7c0c6c4447a8d8b69
GET / HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Type: text/html
Content-Length: 1177
Last-Modified: Thu, 30 Nov 2023 23:50:58 GMT
Connection: keep-alive
ETag: "65691fe2-499"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_ENz/K+PjBN0f7d4uAK6i9sVttzh1wtg6nZ+1UAvE7vPXElYhzDXKeeVTCrm3d3z1MlDESrhhCv293G+wNltFFw
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=10.116.88.163;Path=/;Max-Age=86400;
country=;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=enom.ACTIVE.5D3C3A1B-1A26-48DD-A7EC-02F11DDF874F;Path=/;Max-Age=86400;
Accept-Ranges: bytes
buttersource.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRSezRkRQQMRDRLFiQKBhM679%2FtIEQghyMKxTRLkenZm9jzx7M5qZn%2BcXTkEoZSHaIBq%2FZ0dK8FC5A8AoTNNZIHka8ASuKBDokFIUUq0l5MOnrTvvW%2B%2FV3zfe%2FPpbnpGPKT0dO2a3pZK0cVWza2%2Bvi4jrnNbXblZ9dyae7G6LqN282J1UCaTveW5rZr7RvV9wTb1Yt31XNdzvepVaUSgB4tTFjI%2B7Hm1nltr1mteq4mB%2BT%2B2qQNLHfDsjFyA5JNnNh49hGRjROG3V4TdTHT85nthqmiiDTJ%2B8FG0Gek8QjhvA%2BMgiA5m09B2QsgX56Cjg5kD6GyvdABfTojziwc%2FOpjJhJ%2FtP1XqK4gIPn8eeTaGUGNIOgbTdyD5CQEYx8oqovDeijY53XrK0pKdkIXH%2F0DmE7Lw%2B0uIwm8uKzmo3tAqTaSOLAZBATkYQ%2FbHiNMjJNsOZH4ElnwMyX8mi4%2BXEYV7q1ZpSF5M3Us5hgzGUGIIah2k5ScdpIGDNHYQ8tMqbfUC1%2B0EftBodJuMsUaDsVa3zVu80ewGLlJWyhsiiYdgaghmdhCbHWzKz05aF2DSH2A3CljuwCYT4ny4g4wXyAVBbglySpBLgjwhyLNinytbt8U9rmzqe7Nan9VGMdJJf5fu66QvIgJqhrvxGXlxup4nfzyLTXFaZT2v3vDaHVpvtNu80XYZb%2FKuyymvU9ZodWFlAWnPTR1vl7fCecRlvfYXfHoEq47AZAU09UDzUafugm6Mml0X29H9LO0rWmM6BNcF4mQByZazq87Iy1MRr1Z%2Bg2DHlx68cnjee%2B1PMFMgNgVuyR8J%2Buru6LrOyd51nVvycDVOZCi3aXm%2FGwlNROXBB2Ir14YvXbHD%2B%2B%2Bwkijbw5vCJss04jLqW%2FL1Zcm5MFe1YYJ8t2TXhb%2BW2o3LqYnSeHnt3atLYWyEtVJHY1B5svoETE7Iwu3vpy%2FzhZ8%2BgTRjmLRAmB6TWUDqI7B4Bzaeq7eawKj5jB87yNNiZOr%2B%2FKeSBErMMfUL2P9gf97v2rvomwpocgdRWCAzBTJVgKohbPrcKInN8aVHX5bxFXxVGfnKVPZ8ZdTn09WW6WxCOrf%2FhpWnVdEK3EC4deEHPT%2FoUJf3gmbPpz1PdPwW9ZDYibj19q%2F%2FAgAA%2F%2F8BAAD%2F%2F65fmuN7BAAA
200 OK 7 B URL GET HTTP/1.1 buttersource.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRSezRkRQQMRDRLFiQKBhM679%2FtIEQghyMKxTRLkenZm9jzx7M5qZn%2BcXTkEoZSHaIBq%2FZ0dK8FC5A8AoTNNZIHka8ASuKBDokFIUUq0l5MOnrTvvW%2B%2FV3zfe%2FPpbnpGPKT0dO2a3pZK0cVWza2%2Bvi4jrnNbXblZ9dyae7G6LqN282J1UCaTveW5rZr7RvV9wTb1Yt31XNdzvepVaUSgB4tTFjI%2B7Hm1nltr1mteq4mB%2BT%2B2qQNLHfDsjFyA5JNnNh49hGRjROG3V4TdTHT85nthqmiiDTJ%2B8FG0Gek8QjhvA%2BMgiA5m09B2QsgX56Cjg5kD6GyvdABfTojziwc%2FOpjJhJ%2FtP1XqK4gIPn8eeTaGUGNIOgbTdyD5CQEYx8oqovDeijY53XrK0pKdkIXH%2F0DmE7Lw%2B0uIwm8uKzmo3tAqTaSOLAZBATkYQ%2FbHiNMjJNsOZH4ElnwMyX8mi4%2BXEYV7q1ZpSF5M3Us5hgzGUGIIah2k5ScdpIGDNHYQ8tMqbfUC1%2B0EftBodJuMsUaDsVa3zVu80ewGLlJWyhsiiYdgaghmdhCbHWzKz05aF2DSH2A3CljuwCYT4ny4g4wXyAVBbglySpBLgjwhyLNinytbt8U9rmzqe7Nan9VGMdJJf5fu66QvIgJqhrvxGXlxup4nfzyLTXFaZT2v3vDaHVpvtNu80XYZb%2FKuyymvU9ZodWFlAWnPTR1vl7fCecRlvfYXfHoEq47AZAU09UDzUafugm6Mml0X29H9LO0rWmM6BNcF4mQByZazq87Iy1MRr1Z%2Bg2DHlx68cnjee%2B1PMFMgNgVuyR8J%2Buru6LrOyd51nVvycDVOZCi3aXm%2FGwlNROXBB2Ir14YvXbHD%2B%2B%2Bwkijbw5vCJss04jLqW%2FL1Zcm5MFe1YYJ8t2TXhb%2BW2o3LqYnSeHnt3atLYWyEtVJHY1B5svoETE7Iwu3vpy%2FzhZ8%2BgTRjmLRAmB6TWUDqI7B4Bzaeq7eawKj5jB87yNNiZOr%2B%2FKeSBErMMfUL2P9gf97v2rvomwpocgdRWCAzBTJVgKohbPrcKInN8aVHX5bxFXxVGfnKVPZ8ZdTn09WW6WxCOrf%2FhpWnVdEK3EC4deEHPT%2FoUJf3gmbPpz1PdPwW9ZDYibj19q%2F%2FAgAA%2F%2F8BAAD%2F%2F65fmuN7BAAA
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectbuttersource.com
FingerprintFA:3D:D1:74:88:B5:6E:F0:15:0C:E7:94:01:5D:C7:6B:18:60:BE:7F
ValidityTue, 28 Nov 2023 07:57:17 GMT - Mon, 26 Feb 2024 07:57:16 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSv28cRRSezRkRQQMRDRLFiQKBhM679%2FtIEQghyMKxTRLkenZm9jzx7M5qZn%2BcXTkEoZSHaIBq%2FZ0dK8FC5A8AoTNNZIHka8ASuKBDokFIUUq0l5MOnrTvvW%2B%2FV3zfe%2FPpbnpGPKT0dO2a3pZK0cVWza2%2Bvi4jrnNbXblZ9dyae7G6LqN282J1UCaTveW5rZr7RvV9wTb1Yt31XNdzvepVaUSgB4tTFjI%2B7Hm1nltr1mteq4mB%2BT%2B2qQNLHfDsjFyA5JNnNh49hGRjROG3V4TdTHT85nthqmiiDTJ%2B8FG0Gek8QjhvA%2BMgiA5m09B2QsgX56Cjg5kD6GyvdABfTojziwc%2FOpjJhJ%2FtP1XqK4gIPn8eeTaGUGNIOgbTdyD5CQEYx8oqovDeijY53XrK0pKdkIXH%2F0DmE7Lw%2B0uIwm8uKzmo3tAqTaSOLAZBATkYQ%2FbHiNMjJNsOZH4ElnwMyX8mi4%2BXEYV7q1ZpSF5M3Us5hgzGUGIIah2k5ScdpIGDNHYQ8tMqbfUC1%2B0EftBodJuMsUaDsVa3zVu80ewGLlJWyhsiiYdgaghmdhCbHWzKz05aF2DSH2A3CljuwCYT4ny4g4wXyAVBbglySpBLgjwhyLNinytbt8U9rmzqe7Nan9VGMdJJf5fu66QvIgJqhrvxGXlxup4nfzyLTXFaZT2v3vDaHVpvtNu80XYZb%2FKuyymvU9ZodWFlAWnPTR1vl7fCecRlvfYXfHoEq47AZAU09UDzUafugm6Mml0X29H9LO0rWmM6BNcF4mQByZazq87Iy1MRr1Z%2Bg2DHlx68cnjee%2B1PMFMgNgVuyR8J%2Buru6LrOyd51nVvycDVOZCi3aXm%2FGwlNROXBB2Ir14YvXbHD%2B%2B%2Bwkijbw5vCJss04jLqW%2FL1Zcm5MFe1YYJ8t2TXhb%2BW2o3LqYnSeHnt3atLYWyEtVJHY1B5svoETE7Iwu3vpy%2FzhZ8%2BgTRjmLRAmB6TWUDqI7B4Bzaeq7eawKj5jB87yNNiZOr%2B%2FKeSBErMMfUL2P9gf97v2rvomwpocgdRWCAzBTJVgKohbPrcKInN8aVHX5bxFXxVGfnKVPZ8ZdTn09WW6WxCOrf%2FhpWnVdEK3EC4deEHPT%2FoUJf3gmbPpz1PdPwW9ZDYibj19q%2F%2FAgAA%2F%2F8BAAD%2F%2F65fmuN7BAAA HTTP/1.1
Host: buttersource.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: u_pl=16310791; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 8a8fefe79f0a0374f093591aea900b77
Strict-Transport-Security: max-age=0; includeSubdomains
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
200 OK 23 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs
IP
Requested by https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.vugla.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__#rpctoken=376691146&forcesecure=1
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (1505)
Hash 009832d077d8fc42d725066c2b774fd6
0994f8575917c4eeb66f6bdb0a65609aa8902cac
b1e012aaab4e65462b456ff6a07a6512c7b11d1682d228531d66b132dcf3d364
GET /_/scs/abc-static/_/js/k=gapi.lb.en.coKrc9A11Ng.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 23431
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 02:51:23 GMT
expires: Fri, 29 Nov 2024 02:51:23 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 08 Nov 2023 22:37:21 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 149551
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.cloudimagesb.com/si/b9/5d/e2/b95de288caeec55111c172964c8a9c84/1662036680.jpg
200 OK 21 kB URL GET HTTP/2 cdn.cloudimagesb.com/si/b9/5d/e2/b95de288caeec55111c172964c8a9c84/1662036680.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash 8f4953c1b8baece7bb7d226247561ce2
da5d440970606602026d7900a55ae2fd27a3f170
8fd9df7d8e48ff2519631e82e01519d4f1c65abd41ec977c18abb58df9832919
GET /si/b9/5d/e2/b95de288caeec55111c172964c8a9c84/1662036680.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:54 GMT
content-type: image/jpeg
content-length: 20566
server: nginx/1.21.6
last-modified: Thu, 01 Sep 2022 12:51:28 GMT
etag: "6310aad0-5056"
expires: Sun, 03 Dec 2023 20:23:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
buttersource.com/65/aa/28/65aa283021630dfd9030555c4c61a78c.js
200 OK 23 kB URL GET HTTP/1.1 buttersource.com/65/aa/28/65aa283021630dfd9030555c4c61a78c.js
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectbuttersource.com
FingerprintFA:3D:D1:74:88:B5:6E:F0:15:0C:E7:94:01:5D:C7:6B:18:60:BE:7F
ValidityTue, 28 Nov 2023 07:57:17 GMT - Mon, 26 Feb 2024 07:57:16 GMT
File type ASCII text, with very long lines (59647), with no line terminators
Hash 13f4f0a195c492fabfb57a0db4faad6d
f9748655b45ffa60e2db0c16b33a75de8f8edcb3
4211e400fdeb89f3af0fea5b65be706168e13aecfdd5992b6e75a5c0b120f299
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /65/aa/28/65aa283021630dfd9030555c4c61a78c.js HTTP/1.1
Host: buttersource.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: u_pl=16310791; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5c592c4919b17f2529dda5fd721dca28
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png
200 OK 67 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type PNG image data, 468 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash a98b4585db1c6db06d6857c73bb75fcb
02a896b08a79e873b2dd26200ee1f0665dc1c80a
fc08e863ffafe25aa63fe8b60c2d5135fc5f52caf0abae4da3f1a90e0f8ed96c
GET /cti/56/ef/55/56ef55f6ef3bc03e69b8d66da27f0cd1/1658920055.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:54 GMT
content-type: image/png
content-length: 67174
server: nginx/1.21.6
last-modified: Wed, 27 Jul 2022 11:07:43 GMT
etag: "62e11c7f-10666"
expires: Sun, 03 Dec 2023 20:23:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg
200 OK 30 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 320x240, components 3\012- data
Hash a87779ccaaa4021b0b4f33812742679a
87322480f885dc0b6463c182b7bdb3eb60ab2592
a8f8dbc930527f94496d5a9883b6034e27a673090a89b518596d6e2b656df96f
GET /cti/51/bb/80/51bb807c8b914e3cc08eace2b0587473/1628586935.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:54 GMT
content-type: image/jpeg
content-length: 30127
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:15:44 GMT
etag: "611243c0-75af"
expires: Sun, 03 Dec 2023 20:23:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
200 OK 28 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:EC:C0:22:20:76:60:90:92:4C:5C:F3:AD:17:3C:41:B5:00:25:AF
ValidityThu, 23 Nov 2023 05:00:53 GMT - Wed, 21 Feb 2024 05:00:52 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 321x240, components 3\012- data
Hash f4fabf64be47ce667e0cfc150667b36c
234d722efa06cbedfdad9c1bb497a942997741dd
272b7875492a55c6f53a4e4704e715cc5b3cc4e5093758cbfedd95441bfe98d8
GET /cti/5d/60/ed/5d60edea793259cd719bfa3d19bcae3e/1628587069.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:54 GMT
content-type: image/jpeg
content-length: 27606
server: nginx/1.21.6
last-modified: Tue, 10 Aug 2021 09:17:59 GMT
etag: "61124447-6bd6"
expires: Sun, 03 Dec 2023 20:23:54 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
www.nbfcs.org/px.js?ch=1&abp=1
200 OK 476 B URL GET HTTP/1.1 www.nbfcs.org/px.js?ch=1&abp=1
IP
Requested by https://www.nbfcs.org/#signUp=754549898436681728
Certificate IssuerGoDaddy.com, Inc.
Subjectwww.nbfcs.org
FingerprintE0:6B:EC:7B:D6:B0:6E:9E:26:18:76:0D:83:E2:83:F9:02:52:F5:09
ValidityFri, 17 Nov 2023 10:08:39 GMT - Sun, 17 Nov 2024 10:08:39 GMT
Hash d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc
GET /px.js?ch=1&abp=1 HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Thu, 30 Nov 2023 23:51:13 GMT
Connection: keep-alive
ETag: "65691ff1-1dc"
Accept-Ranges: bytes
img1.wsimg.com/parking-lander/static/css/main.ba077a97.css
200 OK 187 B URL GET HTTP/2 img1.wsimg.com/parking-lander/static/css/main.ba077a97.css
IP
ASN #20940 Akamai International B.V.
Requested by https://www.nbfcs.org/#signUp=754549898436681728
Certificate IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
Hash 92cc7bc9897bfb97adb18591dc4642cb
1c42dc26c819be8dd5f5ada83532d7982353e6b3
73cf1f3e2f04d158ad8de2ad926353b2ba0f1e25b145fe063f467120a1341ea8
GET /parking-lander/static/css/main.ba077a97.css HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: FHcl3/DgxoNPMWKgxjWtDvP2QBMTP00QBIQyuqSd8wi/SHyKZCg9lFBivULNrT0TqzmloBNMYPglZFDpEyMBMQ==
x-amz-request-id: NCP9F70ZWYQAMHTJ
last-modified: Mon, 13 Nov 2023 23:32:18 GMT
etag: "92cc7bc9897bfb97adb18591dc4642cb"
x-amz-server-side-encryption: AES256
x-amz-version-id: S.cohGeac3FUy_snjCsO9LOvUc0sPSaD
accept-ranges: bytes
content-type: text/css
vary: Accept-Encoding
content-encoding: gzip
cache-control: max-age=31536000
expires: Sat, 30 Nov 2024 20:23:54 GMT
date: Fri, 01 Dec 2023 20:23:54 GMT
content-length: 187
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
img1.wsimg.com/parking-lander/static/js/main.ca05d067.js
200 OK 202 kB URL GET HTTP/2 img1.wsimg.com/parking-lander/static/js/main.ca05d067.js
IP
ASN #20940 Akamai International B.V.
Requested by https://www.nbfcs.org/#signUp=754549898436681728
Certificate IssuerStarfield Technologies, Inc.
Subject*.wsimg.com
FingerprintB7:FF:50:92:4F:A1:64:14:99:A1:DE:DB:55:C9:FA:92:78:6B:89:DD
ValidityTue, 19 Sep 2023 21:06:14 GMT - Sun, 20 Oct 2024 21:06:14 GMT
File type ASCII text, with very long lines (65465)
Size 202 kB (201631 bytes)
Hash 811ad71e90aa2b6a4607d0c1abbca408
d3b5cfd3d7538378bf5da3585e2a9a46710acab3
c3b904813a72bc219c9c46e65ff8b8a33c38d43cc6d34db4c8f8954345bf0546
GET /parking-lander/static/js/main.ca05d067.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
x-amz-id-2: 0Qe0d34FHUu2CJ6wlqP2Yl5aNCExcYZtQGPpNhUNa8yIrufk1WcmHIt5b5BgYcv3V06DrgTX9UY=
x-amz-request-id: 880C98NKV5VN0CTN
last-modified: Thu, 30 Nov 2023 23:39:15 GMT
etag: "811ad71e90aa2b6a4607d0c1abbca408"
x-amz-server-side-encryption: AES256
x-amz-version-id: 81MuOeXvMcGTDHro98HRrw2Z00ZGzEYB
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 201631
cache-control: max-age=31536000
expires: Sat, 30 Nov 2024 20:23:54 GMT
date: Fri, 01 Dec 2023 20:23:54 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
File type JSON data\012- , ASCII text
Hash c6c8ae8c27f35737303f469a97a0d6d6
652c1467367da3131d0854c68fe420d0e120801b
b17894a60beab7a08942328a9ba3791758ec9035b8d4b4e79df43145d47e5533
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/
Content-Type: application/json
Content-Length: 563
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:54 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
buttersource.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3llx%2FXFx8SIoDB5kF2TSPb%2FHPayuaySYTeLuSi5eqquqJ7Wp7mqquqcnOUUXZG%2BOeFFPnW%2BSDbsGcf8AQTpeloCQuWhAc%2FAmeBFx8Sg9GYg%2B6Pfe1987fN979cl2ekI8pPR45YbelErRuVbNrV5alRHXma0u3a56bs29Ul2VUbt5pToskxm84bmtmnu5%2Bq5g63qu7nqu67ledV4aEejh3JSFjPd7Xq3n1pr1mtdqYmj%2Bj23qwFIHfHBCLkLyyVNrjx9BsgJR%2BO11YdcTHb%2F%2BTpgqmmiDAd%2F7IFqPdBYhPGsD4yCI9mbT0HZCyBfnoKO9mQPowU7pAL6cEOcnD360N5MJf7B7qtRXEBF8%2FhyyQQGhCkhagOm7kPyIAIxjaRlReH9Jm4xunLK0ZCfk%2FJO%2FILMJOf%2Fri4jCb64pOaze0ipNpI4shkEOOSwg%2BwXi9ADJpgOZHYAlH0PyH8nck0VE4c6yVRqS51P3UhaQQQElRqDWQVp%2B0kEaOEhjByE%2FrtJWL3DdTuAHjUa3yRhrNBhrddu8xRvNbuAiZaW8EZJ4BKZGYGYLsdnCuvzsqHURJv0edi2H5Q5sMiHO%2B1sY8ByZIMgsQUYJMkmQJQTZIN%2FlytZtfp8rm%2FrerNZntZGPddLfprs66YuIgJrRdnxCXpiu55%2Ffnsa6OK6ynldveO0OrTfabd5ou4w3edfllNcpa7S6sDKHtOemjjfLW%2BEC4rLe%2BAM%2BPYBVB2CyApp6oNm4U3dB18bNrovN6MEg7StaYzoE1zni5DySDWdbnZCXpiI6H%2F0JwQ6v7l%2F6u%2Fj0w8tgJkdsctyRPxD01b3xTZ2RnZs6s%2BTRcpzIUG7S8n63EpqIysP3xEamDV%2B4bkcP3mIlUbb7t4VNFmnEZdS35OtrknNh5rVhgny3YFeFv5LatWupidJ4ceXt%2BYUwNsJaqaMCVB49X4DJCXnm8Pr0Zb4yvwZpCpg0R5gekllA6gOweAs2Prz68OX9C95rv8NqAqPOZvy4gizNx6bun%2F1UkkCJM0z9HPY%2F2D%2Frt%2B099E0FNLmLKMwxMDkGKgdVI9j02XESm8Orj78s4yv4qjL2lans%2BMqozyfk1covZTo5XbKVx1XRCtxAuHXhBz0%2F6FCX94Jmz6c9T3T8FvWQ2Im48%2BbP%2FwIAAP%2F%2FAQAA%2F%2F%2Bf%2FpmdewQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 buttersource.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3llx%2FXFx8SIoDB5kF2TSPb%2FHPayuaySYTeLuSi5eqquqJ7Wp7mqquqcnOUUXZG%2BOeFFPnW%2BSDbsGcf8AQTpeloCQuWhAc%2FAmeBFx8Sg9GYg%2B6Pfe1987fN979cl2ekI8pPR45YbelErRuVbNrV5alRHXma0u3a56bs29Ul2VUbt5pToskxm84bmtmnu5%2Bq5g63qu7nqu67ledV4aEejh3JSFjPd7Xq3n1pr1mtdqYmj%2Bj23qwFIHfHBCLkLyyVNrjx9BsgJR%2BO11YdcTHb%2F%2BTpgqmmiDAd%2F7IFqPdBYhPGsD4yCI9mbT0HZCyBfnoKO9mQPowU7pAL6cEOcnD360N5MJf7B7qtRXEBF8%2FhyyQQGhCkhagOm7kPyIAIxjaRlReH9Jm4xunLK0ZCfk%2FJO%2FILMJOf%2Fri4jCb64pOaze0ipNpI4shkEOOSwg%2BwXi9ADJpgOZHYAlH0PyH8nck0VE4c6yVRqS51P3UhaQQQElRqDWQVp%2B0kEaOEhjByE%2FrtJWL3DdTuAHjUa3yRhrNBhrddu8xRvNbuAiZaW8EZJ4BKZGYGYLsdnCuvzsqHURJv0edi2H5Q5sMiHO%2B1sY8ByZIMgsQUYJMkmQJQTZIN%2FlytZtfp8rm%2FrerNZntZGPddLfprs66YuIgJrRdnxCXpiu55%2Ffnsa6OK6ynldveO0OrTfabd5ou4w3edfllNcpa7S6sDKHtOemjjfLW%2BEC4rLe%2BAM%2BPYBVB2CyApp6oNm4U3dB18bNrovN6MEg7StaYzoE1zni5DySDWdbnZCXpiI6H%2F0JwQ6v7l%2F6u%2Fj0w8tgJkdsctyRPxD01b3xTZ2RnZs6s%2BTRcpzIUG7S8n63EpqIysP3xEamDV%2B4bkcP3mIlUbb7t4VNFmnEZdS35OtrknNh5rVhgny3YFeFv5LatWupidJ4ceXt%2BYUwNsJaqaMCVB49X4DJCXnm8Pr0Zb4yvwZpCpg0R5gekllA6gOweAs2Prz68OX9C95rv8NqAqPOZvy4gizNx6bun%2F1UkkCJM0z9HPY%2F2D%2Frt%2B099E0FNLmLKMwxMDkGKgdVI9j02XESm8Orj78s4yv4qjL2lans%2BMqozyfk1covZTo5XbKVx1XRCtxAuHXhBz0%2F6FCX94Jmz6c9T3T8FvWQ2Im48%2BbP%2FwIAAP%2F%2FAQAA%2F%2F%2Bf%2FpmdewQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectbuttersource.com
FingerprintFA:3D:D1:74:88:B5:6E:F0:15:0C:E7:94:01:5D:C7:6B:18:60:BE:7F
ValidityTue, 28 Nov 2023 07:57:17 GMT - Mon, 26 Feb 2024 07:57:16 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz2skRRSu3llx%2FXFx8SIoDB5kF2TSPb%2FHPayuaySYTeLuSi5eqquqJ7Wp7mqquqcnOUUXZG%2BOeFFPnW%2BSDbsGcf8AQTpeloCQuWhAc%2FAmeBFx8Sg9GYg%2B6Pfe1987fN979cl2ekI8pPR45YbelErRuVbNrV5alRHXma0u3a56bs29Ul2VUbt5pToskxm84bmtmnu5%2Bq5g63qu7nqu67ledV4aEejh3JSFjPd7Xq3n1pr1mtdqYmj%2Bj23qwFIHfHBCLkLyyVNrjx9BsgJR%2BO11YdcTHb%2F%2BTpgqmmiDAd%2F7IFqPdBYhPGsD4yCI9mbT0HZCyBfnoKO9mQPowU7pAL6cEOcnD360N5MJf7B7qtRXEBF8%2FhyyQQGhCkhagOm7kPyIAIxjaRlReH9Jm4xunLK0ZCfk%2FJO%2FILMJOf%2Fri4jCb64pOaze0ipNpI4shkEOOSwg%2BwXi9ADJpgOZHYAlH0PyH8nck0VE4c6yVRqS51P3UhaQQQElRqDWQVp%2B0kEaOEhjByE%2FrtJWL3DdTuAHjUa3yRhrNBhrddu8xRvNbuAiZaW8EZJ4BKZGYGYLsdnCuvzsqHURJv0edi2H5Q5sMiHO%2B1sY8ByZIMgsQUYJMkmQJQTZIN%2FlytZtfp8rm%2FrerNZntZGPddLfprs66YuIgJrRdnxCXpiu55%2Ffnsa6OK6ynldveO0OrTfabd5ou4w3edfllNcpa7S6sDKHtOemjjfLW%2BEC4rLe%2BAM%2BPYBVB2CyApp6oNm4U3dB18bNrovN6MEg7StaYzoE1zni5DySDWdbnZCXpiI6H%2F0JwQ6v7l%2F6u%2Fj0w8tgJkdsctyRPxD01b3xTZ2RnZs6s%2BTRcpzIUG7S8n63EpqIysP3xEamDV%2B4bkcP3mIlUbb7t4VNFmnEZdS35OtrknNh5rVhgny3YFeFv5LatWupidJ4ceXt%2BYUwNsJaqaMCVB49X4DJCXnm8Pr0Zb4yvwZpCpg0R5gekllA6gOweAs2Prz68OX9C95rv8NqAqPOZvy4gizNx6bun%2F1UkkCJM0z9HPY%2F2D%2Frt%2B099E0FNLmLKMwxMDkGKgdVI9j02XESm8Orj78s4yv4qjL2lans%2BMqozyfk1covZTo5XbKVx1XRCtxAuHXhBz0%2F6FCX94Jmz6c9T3T8FvWQ2Im48%2BbP%2FwIAAP%2F%2FAQAA%2F%2F%2Bf%2FpmdewQAAA%3D%3D HTTP/1.1
Host: buttersource.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: u_pl=16310791; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f1f0db496f05b49efc6867339b775ee7
Strict-Transport-Security: max-age=0; includeSubdomains
buttersource.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuzqwY9KLBi%2BBh8CAKMts9v8ccojFGFje7axLZc3VV9Wxlq7uaqv4xu6eNgZDjiBf11PvNbpbERcwfoMisl7Ao7Fx0QffgTfAiQshRejIw%2BqDqvVffO3zf9%2BrubnpGPKT0dO2a3pZK0cVWza2%2BuS4jrnNbXblZ9dyae7G6LqN282J1UF4me8dzWzX3reqHgm3qxbrrua7netWr0ohADxanKGR82PNqPbfWrNe8VhMD8%2F%2Fepg4sdcCzM3IBkk%2Be23j8CJKNEYXfXhF2M9Hx2x%2BEqaKJNsj4wSfRZqTzCOG8DIyDIDqYTUPbCSFfnIOODmYKoLO9UgF8OSHOLx786GBGE362%2F4ypryAi%2BPxF5NkYQo0h6RhM34HkJwRgHCuriML7K9rkdOsZSkt0Qhae%2FAOZT8jC768gCr%2B5rOSgekOrNJE6shgEBeRgDNkfI06PkGw7kPkRWPIpJP%2BZLD5ZRhTurVqlIXkxVS%2FlGDIYQ4khqHWQlkc6SAMHaewg5KdV2uoFrtsJ%2FKDR6DYZY40GY61um7d4o9kNXKSspDdEEg%2FB1BDM7CA2O9iUn520LsCkP8BuFLDcgU0mxPl4BxkvkAuC3BLklCCXBHlCkGfFPle2bov7XNnU92a5PsuNYqST%2Fi7d10lfRATUDHfjM%2FLy1J6nfzyPTXFaZT2v3vDaHVpvtNu80XYZb%2FKuyymvU9ZodWFlAWnPTRVvl7vCecRlvvYXfHoEq47AZAU09UDzUafugm6Mml0X29GDLO0rWmM6BNcF4mQByZazq87Iq1MSr1fOINjxpYevHZ733vgTzBSITYFb8keCvro3uq5zsndd55Y8Wo0TGcptWu7vRkITUXn4kdjKteFLV%2BzwwXusBMry8KawyTKNuIz6lnx9WXIuzFVtmCDfLdl14a%2BlduNyaqI0Xl57%2F%2BpSGBthrdTRGFSerD4FkxOycPv76c986ae7kGYMkxYI02MyC0h9BBbvwMZz9lYTGDWf8eNzyNNiZOr%2B%2FFFJAiXmPfUL2P%2F0%2FrzetffQNxXQ5A6isEBmCmSqAFVD2PSFURKb40uPvyzjK%2FiqMvKVqez5yqjPS2t%2Fm%2Fo7IZ3bf8PK06poBW4g3Lrwg54fdKjLe0Gz59OeJzp%2Bi3pI7ETcevfXfwEAAP%2F%2FAQAA%2F%2F8lk4CZewQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 buttersource.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuzqwY9KLBi%2BBh8CAKMts9v8ccojFGFje7axLZc3VV9Wxlq7uaqv4xu6eNgZDjiBf11PvNbpbERcwfoMisl7Ao7Fx0QffgTfAiQshRejIw%2BqDqvVffO3zf9%2BrubnpGPKT0dO2a3pZK0cVWza2%2BuS4jrnNbXblZ9dyae7G6LqN282J1UF4me8dzWzX3reqHgm3qxbrrua7netWr0ohADxanKGR82PNqPbfWrNe8VhMD8%2F%2Fepg4sdcCzM3IBkk%2Be23j8CJKNEYXfXhF2M9Hx2x%2BEqaKJNsj4wSfRZqTzCOG8DIyDIDqYTUPbCSFfnIOODmYKoLO9UgF8OSHOLx786GBGE362%2F4ypryAi%2BPxF5NkYQo0h6RhM34HkJwRgHCuriML7K9rkdOsZSkt0Qhae%2FAOZT8jC768gCr%2B5rOSgekOrNJE6shgEBeRgDNkfI06PkGw7kPkRWPIpJP%2BZLD5ZRhTurVqlIXkxVS%2FlGDIYQ4khqHWQlkc6SAMHaewg5KdV2uoFrtsJ%2FKDR6DYZY40GY61um7d4o9kNXKSspDdEEg%2FB1BDM7CA2O9iUn520LsCkP8BuFLDcgU0mxPl4BxkvkAuC3BLklCCXBHlCkGfFPle2bov7XNnU92a5PsuNYqST%2Fi7d10lfRATUDHfjM%2FLy1J6nfzyPTXFaZT2v3vDaHVpvtNu80XYZb%2FKuyymvU9ZodWFlAWnPTRVvl7vCecRlvvYXfHoEq47AZAU09UDzUafugm6Mml0X29GDLO0rWmM6BNcF4mQByZazq87Iq1MSr1fOINjxpYevHZ733vgTzBSITYFb8keCvro3uq5zsndd55Y8Wo0TGcptWu7vRkITUXn4kdjKteFLV%2BzwwXusBMry8KawyTKNuIz6lnx9WXIuzFVtmCDfLdl14a%2BlduNyaqI0Xl57%2F%2BpSGBthrdTRGFSerD4FkxOycPv76c986ae7kGYMkxYI02MyC0h9BBbvwMZz9lYTGDWf8eNzyNNiZOr%2B%2FFFJAiXmPfUL2P%2F0%2FrzetffQNxXQ5A6isEBmCmSqAFVD2PSFURKb40uPvyzjK%2FiqMvKVqez5yqjPS2t%2Fm%2Fo7IZ3bf8PK06poBW4g3Lrwg54fdKjLe0Gz59OeJzp%2Bi3pI7ETcevfXfwEAAP%2F%2FAQAA%2F%2F8lk4CZewQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectbuttersource.com
FingerprintFA:3D:D1:74:88:B5:6E:F0:15:0C:E7:94:01:5D:C7:6B:18:60:BE:7F
ValidityTue, 28 Nov 2023 07:57:17 GMT - Mon, 26 Feb 2024 07:57:16 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuzqwY9KLBi%2BBh8CAKMts9v8ccojFGFje7axLZc3VV9Wxlq7uaqv4xu6eNgZDjiBf11PvNbpbERcwfoMisl7Ao7Fx0QffgTfAiQshRejIw%2BqDqvVffO3zf9%2BrubnpGPKT0dO2a3pZK0cVWza2%2BuS4jrnNbXblZ9dyae7G6LqN282J1UF4me8dzWzX3reqHgm3qxbrrua7netWr0ohADxanKGR82PNqPbfWrNe8VhMD8%2F%2Fepg4sdcCzM3IBkk%2Be23j8CJKNEYXfXhF2M9Hx2x%2BEqaKJNsj4wSfRZqTzCOG8DIyDIDqYTUPbCSFfnIOODmYKoLO9UgF8OSHOLx786GBGE362%2F4ypryAi%2BPxF5NkYQo0h6RhM34HkJwRgHCuriML7K9rkdOsZSkt0Qhae%2FAOZT8jC768gCr%2B5rOSgekOrNJE6shgEBeRgDNkfI06PkGw7kPkRWPIpJP%2BZLD5ZRhTurVqlIXkxVS%2FlGDIYQ4khqHWQlkc6SAMHaewg5KdV2uoFrtsJ%2FKDR6DYZY40GY61um7d4o9kNXKSspDdEEg%2FB1BDM7CA2O9iUn520LsCkP8BuFLDcgU0mxPl4BxkvkAuC3BLklCCXBHlCkGfFPle2bov7XNnU92a5PsuNYqST%2Fi7d10lfRATUDHfjM%2FLy1J6nfzyPTXFaZT2v3vDaHVpvtNu80XYZb%2FKuyymvU9ZodWFlAWnPTRVvl7vCecRlvvYXfHoEq47AZAU09UDzUafugm6Mml0X29GDLO0rWmM6BNcF4mQByZazq87Iq1MSr1fOINjxpYevHZ733vgTzBSITYFb8keCvro3uq5zsndd55Y8Wo0TGcptWu7vRkITUXn4kdjKteFLV%2BzwwXusBMry8KawyTKNuIz6lnx9WXIuzFVtmCDfLdl14a%2BlduNyaqI0Xl57%2F%2BpSGBthrdTRGFSerD4FkxOycPv76c986ae7kGYMkxYI02MyC0h9BBbvwMZz9lYTGDWf8eNzyNNiZOr%2B%2FFFJAiXmPfUL2P%2F0%2FrzetffQNxXQ5A6isEBmCmSqAFVD2PSFURKb40uPvyzjK%2FiqMvKVqez5yqjPS2t%2Fm%2Fo7IZ3bf8PK06poBW4g3Lrwg54fdKjLe0Gz59OeJzp%2Bi3pI7ETcevfXfwEAAP%2F%2FAQAA%2F%2F8lk4CZewQAAA%3D%3D HTTP/1.1
Host: buttersource.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: u_pl=16310791; pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d74d09db5405c88af6b0c5c975727f4f
Strict-Transport-Security: max-age=0; includeSubdomains
www.nbfcs.org/px.js?ch=2&abp=1
200 OK 476 B URL GET HTTP/1.1 www.nbfcs.org/px.js?ch=2&abp=1
IP
Requested by https://www.nbfcs.org/#signUp=754549898436681728
Certificate IssuerGoDaddy.com, Inc.
Subjectwww.nbfcs.org
FingerprintE0:6B:EC:7B:D6:B0:6E:9E:26:18:76:0D:83:E2:83:F9:02:52:F5:09
ValidityFri, 17 Nov 2023 10:08:39 GMT - Sun, 17 Nov 2024 10:08:39 GMT
Hash d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc
GET /px.js?ch=2&abp=1 HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Thu, 30 Nov 2023 23:51:13 GMT
Connection: keep-alive
ETag: "65691ff1-1dc"
Accept-Ranges: bytes
rollerstrayprawn.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRit3qwiiIJB%2FANhDgEV3dnunu6dHnNYjTEhmD%2BTaK5WV1XPVra6q6nqnt7saWNAc5ygB4%2B9bzZZo0HMVZDIrB5kIbDjQeaQ9SqoIARyltkdWPwO9X1V7x3ee199tl7uEg8lHZ8%2Fo1elUnQ%2BbLqN1y%2FLjOvKNs5eanhu0z3auCyzheBoY2VymN7bnhs23TcaJwVb1vO%2B67mu53qNE9KIRK%2FM76GQ%2Bd2O1%2By4zcBvemGAFfP%2Fuy0dWOqA93bJYUg%2BemLp13uQbIgs%2Ff64sMuFzt96Py0VLbRBj29%2BlC1nusqQHoyJcZBkm1M2tB0R8tUMdLY5dQDd25g4QCxHxPndQ5xtTmUi7t3aVxoriAwxfxpVbwihhpB0CKavQ%2FIdAjCOs%2BeQpbfPalPRq%2FsonaAjMvv4EWQ1IrMPn0eWfndMyZXGRa3KQurMYiWpIVeGkN0h8nILxaoDWW2BFZ9C8gdk%2FvFpZOnGOas0JB8fodQL2jSJ51pRkMwFvsvnopCGc5HPhM9ESP0o2otIyiFkMoQSfVB7CKV1UEoHZeKgzB2kfNygYSdx3XYSJ61WFDDGWi3GwmiBh7wVRImLkk089FHkfTDVBzNryM0aluXNnfAwTPkT7FINy2dgixFxPlxDj9eoBEFlCSpKUEmCqiCoevUtrqxv69tc2TL2pt2f9lY90EV3nd7SRVdkBNT01%2FNd8txehn%2F9GWFZjBvca7Vd3%2B%2F4YcyYTxciN4loELQXkqQTeEEAK2tIOwNqHaxOFoqnkE%2F6mb8R0y1YtQUmD4GWr4JWg7bvgi4NgsjFananV3YVbTKdgusaeTGL4qqzrnbJy3siTn55DYJtL%2F7z7MezL31RgpkaualxRf5M0FU3Bhd0RTYu6MqSe%2BfyQqZylU6WfLGghZj95gNxtdKGnzpu%2B3feZRNgMt69JGxxmmZcZl1Lvj0mORfmhDZMkB9P2csiPl%2FapWOlycr89Pn3TpxKcyOslTobgsqdT%2B6DyRF55vbi3vd97esfIM0QpqyRlttkWpB6Cyxfg823F%2F94MH7h8zdnYDWBUQecOHdQlfXA%2BPHBo5Ij4j96EUpsL%2F5y7ckjD%2BdfAY1rWHEQQyy27%2F%2B7z1%2B3N9A1DmhxHVlao2dq9FQNqvqw5aFBkZvtxd9ae4VYOYNYGWcjVkbd3I%2FXynFDhImbCNcXcdKJkzZ1eScJOjHteKIdh9RDYUfiyjvj%2FwAAAP%2F%2FAQAA%2F%2F%2F52pnzmgQAAA%3D%3D
200 OK 7 B URL GET HTTP/1.1 rollerstrayprawn.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRit3qwiiIJB%2FANhDgEV3dnunu6dHnNYjTEhmD%2BTaK5WV1XPVra6q6nqnt7saWNAc5ygB4%2B9bzZZo0HMVZDIrB5kIbDjQeaQ9SqoIARyltkdWPwO9X1V7x3ee199tl7uEg8lHZ8%2Fo1elUnQ%2BbLqN1y%2FLjOvKNs5eanhu0z3auCyzheBoY2VymN7bnhs23TcaJwVb1vO%2B67mu53qNE9KIRK%2FM76GQ%2Bd2O1%2By4zcBvemGAFfP%2Fuy0dWOqA93bJYUg%2BemLp13uQbIgs%2Ff64sMuFzt96Py0VLbRBj29%2BlC1nusqQHoyJcZBkm1M2tB0R8tUMdLY5dQDd25g4QCxHxPndQ5xtTmUi7t3aVxoriAwxfxpVbwihhpB0CKavQ%2FIdAjCOs%2BeQpbfPalPRq%2FsonaAjMvv4EWQ1IrMPn0eWfndMyZXGRa3KQurMYiWpIVeGkN0h8nILxaoDWW2BFZ9C8gdk%2FvFpZOnGOas0JB8fodQL2jSJ51pRkMwFvsvnopCGc5HPhM9ESP0o2otIyiFkMoQSfVB7CKV1UEoHZeKgzB2kfNygYSdx3XYSJ61WFDDGWi3GwmiBh7wVRImLkk089FHkfTDVBzNryM0aluXNnfAwTPkT7FINy2dgixFxPlxDj9eoBEFlCSpKUEmCqiCoevUtrqxv69tc2TL2pt2f9lY90EV3nd7SRVdkBNT01%2FNd8txehn%2F9GWFZjBvca7Vd3%2B%2F4YcyYTxciN4loELQXkqQTeEEAK2tIOwNqHaxOFoqnkE%2F6mb8R0y1YtQUmD4GWr4JWg7bvgi4NgsjFananV3YVbTKdgusaeTGL4qqzrnbJy3siTn55DYJtL%2F7z7MezL31RgpkaualxRf5M0FU3Bhd0RTYu6MqSe%2BfyQqZylU6WfLGghZj95gNxtdKGnzpu%2B3feZRNgMt69JGxxmmZcZl1Lvj0mORfmhDZMkB9P2csiPl%2FapWOlycr89Pn3TpxKcyOslTobgsqdT%2B6DyRF55vbi3vd97esfIM0QpqyRlttkWpB6Cyxfg823F%2F94MH7h8zdnYDWBUQecOHdQlfXA%2BPHBo5Ij4j96EUpsL%2F5y7ckjD%2BdfAY1rWHEQQyy27%2F%2B7z1%2B3N9A1DmhxHVlao2dq9FQNqvqw5aFBkZvtxd9ae4VYOYNYGWcjVkbd3I%2FXynFDhImbCNcXcdKJkzZ1eScJOjHteKIdh9RDYUfiyjvj%2FwAAAP%2F%2FAQAA%2F%2F%2F52pnzmgQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectrollerstrayprawn.com
Fingerprint9E:74:D1:93:DF:47:C6:06:84:EA:02:9E:E8:F3:B5:CF:52:D3:9F:D0
ValidityTue, 28 Nov 2023 10:59:19 GMT - Mon, 26 Feb 2024 10:59:18 GMT
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRit3qwiiIJB%2FANhDgEV3dnunu6dHnNYjTEhmD%2BTaK5WV1XPVra6q6nqnt7saWNAc5ygB4%2B9bzZZo0HMVZDIrB5kIbDjQeaQ9SqoIARyltkdWPwO9X1V7x3ee199tl7uEg8lHZ8%2Fo1elUnQ%2BbLqN1y%2FLjOvKNs5eanhu0z3auCyzheBoY2VymN7bnhs23TcaJwVb1vO%2B67mu53qNE9KIRK%2FM76GQ%2Bd2O1%2By4zcBvemGAFfP%2Fuy0dWOqA93bJYUg%2BemLp13uQbIgs%2Ff64sMuFzt96Py0VLbRBj29%2BlC1nusqQHoyJcZBkm1M2tB0R8tUMdLY5dQDd25g4QCxHxPndQ5xtTmUi7t3aVxoriAwxfxpVbwihhpB0CKavQ%2FIdAjCOs%2BeQpbfPalPRq%2FsonaAjMvv4EWQ1IrMPn0eWfndMyZXGRa3KQurMYiWpIVeGkN0h8nILxaoDWW2BFZ9C8gdk%2FvFpZOnGOas0JB8fodQL2jSJ51pRkMwFvsvnopCGc5HPhM9ESP0o2otIyiFkMoQSfVB7CKV1UEoHZeKgzB2kfNygYSdx3XYSJ61WFDDGWi3GwmiBh7wVRImLkk089FHkfTDVBzNryM0aluXNnfAwTPkT7FINy2dgixFxPlxDj9eoBEFlCSpKUEmCqiCoevUtrqxv69tc2TL2pt2f9lY90EV3nd7SRVdkBNT01%2FNd8txehn%2F9GWFZjBvca7Vd3%2B%2F4YcyYTxciN4loELQXkqQTeEEAK2tIOwNqHaxOFoqnkE%2F6mb8R0y1YtQUmD4GWr4JWg7bvgi4NgsjFananV3YVbTKdgusaeTGL4qqzrnbJy3siTn55DYJtL%2F7z7MezL31RgpkaualxRf5M0FU3Bhd0RTYu6MqSe%2BfyQqZylU6WfLGghZj95gNxtdKGnzpu%2B3feZRNgMt69JGxxmmZcZl1Lvj0mORfmhDZMkB9P2csiPl%2FapWOlycr89Pn3TpxKcyOslTobgsqdT%2B6DyRF55vbi3vd97esfIM0QpqyRlttkWpB6Cyxfg823F%2F94MH7h8zdnYDWBUQecOHdQlfXA%2BPHBo5Ij4j96EUpsL%2F5y7ckjD%2BdfAY1rWHEQQyy27%2F%2B7z1%2B3N9A1DmhxHVlao2dq9FQNqvqw5aFBkZvtxd9ae4VYOYNYGWcjVkbd3I%2FXynFDhImbCNcXcdKJkzZ1eScJOjHteKIdh9RDYUfiyjvj%2FwAAAP%2F%2FAQAA%2F%2F%2F52pnzmgQAAA%3D%3D HTTP/1.1
Host: rollerstrayprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: u_pl=15460408; uid_id2=aa147afb-384f-420d-85a5-82ce2ce5a288:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9f976c5044435c7f9e61dffdce3d09f2
Strict-Transport-Security: max-age=0; includeSubdomains
rudimentarydelay.com/pixel/purst?dl=0&th=0&sc=0&rs=6255&rd=6255&fd=235&bv=23.11.v.8&tmpl=136
200 OK 0 B URL GET HTTP/1.1 rudimentarydelay.com/pixel/purst?dl=0&th=0&sc=0&rs=6255&rd=6255&fd=235&bv=23.11.v.8&tmpl=136
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectrudimentarydelay.com
FingerprintAF:AC:08:6C:AD:81:27:4D:77:70:CD:C5:06:F7:10:EE:8E:EE:2C:9D
ValidityTue, 28 Nov 2023 10:48:56 GMT - Mon, 26 Feb 2024 10:48:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=6255&rd=6255&fd=235&bv=23.11.v.8&tmpl=136 HTTP/1.1
Host: rudimentarydelay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
vaugroar.com/custom
200 OK 39 B IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectvaugroar.com
FingerprintF5:48:7D:7C:B6:28:8D:55:D3:7D:CF:03:2F:84:BE:B7:FD:20:F0:EE
ValiditySun, 12 Nov 2023 05:15:08 GMT - Sat, 10 Feb 2024 05:15:07 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /custom HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/
Content-Type: application/json
Content-Length: 798
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:55 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 89495bb8beff77e855238494f4fd7b8d
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/img/close.png
200 OK 9.0 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/img/close.png
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type PNG image data, 497 x 496, 8-bit/color RGBA, non-interlaced\012- data
Hash b080cbdd5cc827b5a659a45676c079d4
3502ad6743a3a42dd92ee3cea142616356f47359
c89d28b4be45a7af77493e8f6c76894a7ba86469e5b6733e6ca3cb33eaabcd8f
GET /sb/notifications/games/hentai-heroes/global/custom-banner/1/img/close.png HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:55 GMT
content-type: image/png
content-length: 8952
last-modified: Thu, 19 Oct 2023 15:25:30 GMT
etag: "65314a6a-22f8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 2631925
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4HauftGX8iDD84FULfJiaWndEqaFfJKBXEzJRM715t07nOs0FaaCutKo1WBB4TNvTeurSVsK0Ct5ASuaU7b9MDqjMr%2B6XyYiqWN3884E%2FKa%2Bjx%2F0qgsk%2FzAyVOVqA9hnu45%2Fk1Kjr%2B5S"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0cfa3fde7327-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/img/bg.jpg
200 OK 197 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/img/bg.jpg
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Size 197 kB (196572 bytes)
Hash 0f268ac97ce309645d705ae25e03383b
4c1462adfe8488d6f43f5a56a36b6302a29ac054
9d809e2358a07890e0a8683526070118f7c1056f25e30aee0fdfd020d6377bad
GET /sb/notifications/games/hentai-heroes/global/custom-banner/1/img/bg.jpg HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:55 GMT
content-type: image/jpeg
content-length: 196572
last-modified: Thu, 19 Oct 2023 15:25:32 GMT
etag: "65314a6c-2ffdc"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1613289
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YfJBkfbyTtxZAFad3P1FVAcXPEzFk3AQx0BsaAAM9cI3%2FLsB32TezEQXrAD0DhoNwL6i9Hl0wgxrg%2BmZpPplVXQRzN5zlYxJbs5iQwSRFp22MJPJDyBVfXLBnyDoTYMXu5X%2F2jMVv%2Fk4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0cfa3fe77327-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
200 OK 16 kB URL GET HTTP/3 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 8b43bb61c3ca5de5afa71fe41a08e0b9
476a25c876fb48b0b52889e8a4893b80c873e7a0
f587d15772eac84ae6fcffa74c0c0de3db9db5be89c058f3b23a6184eb2eb059
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 20:23:55 GMT
date: Fri, 01 Dec 2023 20:23:55 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 169799
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/css/animate.css
200 OK 4.9 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/css/animate.css
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash e1d8acd5ee9d1a90ea09313cbd8f2b02
8a8327b115d1356715e63270d1ce6d46124c7b1a
3028c87fc798ac3741f02079034e6c23462afc0c5e6c8d321188ce3716c8472a
GET /sb/notifications/games/hentai-heroes/global/custom-banner/1/css/animate.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:55 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 15:30:49 GMT
etag: W/"65314ba9-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q%2F%2F6vssb2CwK0rhsqOvHqZvFv8Kg8RmjMbw03TjXz6EN%2BHn0%2FlZyjOdUBmQSS%2FGESOxCzOP3sHWwpsvLObPvw0lqxuQniOkm1qrHKv5EsAObXz1tNa1cKvtLj%2FOwt%2BFPfQokwrwXatBT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0cf99e3f531c-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
rollerstrayprawn.com/pixel/sbs?c=1
200 OK 0 B URL GET HTTP/1.1 rollerstrayprawn.com/pixel/sbs?c=1
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectrollerstrayprawn.com
Fingerprint9E:74:D1:93:DF:47:C6:06:84:EA:02:9E:E8:F3:B5:CF:52:D3:9F:D0
ValidityTue, 28 Nov 2023 10:59:19 GMT - Mon, 26 Feb 2024 10:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: rollerstrayprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: u_pl=15460408; uid_id2=aa147afb-384f-420d-85a5-82ce2ce5a288:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:55 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/fonts/gP1RrxsjcxVyin9l9nj2hTd52.woff2
200 OK 17 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/fonts/gP1RrxsjcxVyin9l9nj2hTd52.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type Web Open Font Format (Version 2), TrueType, length 17360, version 1.0\012- data
Hash 70322c317b1f4e2e17dbc6b672f95f5f
f3dff7c50e1aea33814c6aeeca177ae3ff900bfc
3877b522181765adf66ba89bd68d288ecb9f2483b441baab3424646b0c7aaa0a
GET /sb/notifications/games/hentai-heroes/global/custom-banner/1/fonts/gP1RrxsjcxVyin9l9nj2hTd52.woff2 HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:55 GMT
content-type: application/octet-stream
content-length: 17360
last-modified: Thu, 19 Oct 2023 15:25:28 GMT
etag: "65314a68-43d0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=017e7WE3y8mSrfRrQO0MhUGFy1y4d1d8%2B6RlC9QiE0yNVw2ZuWGhTm5%2FM2rzk%2B98RxV6iW1hayAo2EBxIr%2BFEbRqAV9%2F0Xpf7Tqu5EABd5VLlxhMV0ib6HLt05%2BlODZx0HeXpuUFkF5K"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0cfc487d531c-LHR
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
unseenreport.com/pxf.gif?uuid=aa147afb-384f-420d-85a5-82ce2ce5a288&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=d137022925bcc2a680f8a4476ff94144&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=aa147afb-384f-420d-85a5-82ce2ce5a288&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=d137022925bcc2a680f8a4476ff94144&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=aa147afb-384f-420d-85a5-82ce2ce5a288&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=d137022925bcc2a680f8a4476ff94144&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:56 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d303085121905130e3d07015e6cc96d4
Strict-Transport-Security: max-age=0; includeSubdomains
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/js/script.js
200 OK 1.5 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/js/script.js
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
Hash b64985705b68c11b9b30d7ca43e1f095
8b5d6dc7edce43d08791bbf7aec72e15dabe528d
29ad23b2ed8670b41c45429c724b7939b4b0643db9d555b79868337aaa8afca0
GET /sb/notifications/games/hentai-heroes/global/custom-banner/1/js/script.js HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:55 GMT
content-type: application/javascript
last-modified: Thu, 19 Oct 2023 15:25:32 GMT
etag: W/"65314a6c-f3c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 66571
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wiMeVohntm9Tby0dzUFOaySXtN6ovzU35aeYpjkuA4zpFZJp%2BPZeXlq8OMWMPm9uT9w2sBigW4V6%2F8Gd4IM0Z91mOnu8hvdQb%2FOfoWEb8dD3J94iqeErhmAPUjatHosdWf46BGkXqxuL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0cf9ce7f531c-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
eehuzaih.com/impression/u7v4DiK7gE0V6_auRroyZHU8wkpeUEoFmfiWECACWB12qZDriZxniMm45-fNjpSZEWnsNCuRVYnutFea1zy8nw2xIucwIoVK8KhmNxsIHS2g2DXFLI4K-6zjPgdAUgQXnoTR5IqjWcYvELJzyeM3htrh4TFK3dIZ22N4RwGiGpHl39Ghqtjh3yFtcB9-craZ1yJMFHnfqQKRkGb4hKpckaA_DoprffYt2WT7VSLCXk8U39dP8Sbx4l_fWDEJPtAn4GF1MQi--g1IOt3Dlsz35re3JHs42pVIkjrfHXmrhcHAjOoEuHe9LDXmfII_BNPCVEXzCSov0smbMFpXyfrNyyANPML1nkGhC7e7L4e7fWn70yuFJgYGzEK34BwntjOlYHh5bPu3igbmyEIK3BEjXWipYk-wE1Cwdt0Tps-LHuUxwshgFrWXbzmyf-PJwc7N9SmTUhSkTn_iILWwMCNu_lQ3hy8xVWBupHH7m2VofMKT_xmx6gZCuBOxFukvugyedLCQm8-oL0JXaxjKXZaYEolMA1TQkx8nk4VHCp9bXnGZKDG6_kH1LLJZs8I85T30kEHHNhDJejwamCuCDB-xZTEsQx7RpCcM0t04O6Zqgjeo46n5IoFMCOWC2WZ7mD0Yzi5F6CU9pGQGhQdyJ367SkLuTPprf7gRBSfMdciyLjJ0KV__9PTiKbZCJ1rhhc4sUARMIg3kAav8gnHjI__XR9Nr-f6aYRlw68r6d09O4AzaNM8WYy5yVUy51XHXEh5E0uWdhA==?_z=5005565&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=9&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
200 OK 43 B URL GET HTTP/2 eehuzaih.com/impression/u7v4DiK7gE0V6_auRroyZHU8wkpeUEoFmfiWECACWB12qZDriZxniMm45-fNjpSZEWnsNCuRVYnutFea1zy8nw2xIucwIoVK8KhmNxsIHS2g2DXFLI4K-6zjPgdAUgQXnoTR5IqjWcYvELJzyeM3htrh4TFK3dIZ22N4RwGiGpHl39Ghqtjh3yFtcB9-craZ1yJMFHnfqQKRkGb4hKpckaA_DoprffYt2WT7VSLCXk8U39dP8Sbx4l_fWDEJPtAn4GF1MQi--g1IOt3Dlsz35re3JHs42pVIkjrfHXmrhcHAjOoEuHe9LDXmfII_BNPCVEXzCSov0smbMFpXyfrNyyANPML1nkGhC7e7L4e7fWn70yuFJgYGzEK34BwntjOlYHh5bPu3igbmyEIK3BEjXWipYk-wE1Cwdt0Tps-LHuUxwshgFrWXbzmyf-PJwc7N9SmTUhSkTn_iILWwMCNu_lQ3hy8xVWBupHH7m2VofMKT_xmx6gZCuBOxFukvugyedLCQm8-oL0JXaxjKXZaYEolMA1TQkx8nk4VHCp9bXnGZKDG6_kH1LLJZs8I85T30kEHHNhDJejwamCuCDB-xZTEsQx7RpCcM0t04O6Zqgjeo46n5IoFMCOWC2WZ7mD0Yzi5F6CU9pGQGhQdyJ367SkLuTPprf7gRBSfMdciyLjJ0KV__9PTiKbZCJ1rhhc4sUARMIg3kAav8gnHjI__XR9Nr-f6aYRlw68r6d09O4AzaNM8WYy5yVUy51XHXEh5E0uWdhA==?_z=5005565&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=9&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecteehuzaih.com
FingerprintAC:55:E9:5B:5B:87:BF:89:7C:BE:E0:77:14:BE:B7:B4:16:AB:70:5A
ValiditySun, 12 Nov 2023 08:38:54 GMT - Sat, 10 Feb 2024 08:38:53 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impression/u7v4DiK7gE0V6_auRroyZHU8wkpeUEoFmfiWECACWB12qZDriZxniMm45-fNjpSZEWnsNCuRVYnutFea1zy8nw2xIucwIoVK8KhmNxsIHS2g2DXFLI4K-6zjPgdAUgQXnoTR5IqjWcYvELJzyeM3htrh4TFK3dIZ22N4RwGiGpHl39Ghqtjh3yFtcB9-craZ1yJMFHnfqQKRkGb4hKpckaA_DoprffYt2WT7VSLCXk8U39dP8Sbx4l_fWDEJPtAn4GF1MQi--g1IOt3Dlsz35re3JHs42pVIkjrfHXmrhcHAjOoEuHe9LDXmfII_BNPCVEXzCSov0smbMFpXyfrNyyANPML1nkGhC7e7L4e7fWn70yuFJgYGzEK34BwntjOlYHh5bPu3igbmyEIK3BEjXWipYk-wE1Cwdt0Tps-LHuUxwshgFrWXbzmyf-PJwc7N9SmTUhSkTn_iILWwMCNu_lQ3hy8xVWBupHH7m2VofMKT_xmx6gZCuBOxFukvugyedLCQm8-oL0JXaxjKXZaYEolMA1TQkx8nk4VHCp9bXnGZKDG6_kH1LLJZs8I85T30kEHHNhDJejwamCuCDB-xZTEsQx7RpCcM0t04O6Zqgjeo46n5IoFMCOWC2WZ7mD0Yzi5F6CU9pGQGhQdyJ367SkLuTPprf7gRBSfMdciyLjJ0KV__9PTiKbZCJ1rhhc4sUARMIg3kAav8gnHjI__XR9Nr-f6aYRlw68r6d09O4AzaNM8WYy5yVUy51XHXEh5E0uWdhA==?_z=5005565&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=9&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&tzofs=0&js_build=8&sw_version=v1.312.0 HTTP/1.1
Host: eehuzaih.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: OAID=fc6b62f817f7473a906e4e9a39f79ea0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:56 GMT
content-type: image/gif
content-length: 43
x-trace-id: 319561d69f3b072897957e7c4cb1926c
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-cache, no-store, no-transform, must-revalidate, private, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: *
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-7NCJ73THPT>m=45je3bt0v879882835&_p=1701462235997&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=463628786.1701462236&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1701462236&sct=1&seg=0&dl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&dt=%C5%BDivotinje%3A%20Kako%20su%20%27rok%20zvezde%27%20pande%20ostale%20bez%20ljubavne%20pri%C4%8De%20-%20Vugla&en=scroll&epn.percent_scrolled=90&tfd=8560
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-7NCJ73THPT>m=45je3bt0v879882835&_p=1701462235997&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=463628786.1701462236&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1701462236&sct=1&seg=0&dl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&dt=%C5%BDivotinje%3A%20Kako%20su%20%27rok%20zvezde%27%20pande%20ostale%20bez%20ljubavne%20pri%C4%8De%20-%20Vugla&en=scroll&epn.percent_scrolled=90&tfd=8560
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7NCJ73THPT>m=45je3bt0v879882835&_p=1701462235997&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=463628786.1701462236&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1701462236&sct=1&seg=0&dl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&dt=%C5%BDivotinje%3A%20Kako%20su%20%27rok%20zvezde%27%20pande%20ostale%20bez%20ljubavne%20pri%C4%8De%20-%20Vugla&en=scroll&epn.percent_scrolled=90&tfd=8560 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://www.vugla.com
date: Fri, 01 Dec 2023 20:23:57 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
offerimage.com/www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg
200 OK 19 kB URL GET HTTP/2 offerimage.com/www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 71581bf2ce9a00138faf7dd80fe3e12e
56479135ed64bf23e1037067c0c87047eb8a414c
5d9f95c8c06343cc189b38268296615ed8816d8154b4b782ad0d62bedd23525e
GET /www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:57 GMT
content-type: image/jpeg
content-length: 19381
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
cache-control: max-age=86400
cf-bgj: h2pri
etag: "65674405-4bb5"
expires: Sat, 02 Dec 2023 14:07:42 GMT
last-modified: Wed, 29 Nov 2023 14:00:37 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 22575
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0d0758d72dfa-ARN
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 21:13:56 GMT
expires: Thu, 28 Nov 2024 21:13:56 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 169801
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 141983
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
offerimage.com/www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg
200 OK 19 kB URL GET HTTP/2 offerimage.com/www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
FingerprintDB:4D:42:F8:E2:4C:E3:E4:BB:22:D8:D1:F7:64:B5:9A:10:B6:25:E0
ValiditySun, 07 May 2023 00:00:00 GMT - Mon, 06 May 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 71581bf2ce9a00138faf7dd80fe3e12e
56479135ed64bf23e1037067c0c87047eb8a414c
5d9f95c8c06343cc189b38268296615ed8816d8154b4b782ad0d62bedd23525e
GET /www/images/71581bf2ce9a00138faf7dd80fe3e12e.jpg HTTP/1.1
Host: offerimage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:57 GMT
content-type: image/jpeg
content-length: 19381
access-control-allow-credentials: true
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
cache-control: max-age=86400
cf-bgj: h2pri
etag: "65674405-4bb5"
expires: Sat, 02 Dec 2023 14:07:42 GMT
last-modified: Wed, 29 Nov 2023 14:00:37 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 22575
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0d07f9792dfa-ARN
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
17 kB URL fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700
IP
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash fcc7ee5678541adea03770b8cfafd146
e5d4c9d76cabeef9e8faa14ff0ed07bd097396fc
1474e26a5116379d3fa3f65cec9f195f0d826c24891a55a15f39c92dae12405d
GET /css2?family=Roboto:wght@100;300;400;500;700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 20:23:57 GMT
date: Fri, 01 Dec 2023 20:23:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/3 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 141983
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tharbadir.com/11?rnd=1404754519&z=2892323&b=15763363&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=GFOt6dZtFtUvadx--7WZItHuwKOehtJ_sVwEBamYXT-HGbzJGaPeV9lYpZqi5siCf7di2jCOdPuFDX-gNQg32aNKOq5i0LlSBmTd9SXGTZos1zOf3mG4ejyO42GlyNdoVrxUUx2LmDygsvn_cZYIuRI1m0ez4vOU_s85VofWorYLyimjQJ_vWGcY9oxl1zx03HYpjD9qo4SaTKUyHLxpWowt4hvcCWnmQHRwwEnNZ52DF0Y08uuFBtZ2vupO3jz7UBnWkCtUcm5E73JxTjrVBW9ejjdJORDPFkqOedvekev2i763kXRFGMCXCZOcIyCh8MNK3RYvq9tRvlAn4zIsqtBNtWfs9O4sORiugwTT-tya2DSsbkipPDDNC6Yzws9C4HnrRRmH_MEFK3uBzcZBghobKM0jf-NU2TwpRl9lsxvVlIsiWSny9f2gEQU2PNBMBxrl3T9QRSJapLdZ-aCXoNLX600KglmVmhVDDbNZjyYcPbmDHS949EpiTE_3Xoh3nvTnsRSB_as9AFLF4kdU1Aws8JRDsdlxzyFLPKH_06Nxcy5cg2FgZcXdnXJavdZN9w_z7q09Y7UV2cvjUSTFsNLooamCXlc9btprKRl15GS_FxkeqiSAkluw9NZLBrQldZ5MmJHqJCuobEuq26tYB64Z4UQ6qGgldX4Pzrgo3KFyRbHePETHSGioFv6V8dt-RDrDdmyIuPP4PIbB-tvCdlnm6Nq6o-cHwTf1Uw==&ruid=36d21996-3161-4244-a1dd-aa2fea7ab614&subid=754549898436681728&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
200 OK 0 B URL GET HTTP/2 tharbadir.com/11?rnd=1404754519&z=2892323&b=15763363&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=GFOt6dZtFtUvadx--7WZItHuwKOehtJ_sVwEBamYXT-HGbzJGaPeV9lYpZqi5siCf7di2jCOdPuFDX-gNQg32aNKOq5i0LlSBmTd9SXGTZos1zOf3mG4ejyO42GlyNdoVrxUUx2LmDygsvn_cZYIuRI1m0ez4vOU_s85VofWorYLyimjQJ_vWGcY9oxl1zx03HYpjD9qo4SaTKUyHLxpWowt4hvcCWnmQHRwwEnNZ52DF0Y08uuFBtZ2vupO3jz7UBnWkCtUcm5E73JxTjrVBW9ejjdJORDPFkqOedvekev2i763kXRFGMCXCZOcIyCh8MNK3RYvq9tRvlAn4zIsqtBNtWfs9O4sORiugwTT-tya2DSsbkipPDDNC6Yzws9C4HnrRRmH_MEFK3uBzcZBghobKM0jf-NU2TwpRl9lsxvVlIsiWSny9f2gEQU2PNBMBxrl3T9QRSJapLdZ-aCXoNLX600KglmVmhVDDbNZjyYcPbmDHS949EpiTE_3Xoh3nvTnsRSB_as9AFLF4kdU1Aws8JRDsdlxzyFLPKH_06Nxcy5cg2FgZcXdnXJavdZN9w_z7q09Y7UV2cvjUSTFsNLooamCXlc9btprKRl15GS_FxkeqiSAkluw9NZLBrQldZ5MmJHqJCuobEuq26tYB64Z4UQ6qGgldX4Pzrgo3KFyRbHePETHSGioFv6V8dt-RDrDdmyIuPP4PIbB-tvCdlnm6Nq6o-cHwTf1Uw==&ruid=36d21996-3161-4244-a1dd-aa2fea7ab614&subid=754549898436681728&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecttharbadir.com
FingerprintA5:91:BD:23:83:6F:FE:A6:06:78:AE:E7:58:60:8E:74:B2:BA:C3:64
ValidityThu, 21 Sep 2023 16:36:00 GMT - Wed, 20 Dec 2023 16:35:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /11?rnd=1404754519&z=2892323&b=15763363&var=&varid=0&rqtdbc=0&rcvdbc=0&btp=7&rb=GFOt6dZtFtUvadx--7WZItHuwKOehtJ_sVwEBamYXT-HGbzJGaPeV9lYpZqi5siCf7di2jCOdPuFDX-gNQg32aNKOq5i0LlSBmTd9SXGTZos1zOf3mG4ejyO42GlyNdoVrxUUx2LmDygsvn_cZYIuRI1m0ez4vOU_s85VofWorYLyimjQJ_vWGcY9oxl1zx03HYpjD9qo4SaTKUyHLxpWowt4hvcCWnmQHRwwEnNZ52DF0Y08uuFBtZ2vupO3jz7UBnWkCtUcm5E73JxTjrVBW9ejjdJORDPFkqOedvekev2i763kXRFGMCXCZOcIyCh8MNK3RYvq9tRvlAn4zIsqtBNtWfs9O4sORiugwTT-tya2DSsbkipPDDNC6Yzws9C4HnrRRmH_MEFK3uBzcZBghobKM0jf-NU2TwpRl9lsxvVlIsiWSny9f2gEQU2PNBMBxrl3T9QRSJapLdZ-aCXoNLX600KglmVmhVDDbNZjyYcPbmDHS949EpiTE_3Xoh3nvTnsRSB_as9AFLF4kdU1Aws8JRDsdlxzyFLPKH_06Nxcy5cg2FgZcXdnXJavdZN9w_z7q09Y7UV2cvjUSTFsNLooamCXlc9btprKRl15GS_FxkeqiSAkluw9NZLBrQldZ5MmJHqJCuobEuq26tYB64Z4UQ6qGgldX4Pzrgo3KFyRbHePETHSGioFv6V8dt-RDrDdmyIuPP4PIbB-tvCdlnm6Nq6o-cHwTf1Uw==&ruid=36d21996-3161-4244-a1dd-aa2fea7ab614&subid=754549898436681728&ng=1&ix=0&pt=0&np=0&gp=5&bp=4&nw=1&nb=1&sw=1280&sh=1024&pl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&wy=0&wx=0&ww=1280&wh=1024&cw=1280&wiw=1280&wih=1024&wfc=4&sah=1024&drf=&hil=1&ist=0&ri=1&wvd=0&wvr=1.0000&isions=1 HTTP/1.1
Host: tharbadir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: scm=1; OAID=fc6b62f817f7473a906e4e9a39f79ea0; oaidts=1701462230
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:58 GMT
content-type: image/jpeg
content-length: 0
access-control-allow-credentials: true
access-control-allow-origin: https://www.vugla.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 93cc8449c6bb42a09de1d7137c96440f
access-control-expose-headers: X-Sc
set-cookie: OAID=fc6b62f817f7473a906e4e9a39f79ea0; expires=Sat, 30 Nov 2024 20:23:58 GMT; secure; SameSite=None
oaidts=1701462230; expires=Sat, 30 Nov 2024 20:23:58 GMT; secure; SameSite=None
oaidvc=1; expires=Sat, 30 Nov 2024 20:23:58 GMT; secure; SameSite=None
CNT=1_v1_o4fwAAEAAADsTAAA; expires=Fri, 01 Dec 2023 21:23:58 GMT; secure; SameSite=None
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
vaugroar.com/custom
200 OK 39 B IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectvaugroar.com
FingerprintF5:48:7D:7C:B6:28:8D:55:D3:7D:CF:03:2F:84:BE:B7:FD:20:F0:EE
ValiditySun, 12 Nov 2023 05:15:08 GMT - Sat, 10 Feb 2024 05:15:07 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /custom HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/
Content-Type: application/json
Content-Length: 426
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:59 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 8402329788789f7b970072e231f7b85e
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.yourwebbars.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/index.html
200 OK 1.4 kB URL GET HTTP/2 cdn.yourwebbars.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/index.html
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint84:82:6E:35:03:D4:C4:FC:BA:08:CD:C8:E6:A3:97:A9:20:2F:F5:49
ValiditySun, 23 Jul 2023 00:00:00 GMT - Mon, 22 Jul 2024 23:59:59 GMT
File type HTML document text\012- HTML document, ASCII text, with very long lines (1513), with no line terminators
Hash 81d8118d3537074ab40120b4e3f313d1
9e5bab2b235aadee5ef3ea18d5d73586e92e11f2
2f234b9a6693d5555fdaff9bf301a59a5912fb833f3e168fdbb717a08c6b4e51
GET /sb/notifications/games/hentai-heroes/global/custom-banner/1/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:54 GMT
content-type: text/html
last-modified: Thu, 19 Oct 2023 15:25:25 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 429385
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SM3%2B4jwf3CyI5KKplLPJ9cZaMUcpwvWacL9M1zrzmvHHLFhVx2CtAxQ5LAQJgcgmIOFdZMBxuv%2FVUeSXAfy43XaLdmo3Hfph4uah5GkELSWE7YNU3HTOZT5m6ubOWzdPnOIkapA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0cf809bab4fa-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.vugla.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
200 OK 88 kB URL GET HTTP/2 www.vugla.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with very long lines (65447)
Hash 826eb77e86b02ab7724fe3d0141ff87c
79cd3587d565afe290076a8d36c31c305a573d18
cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf
GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:25:19 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-type: application/javascript
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/css/style.css
200 OK 3.4 kB URL GET HTTP/2 cdn.creative-bars1.com/sb/notifications/games/hentai-heroes/global/custom-banner/1/css/style.css
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjectcreative-bars1.com
Fingerprint2B:CC:32:FC:17:6F:25:69:2F:F4:A0:D9:DC:9C:C2:09:28:32:AB:34
ValiditySat, 21 Oct 2023 15:38:40 GMT - Fri, 19 Jan 2024 15:38:39 GMT
File type ASCII text, with very long lines (3588), with no line terminators
Hash 9f41060a94dfdae2b9e3e7af3fbafd0d
e08ee5f1feddbd7f0e0b68e945509a0029cc7f60
f28e8574ddbdb7d40301ecd44c1eec3324a40024536bca957e3d09ebd288721a
GET /sb/notifications/games/hentai-heroes/global/custom-banner/1/css/style.css HTTP/1.1
Host: cdn.creative-bars1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:55 GMT
content-type: text/css
last-modified: Thu, 19 Oct 2023 15:30:48 GMT
etag: W/"65314ba8-d55"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 66571
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8AuxaBhBa2kOP96XkVDS5aFQUXY3JIp1ih1AmQBzZzXx0geZaxPEujOXMSZ8AbZDkJRa0Dfwe0eWlXnYdmiCL5fFVYpAH%2Ff5EVpVSrUb0kvNAHyI8hsRpcsiz3DXqR9c%2F%2FReZHP2JcS9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0cf9ce82531c-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.nbfcs.org/
200 OK 1.2 kB IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoDaddy.com, Inc.
Subjectwww.nbfcs.org
FingerprintE0:6B:EC:7B:D6:B0:6E:9E:26:18:76:0D:83:E2:83:F9:02:52:F5:09
ValidityFri, 17 Nov 2023 10:08:39 GMT - Sun, 17 Nov 2024 10:08:39 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1227), with no line terminators
Hash 02570f397a53dab1ff08bc71bac0abb2
5bb9177a90a2333ad9c7ab44c10b2e5f650c0d97
eec4aae2fa8d35ff232ebe19797db5bcde4e1792ce4eb4a3739030215468850a
GET / HTTP/1.1
Host: www.nbfcs.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 01 Dec 2023 20:23:54 GMT
Content-Type: text/html
Content-Length: 1177
Last-Modified: Thu, 30 Nov 2023 23:50:58 GMT
Connection: keep-alive
ETag: "65691fe2-499"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_ENz/K+PjBN0f7d4uAK6i9sVttzh1wtg6nZ+1UAvE7vPXElYhzDXKeeVTCrm3d3z1MlDESrhhCv293G+wNltFFw
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=10.116.88.163;Path=/;Max-Age=86400;
country=;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=enom.ACTIVE.5D3C3A1B-1A26-48DD-A7EC-02F11DDF874F;Path=/;Max-Age=86400;
Accept-Ranges: bytes
tharbadir.com/121?rnd=3009902058&z=2892323&b=15763363&c=6332999&var=&varid=0&d=https%3A%2F%2Fwww.nbfcs.org%2F%23signUp%3D754549898436681728&cln={CELL_NUMBER}&btp=7&rb=GFOt6dZtFtUvadx--7WZItHuwKOehtJ_sVwEBamYXT-HGbzJGaPeV9lYpZqi5siCf7di2jCOdPuFDX-gNQg32aNKOq5i0LlSBmTd9SXGTZos1zOf3mG4ejyO42GlyNdoVrxUUx2LmDygsvn_cZYIuRI1m0ez4vOU_s85VofWorYLyimjQJ_vWGcY9oxl1zx03HYpjD9qo4SaTKUyHLxpWowt4hvcCWnmQHRwwEnNZ52DF0Y08uuFBtZ2vupO3jz7UBnWkCtUcm5E73JxTjrVBW9ejjdJORDPFkqOedvekev2i763kXRFGMCXCZOcIyCh8MNK3RYvq9tRvlAn4zIsqtBNtWfs9O4sORiugwTT-tya2DSsbkipPDDNC6Yzws9C4HnrRRmH_MEFK3uBzcZBghobKM0jf-NU2TwpRl9lsxvVlIsiWSny9f2gEQU2PNBMBxrl3T9QRSJapLdZ-aCXoNLX600KglmVmhVDDbNZjyYcPbmDHS949EpiTE_3Xoh3nvTnsRSB_as9AFLF4kdU1Aws8JRDsdlxzyFLPKH_06Nxcy5cg2FgZcXdnXJavdZN9w_z7q09Y7UV2cvjUSTFsNLooamCXlc9btprKRl15GS_FxkeqiSAkluw9NZLBrQldZ5MmJHqJCuobEuq26tYB64Z4UQ6qGgldX4Pzrgo3KFyRbHePETHSGioFv6V8dt-RDrDdmyIuPP4PIbB-tvCdlnm6Nq6o-cHwTf1Uw==&bag=b8Ba6-3p6UWez0kEVke3cNfPMDZv19jg&ruid=36d21996-3161-4244-a1dd-aa2fea7ab614&subid=754549898436681728
302 Found 1.2 kB URL GET HTTP/2 tharbadir.com/121?rnd=3009902058&z=2892323&b=15763363&c=6332999&var=&varid=0&d=https%3A%2F%2Fwww.nbfcs.org%2F%23signUp%3D754549898436681728&cln={CELL_NUMBER}&btp=7&rb=GFOt6dZtFtUvadx--7WZItHuwKOehtJ_sVwEBamYXT-HGbzJGaPeV9lYpZqi5siCf7di2jCOdPuFDX-gNQg32aNKOq5i0LlSBmTd9SXGTZos1zOf3mG4ejyO42GlyNdoVrxUUx2LmDygsvn_cZYIuRI1m0ez4vOU_s85VofWorYLyimjQJ_vWGcY9oxl1zx03HYpjD9qo4SaTKUyHLxpWowt4hvcCWnmQHRwwEnNZ52DF0Y08uuFBtZ2vupO3jz7UBnWkCtUcm5E73JxTjrVBW9ejjdJORDPFkqOedvekev2i763kXRFGMCXCZOcIyCh8MNK3RYvq9tRvlAn4zIsqtBNtWfs9O4sORiugwTT-tya2DSsbkipPDDNC6Yzws9C4HnrRRmH_MEFK3uBzcZBghobKM0jf-NU2TwpRl9lsxvVlIsiWSny9f2gEQU2PNBMBxrl3T9QRSJapLdZ-aCXoNLX600KglmVmhVDDbNZjyYcPbmDHS949EpiTE_3Xoh3nvTnsRSB_as9AFLF4kdU1Aws8JRDsdlxzyFLPKH_06Nxcy5cg2FgZcXdnXJavdZN9w_z7q09Y7UV2cvjUSTFsNLooamCXlc9btprKRl15GS_FxkeqiSAkluw9NZLBrQldZ5MmJHqJCuobEuq26tYB64Z4UQ6qGgldX4Pzrgo3KFyRbHePETHSGioFv6V8dt-RDrDdmyIuPP4PIbB-tvCdlnm6Nq6o-cHwTf1Uw==&bag=b8Ba6-3p6UWez0kEVke3cNfPMDZv19jg&ruid=36d21996-3161-4244-a1dd-aa2fea7ab614&subid=754549898436681728
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjecttharbadir.com
FingerprintA5:91:BD:23:83:6F:FE:A6:06:78:AE:E7:58:60:8E:74:B2:BA:C3:64
ValidityThu, 21 Sep 2023 16:36:00 GMT - Wed, 20 Dec 2023 16:35:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /121?rnd=3009902058&z=2892323&b=15763363&c=6332999&var=&varid=0&d=https%3A%2F%2Fwww.nbfcs.org%2F%23signUp%3D754549898436681728&cln={CELL_NUMBER}&btp=7&rb=GFOt6dZtFtUvadx--7WZItHuwKOehtJ_sVwEBamYXT-HGbzJGaPeV9lYpZqi5siCf7di2jCOdPuFDX-gNQg32aNKOq5i0LlSBmTd9SXGTZos1zOf3mG4ejyO42GlyNdoVrxUUx2LmDygsvn_cZYIuRI1m0ez4vOU_s85VofWorYLyimjQJ_vWGcY9oxl1zx03HYpjD9qo4SaTKUyHLxpWowt4hvcCWnmQHRwwEnNZ52DF0Y08uuFBtZ2vupO3jz7UBnWkCtUcm5E73JxTjrVBW9ejjdJORDPFkqOedvekev2i763kXRFGMCXCZOcIyCh8MNK3RYvq9tRvlAn4zIsqtBNtWfs9O4sORiugwTT-tya2DSsbkipPDDNC6Yzws9C4HnrRRmH_MEFK3uBzcZBghobKM0jf-NU2TwpRl9lsxvVlIsiWSny9f2gEQU2PNBMBxrl3T9QRSJapLdZ-aCXoNLX600KglmVmhVDDbNZjyYcPbmDHS949EpiTE_3Xoh3nvTnsRSB_as9AFLF4kdU1Aws8JRDsdlxzyFLPKH_06Nxcy5cg2FgZcXdnXJavdZN9w_z7q09Y7UV2cvjUSTFsNLooamCXlc9btprKRl15GS_FxkeqiSAkluw9NZLBrQldZ5MmJHqJCuobEuq26tYB64Z4UQ6qGgldX4Pzrgo3KFyRbHePETHSGioFv6V8dt-RDrDdmyIuPP4PIbB-tvCdlnm6Nq6o-cHwTf1Uw==&bag=b8Ba6-3p6UWez0kEVke3cNfPMDZv19jg&ruid=36d21996-3161-4244-a1dd-aa2fea7ab614&subid=754549898436681728 HTTP/1.1
Host: tharbadir.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: scm=1; OAID=fc6b62f817f7473a906e4e9a39f79ea0; oaidts=1701462230
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Fri, 01 Dec 2023 20:23:53 GMT
content-length: 0
location: https://www.nbfcs.org/#signUp=754549898436681728
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-Sc, CVERSION, VERSION, X-Ancestor-Origins, X-Zone-ID, baggage, sentry-trace
x-trace-id: 8bd20449ce95a7424e673a2d00513550
access-control-expose-headers: X-Sc
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Mon, 26 Jul 1997 05:00:00 GMT
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/css/style_main.css
200 OK 85 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/css/style_main.css
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type ASCII text, with very long lines (6104), with CRLF line terminators
Hash 1d85fc3a503a0f77b0f029ad44e4ddd4
5b1212871267b4eba6f2d0628ce678890cefbd8e
df3db153ea5d4b5fdd494569edaa7513e12c7520282d6926628bee4e93c18187
GET /wp-content/themes/vugla/css/style_main.css HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/style.css?ver=6.4.1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 23 May 2014 15:19:09 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:52 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: f50fd3e5d48ffe171989d12a325c5887
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 01 Dec 2023 20:23:52 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y%2FpG%2FchtVxXaNOLAfVy5H5Nv1bCW5VR55MhVop6vIWEiBjR%2B1qg9bEKqtlfAtBCBrzPMCeboN5IuXnwZcrBt9holL2dftVJorUNm4PGRmZB1soMmB4wlykbYiV7K9w396NSfZr4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0ce97856643d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
vaugroar.com/pfe/current/defaultSkin.min.js
200 OK 57 kB URL GET HTTP/2 vaugroar.com/pfe/current/defaultSkin.min.js
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectvaugroar.com
FingerprintF5:48:7D:7C:B6:28:8D:55:D3:7D:CF:03:2F:84:BE:B7:FD:20:F0:EE
ValiditySun, 12 Nov 2023 05:15:08 GMT - Sat, 10 Feb 2024 05:15:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pfe/current/defaultSkin.min.js HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:59 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-df63"
access-control-allow-origin: https://www.vugla.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
vaugroar.com/pfe/current/tag.min.js?z=1548391
200 OK 13 kB URL GET HTTP/2 vaugroar.com/pfe/current/tag.min.js?z=1548391
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectvaugroar.com
FingerprintF5:48:7D:7C:B6:28:8D:55:D3:7D:CF:03:2F:84:BE:B7:FD:20:F0:EE
ValiditySun, 12 Nov 2023 05:15:08 GMT - Sat, 10 Feb 2024 05:15:07 GMT
File type C source, ASCII text, with very long lines (13300), with no line terminators
Hash 258578af3c107ccb907f73c3a2f4c25f
7a192edea829968fb7f57f2a2fc4cb5b612598be
1f945c9c46c47a2b0e867b0d09c3e4559cd768a2d3747abf28d1d65667733b75
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pfe/current/tag.min.js?z=1548391 HTTP/1.1
Host: vaugroar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:50 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-33f4"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-7NCJ73THPT>m=45je3bt0v879882835&_p=1701462235997&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=463628786.1701462236&ul=en-us&sr=1280x1024&_s=1&sid=1701462236&sct=1&seg=0&dl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&dt=%C5%BDivotinje%3A%20Kako%20su%20%27rok%20zvezde%27%20pande%20ostale%20bez%20ljubavne%20pri%C4%8De%20-%20Vugla&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3521
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-7NCJ73THPT>m=45je3bt0v879882835&_p=1701462235997&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=463628786.1701462236&ul=en-us&sr=1280x1024&_s=1&sid=1701462236&sct=1&seg=0&dl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&dt=%C5%BDivotinje%3A%20Kako%20su%20%27rok%20zvezde%27%20pande%20ostale%20bez%20ljubavne%20pri%C4%8De%20-%20Vugla&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3521
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7NCJ73THPT>m=45je3bt0v879882835&_p=1701462235997&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=463628786.1701462236&ul=en-us&sr=1280x1024&_s=1&sid=1701462236&sct=1&seg=0&dl=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&dt=%C5%BDivotinje%3A%20Kako%20su%20%27rok%20zvezde%27%20pande%20ostale%20bez%20ljubavne%20pri%C4%8De%20-%20Vugla&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=3521 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://www.vugla.com
date: Fri, 01 Dec 2023 20:23:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=250e78938053497898f6424251e53396&zoneId=1548391&checkDuplicate=true&ymid=&var=
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?pub=0&userId=250e78938053497898f6424251e53396&zoneId=1548391&checkDuplicate=true&ymid=&var=
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 69d1be13c1f2c9eac7a0d55740f4f826
2f043ac92b4daef42817adaf7d4705c596dfaa49
a6a21e09023df387efc0c108efb402c2693a870f65a169350c4978fc0d24df4e
GET /gid.js?pub=0&userId=250e78938053497898f6424251e53396&zoneId=1548391&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.vugla.com/
Origin: https://www.vugla.com
DNT: 1
Connection: keep-alive
Cookie: ID=fc6b62f817f7473a906e4e9a39f79ea0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:53 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://www.vugla.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=fc6b62f817f7473a906e4e9a39f79ea0; expires=Sat, 30 Nov 2024 20:23:53 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400italic,700italic,400,700
200 OK 11 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400italic,700italic,400,700
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 907324db4557468965fb1beb08371f20
4936d051bdee930b9cbea5dffb22de4e1f2c85e9
795a4ab4ef2ac13848a83e5b36477caf20c05f4314bbc003bbaadab6d4985c95
GET /css?family=Open+Sans:400italic,700italic,400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 20:23:50 GMT
date: Fri, 01 Dec 2023 20:23:50 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.vugla.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
200 OK 565 B URL GET HTTP/2 accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.vugla.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint1E:A9:E1:96:78:1D:08:FC:96:C8:C2:34:4F:02:D3:3D:FA:9A:D2:6B
ValidityMon, 23 Oct 2023 11:25:04 GMT - Mon, 15 Jan 2024 11:25:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (585), with no line terminators
Hash 71f0536b3bf032feb63e160b0be2a303
6c05ada4e66084f852dc3d99bc7044ca1f4f343c
dff47b08691f0b1c2145e5b28f1a0bbe383dd0fba6ef1476d842b60268dd4dbc
GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.vugla.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 01 Dec 2023 20:23:53 GMT
content-security-policy: script-src 'nonce-ZSfUMgvV-RpY_oh8vF9ZoA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport, require-trusted-types-for 'script';report-uri /o/cspreport
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.vugla.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
200 OK 110 kB URL GET HTTP/2 www.vugla.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
Size 110 kB (110035 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.4.1 HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Mon, 13 Nov 2023 13:25:19 GMT
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
referrer-policy:
content-type: text/css
date: Fri, 01 Dec 2023 20:23:50 GMT
server: Apache
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/3 friendshipmale.com/sfp.js
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Fri, 01 Dec 2023 20:23:54 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 0b27efc662f11e540c2bee31b14e17f9
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 01 Dec 2023 20:23:54 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sBtfVhpBqyh9qRRS%2BTK923UO%2FkIEwn9VEgSe478zl2C8VIGYr363OWc7S7hC0MzKiCXQshMtfsEGsDVMZAmwxp3hqR9izAgBY9VycILCEsuex%2Bqz8J1dKdzNrhmAQNxAsvkBn%2Fc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0cf49ede7744-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
unseenreport.com/pxf.gif?uuid=aa147afb-384f-420d-85a5-82ce2ce5a288&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=65aa283021630dfd9030555c4c61a78c&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
200 OK 0 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=aa147afb-384f-420d-85a5-82ce2ce5a288&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=65aa283021630dfd9030555c4c61a78c&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=aa147afb-384f-420d-85a5-82ce2ce5a288&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=65aa283021630dfd9030555c4c61a78c&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=20 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 20:23:56 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 415885c02c6348d7fd4d578282918e19
Strict-Transport-Security: max-age=0; includeSubdomains
apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&data-size=standard&origin=https%3A%2F%2Fwww.vugla.com&url=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
301 Moved Permanently 0 B URL GET HTTP/3 apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&data-size=standard&origin=https%3A%2F%2Fwww.vugla.com&url=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__
IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /u/0/se/0/_/+1/fastbutton?usegapi=1&data-size=standard&origin=https%3A%2F%2Fwww.vugla.com&url=https%3A%2F%2Fwww.vugla.com%2Fzivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.coKrc9A11Ng.O%2Fd%3D1%2Frs%3DAHpOoo_J8xjByIzBlcB6zLaAkxsUwdPdIw%2Fm%3D__features__ HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 301 Moved Permanently
location: http://developers.google.com/
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 20:23:52 GMT
expires: Fri, 01 Dec 2023 20:53:52 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 226
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tzegilo.com/stattag.js
200 OK 19 kB IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerGoogle Trust Services LLC
Subjecttzegilo.com
Fingerprint52:B8:ED:73:BB:55:6F:9C:F8:97:7C:04:34:2B:AD:DB:55:0A:C9:6A
ValidityThu, 05 Oct 2023 17:59:18 GMT - Wed, 03 Jan 2024 17:59:17 GMT
File type ASCII text, with very long lines (18369)
Hash 89e89aea544ea2785d49cc4cd9cf26f6
7d53437a89eb9861038ee27a8ff0e3bb70fa2a0b
86da38693fcea056d36588a4146e85392f784c457511de416fec32034aafa4f9
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 20:23:51 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:52 GMT
etag: W/"64f987a8-4a4b"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6929
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RFlsPfzKeukTVcuXdDCckM5V%2BsZGVs1xuvCDHQVPZBxCgEH8%2BQTpfgaJ24T9skF4hqiq1e%2B2LqE263xvwezJXKv3x6FtwRRuJjafd5u8JMdykfWep%2BIqTHhQEVFfpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ee0ce47fb756b9-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
psuftoum.com/5/1316441
200 OK 72 kB IP
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectpsuftoum.com
Fingerprint2C:F3:EA:66:F3:74:01:A6:A1:04:29:7A:60:60:06:A7:A5:C0:93:CC
ValidityTue, 19 Sep 2023 05:22:30 GMT - Mon, 18 Dec 2023 05:22:29 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash cd992087e180c52441eb8a32a043c3a3
38d94e7c39066147250e20d2164287ddd9b6c65b
547aec97d76257f15e334bc3089faa55532a252db21d5f84ebb892a5b6797bb9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5/1316441 HTTP/1.1
Host: psuftoum.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 20:23:50 GMT
content-type: application/javascript
x-trace-id: 560aac40793d269d22a690c1a50461e4
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=a5780e9dbaf141bd9aea777aa3fd0756; expires=Sat, 30 Nov 2024 20:23:50 GMT; path=/; secure; SameSite=None
oaidts=1701462230; expires=Sat, 30 Nov 2024 20:23:50 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
rollerstrayprawn.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRit3qwiiIJB%2FANhDgEV3dnunu6dHnNYjTEhmD%2BTaK5WV1XPVra6q6nqnt7saWNAc5ygB4%2B9bzZZo0HMVZDIrB5kIbDjQeaQ9SqoIARyltkdWPwO9X1V7x3ee199tl7uEg8lHZ8%2Fo1elUnQ%2BbLqN1y%2FLjOvKNs5eanhu0z3auCyzheBoY2VymN7bnhs23TcaJwVb1vO%2B67mu53qNE9KIRK%2FM76GQ%2Bd2O1%2By4zcBvemGAFfP%2Fuy0dWOqA93bJYUg%2BemLp13uQbIgs%2Ff64sMuFzt96Py0VLbRBj29%2BlC1nusqQHoyJcZBkm1M2tB0R8tUMdLY5dQDd25g4QCxHxPndQ5xtTmUi7t3aVxoriAwxfxpVbwihhpB0CKavQ%2FIdAjCOs%2BeQpbfPalPRq%2FsonaAjMvv4EWQ1IrMPn0eWfndMyZXGRa3KQurMYiWpIVeGkN0h8nILxaoDWW2BFZ9C8gdk%2FvFpZOnGOas0JB8fodQL2jSJ51pRkMwFvsvnopCGc5HPhM9ESP0o2otIyiFkMoQSfVB7CKV1UEoHZeKgzB2kfNygYSdx3XYSJ61WFDDGWi3GwmiBh7wVRImLkk089FHkfTDVBzNryM0aluXNnfAwTPkT7FINy2dgixFxPlxDj9eoBEFlCSpKUEmCqiCoevUtrqxv69tc2TL2pt2f9lY90EV3nd7SRVdkBNT01%2FNd8txehn%2F9GWFZjBvca7Vd3%2B%2F4YcyYTxciN4loELQXkqQTeEEAK2tIOwNqHaxOFoqnkE%2F6mb8R0y1YtQUmD4GWr4JWg7bvgi4NgsjFananV3YVbTKdgusaeTGL4qqzrnbJy3siTn55DYJtL%2F7z7MezL31RgpkaualxRf5M0FU3Bhd0RTYu6MqSe%2BfyQqZylU6WfLGghZj95gNxtdKGnzpu%2B3feZRNgMt69JGxxmmZcZl1Lvj0mORfmhDZMkB9P2csiPl%2FapWOlycr89Pn3TpxKcyOslTobgsqdT%2B6DyRF55vbi3vd97esfIM0QpqyRlttkWpB6Cyxfg823F%2F94MH7h8zdnYDWBUQecOHdQlfXA%2BPHBo5Ij4j96EUpsL%2F5y7ckjD%2BdfAY1rWHEQQyy27%2F%2B7z1%2B3N9A1DmhxHVlao2dq9FQNqvqw5aFBkZvtxd9ae4VYOYNYGWcjVkbd3I%2FXynEj9AIRxVGbcR4Lxr2234parutzHrQ7wuugsCNx5Z3xfwAAAP%2F%2FAQAA%2F%2F%2Ft0hcVmgQAAA%3D%3D
200 OK 0 B URL GET HTTP/1.1 rollerstrayprawn.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRit3qwiiIJB%2FANhDgEV3dnunu6dHnNYjTEhmD%2BTaK5WV1XPVra6q6nqnt7saWNAc5ygB4%2B9bzZZo0HMVZDIrB5kIbDjQeaQ9SqoIARyltkdWPwO9X1V7x3ee199tl7uEg8lHZ8%2Fo1elUnQ%2BbLqN1y%2FLjOvKNs5eanhu0z3auCyzheBoY2VymN7bnhs23TcaJwVb1vO%2B67mu53qNE9KIRK%2FM76GQ%2Bd2O1%2By4zcBvemGAFfP%2Fuy0dWOqA93bJYUg%2BemLp13uQbIgs%2Ff64sMuFzt96Py0VLbRBj29%2BlC1nusqQHoyJcZBkm1M2tB0R8tUMdLY5dQDd25g4QCxHxPndQ5xtTmUi7t3aVxoriAwxfxpVbwihhpB0CKavQ%2FIdAjCOs%2BeQpbfPalPRq%2FsonaAjMvv4EWQ1IrMPn0eWfndMyZXGRa3KQurMYiWpIVeGkN0h8nILxaoDWW2BFZ9C8gdk%2FvFpZOnGOas0JB8fodQL2jSJ51pRkMwFvsvnopCGc5HPhM9ESP0o2otIyiFkMoQSfVB7CKV1UEoHZeKgzB2kfNygYSdx3XYSJ61WFDDGWi3GwmiBh7wVRImLkk089FHkfTDVBzNryM0aluXNnfAwTPkT7FINy2dgixFxPlxDj9eoBEFlCSpKUEmCqiCoevUtrqxv69tc2TL2pt2f9lY90EV3nd7SRVdkBNT01%2FNd8txehn%2F9GWFZjBvca7Vd3%2B%2F4YcyYTxciN4loELQXkqQTeEEAK2tIOwNqHaxOFoqnkE%2F6mb8R0y1YtQUmD4GWr4JWg7bvgi4NgsjFananV3YVbTKdgusaeTGL4qqzrnbJy3siTn55DYJtL%2F7z7MezL31RgpkaualxRf5M0FU3Bhd0RTYu6MqSe%2BfyQqZylU6WfLGghZj95gNxtdKGnzpu%2B3feZRNgMt69JGxxmmZcZl1Lvj0mORfmhDZMkB9P2csiPl%2FapWOlycr89Pn3TpxKcyOslTobgsqdT%2B6DyRF55vbi3vd97esfIM0QpqyRlttkWpB6Cyxfg823F%2F94MH7h8zdnYDWBUQecOHdQlfXA%2BPHBo5Ij4j96EUpsL%2F5y7ckjD%2BdfAY1rWHEQQyy27%2F%2B7z1%2B3N9A1DmhxHVlao2dq9FQNqvqw5aFBkZvtxd9ae4VYOYNYGWcjVkbd3I%2FXynEj9AIRxVGbcR4Lxr2234parutzHrQ7wuugsCNx5Z3xfwAAAP%2F%2FAQAA%2F%2F%2Ft0hcVmgQAAA%3D%3D
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subjectrollerstrayprawn.com
Fingerprint9E:74:D1:93:DF:47:C6:06:84:EA:02:9E:E8:F3:B5:CF:52:D3:9F:D0
ValidityTue, 28 Nov 2023 10:59:19 GMT - Mon, 26 Feb 2024 10:59:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTYgcRRit3qwiiIJB%2FANhDgEV3dnunu6dHnNYjTEhmD%2BTaK5WV1XPVra6q6nqnt7saWNAc5ygB4%2B9bzZZo0HMVZDIrB5kIbDjQeaQ9SqoIARyltkdWPwO9X1V7x3ee199tl7uEg8lHZ8%2Fo1elUnQ%2BbLqN1y%2FLjOvKNs5eanhu0z3auCyzheBoY2VymN7bnhs23TcaJwVb1vO%2B67mu53qNE9KIRK%2FM76GQ%2Bd2O1%2By4zcBvemGAFfP%2Fuy0dWOqA93bJYUg%2BemLp13uQbIgs%2Ff64sMuFzt96Py0VLbRBj29%2BlC1nusqQHoyJcZBkm1M2tB0R8tUMdLY5dQDd25g4QCxHxPndQ5xtTmUi7t3aVxoriAwxfxpVbwihhpB0CKavQ%2FIdAjCOs%2BeQpbfPalPRq%2FsonaAjMvv4EWQ1IrMPn0eWfndMyZXGRa3KQurMYiWpIVeGkN0h8nILxaoDWW2BFZ9C8gdk%2FvFpZOnGOas0JB8fodQL2jSJ51pRkMwFvsvnopCGc5HPhM9ESP0o2otIyiFkMoQSfVB7CKV1UEoHZeKgzB2kfNygYSdx3XYSJ61WFDDGWi3GwmiBh7wVRImLkk089FHkfTDVBzNryM0aluXNnfAwTPkT7FINy2dgixFxPlxDj9eoBEFlCSpKUEmCqiCoevUtrqxv69tc2TL2pt2f9lY90EV3nd7SRVdkBNT01%2FNd8txehn%2F9GWFZjBvca7Vd3%2B%2F4YcyYTxciN4loELQXkqQTeEEAK2tIOwNqHaxOFoqnkE%2F6mb8R0y1YtQUmD4GWr4JWg7bvgi4NgsjFananV3YVbTKdgusaeTGL4qqzrnbJy3siTn55DYJtL%2F7z7MezL31RgpkaualxRf5M0FU3Bhd0RTYu6MqSe%2BfyQqZylU6WfLGghZj95gNxtdKGnzpu%2B3feZRNgMt69JGxxmmZcZl1Lvj0mORfmhDZMkB9P2csiPl%2FapWOlycr89Pn3TpxKcyOslTobgsqdT%2B6DyRF55vbi3vd97esfIM0QpqyRlttkWpB6Cyxfg823F%2F94MH7h8zdnYDWBUQecOHdQlfXA%2BPHBo5Ij4j96EUpsL%2F5y7ckjD%2BdfAY1rWHEQQyy27%2F%2B7z1%2B3N9A1DmhxHVlao2dq9FQNqvqw5aFBkZvtxd9ae4VYOYNYGWcjVkbd3I%2FXynEj9AIRxVGbcR4Lxr2234parutzHrQ7wuugsCNx5Z3xfwAAAP%2F%2FAQAA%2F%2F%2Ft0hcVmgQAAA%3D%3D HTTP/1.1
Host: rollerstrayprawn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/
Cookie: u_pl=15460408; uid_id2=aa147afb-384f-420d-85a5-82ce2ce5a288:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 01 Dec 2023 20:23:55 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1a247c19d256cf448ebd9929957865ab
Strict-Transport-Security: max-age=0; includeSubdomains
www.google.com/adsense/domains/caf.js?abp=1
200 OK 150 kB URL GET HTTP/2 www.google.com/adsense/domains/caf.js?abp=1
IP
Requested by https://www.nbfcs.org/#signUp=754549898436681728
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (1888)
Size 150 kB (149642 bytes)
Hash 980fb04d2da5f7f360deea9af49a0fdc
d9c762b66a33644ddc28c2ce6c09e1f400df8cdd
f9b94b36f3a1ff7c60d1048d748663b9d5592499491f07f7574a6b77b089a0af
GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.nbfcs.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 01 Dec 2023 20:23:54 GMT
expires: Fri, 01 Dec 2023 20:23:54 GMT
cache-control: private, max-age=3600
etag: "671007550098774708"
x-content-type-options: nosniff
link: <https://www.adsensecustomsearchads.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.vugla.com/wp-content/themes/vugla/images/small-social-sprite.png
200 OK 3.8 kB URL GET HTTP/2 www.vugla.com/wp-content/themes/vugla/images/small-social-sprite.png
IP
ASN #46606 UNIFIEDLAYER-AS-1
Requested by https://www.vugla.com/zivotinje-kako-su-rok-zvezde-pande-ostale-bez-ljubavne-price.html
Certificate IssuerLet's Encrypt
Subject*.vugla.com
Fingerprint60:1A:D3:8D:4C:FA:56:F9:38:93:28:7F:AA:D3:BE:FE:AB:86:9D:99
ValidityWed, 22 Nov 2023 10:07:17 GMT - Tue, 20 Feb 2024 10:07:16 GMT
File type PNG image data, 272 x 95, 8-bit/color RGBA, non-interlaced\012- data
Hash 1aabf6dabc51ca6168aa98fbecbf79e2
0e4cb499aff16fedb2097658da7d2baa1bdafaa8
09ac67d0b81afe77f52b59ee9abc68ba2dd7cf0ebbc85703c75a76c2586e93aa
GET /wp-content/themes/vugla/images/small-social-sprite.png HTTP/1.1
Host: www.vugla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.vugla.com/wp-content/themes/vugla/css/style_main.css
Cookie: _ga_7NCJ73THPT=GS1.1.1701462236.1.0.1701462236.60.0.0; _ga=GA1.1.463628786.1701462236
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-security-policy: upgrade-insecure-requests;
last-modified: Fri, 15 Nov 2013 11:53:16 GMT
accept-ranges: bytes
content-length: 3812
cache-control: max-age=31536000, public, must-revalidate, proxy-revalidate
expires: Sat, 30 Nov 2024 20:23:52 GMT
referrer-policy:
pragma: public
content-type: image/png
date: Fri, 01 Dec 2023 20:23:52 GMT
server: Apache
X-Firefox-Spdy: h2
192.185.106.252
139.45.195.8
104.21.11.245
95.101.10.129
18.157.203.0
0.0.0.0