Edit tour

Windows Analysis Report
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/

Overview

General Information

Sample URL:	https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/
Analysis ID:	1613184
Infos:

Detection

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 2052 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2256,i,9355546412315950579,14627480454958445834,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: openrestyDate: Wed, 12 Feb 2025 13:17:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/wp-json/>; rel="https://api.w.org/"

Source: chromecache_82.4.dr	String found in binary or memory: http://cdn.flaticon.com/svg/44/44386.svg
Source: chromecache_87.4.dr, chromecache_73.4.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.6.3/jquery.min.js
Source: chromecache_73.4.dr	String found in binary or memory: https://assets.vzpstatic.cz/202411141426/images/vzp-logo-white.png
Source: chromecache_87.4.dr	String found in binary or memory: https://cdn6.aptoide.com/imgs/a/f/6/af6af35ac8c48f78b30377ca3c8f989d_icon.png
Source: chromecache_87.4.dr, chromecache_73.4.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Open
Source: chromecache_73.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_88.4.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_73.4.dr	String found in binary or memory: https://gcdnb.pbrd.co/images/CrEimqFHoqvG.png?o=1
Source: chromecache_73.4.dr	String found in binary or memory: https://gcdnb.pbrd.co/images/gZGx6iwLNFFU.png?o=1
Source: chromecache_87.4.dr	String found in binary or memory: https://img.tiplicdn.com/zoh4eiLi/IMG/7200/flVAMONb-XDLWHTyJW12jRq_E7zxEw7_f8ckBIO_4VA/resize:fit:20
Source: chromecache_73.4.dr	String found in binary or memory: https://pasteboard.co/images/CrEimqFHoqvG.png/load
Source: chromecache_73.4.dr	String found in binary or memory: https://pasteboard.co/images/gZGx6iwLNFFU.png/load
Source: chromecache_87.4.dr	String found in binary or memory: https://upload.wikimedia.org/wikipedia/commons/d/d7/Logo_VSZP_3riadky_farbaRGB.png
Source: chromecache_87.4.dr	String found in binary or memory: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=DAY/d=0/rs=AN
Source: chromecache_87.4.dr	String found in binary or memory: https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=GAw/d=0/rs=AN
Source: chromecache_87.4.dr	String found in binary or memory: https://www.vszp.sk/templates/vszp/app/assets/images/mobilna-aplikacia/benefity.png
Source: chromecache_73.4.dr	String found in binary or memory: https://www9.0zz0.com/2023/09/04/11/273994248.jpg

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53685
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: classification engine

Classification label: mal64.phis.win@16/51@40/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2256,i,9355546412315950579,14627480454958445834,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2256,i,9355546412315950579,14627480454958445834,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/style/script.js	100%	Avira URL Cloud	phishing
https://assets.vzpstatic.cz/202411141426/images/vzp-logo-white.png	0%	Avira URL Cloud	safe
https://pasteboard.co/images/CrEimqFHoqvG.png/load	0%	Avira URL Cloud	safe
https://pasteboard.co/images/gZGx6iwLNFFU.png/load	0%	Avira URL Cloud	safe
https://www.vszp.sk/templates/vszp/app/assets/images/mobilna-aplikacia/benefity.png	0%	Avira URL Cloud	safe
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/style/style.css	100%	Avira URL Cloud	phishing
https://img.tiplicdn.com/zoh4eiLi/IMG/7200/flVAMONb-XDLWHTyJW12jRq_E7zxEw7_f8ckBIO_4VA/resize:fit:20	0%	Avira URL Cloud	safe
http://cdn.flaticon.com/svg/44/44386.svg	0%	Avira URL Cloud	safe
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/style/script.js	100%	Avira URL Cloud	phishing
https://www9.0zz0.com/2023/09/04/11/273994248.jpg	0%	Avira URL Cloud	safe
https://img.tiplicdn.com/zoh4eiLi/IMG/7200/flVAMONb-XDLWHTyJW12jRq_E7zxEw7_f8ckBIO_4VA/resize:fit:200:0:1/gravity:no/quality:90/aHR0cHM6Ly93d3cudGlwbGkuY3ovdXBsb2FkL2ltYWdlcy9zaG9wcy1zaG9wLWxvZ28vMTMyODc0LnBuZw.png	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
tiplicdn.vshcdn.net	86.105.155.150	true	false	unknown
cdn6.aptoide.com.cdn.cloudflare.net	104.22.10.83	true	false	high
www.vszp.sk	185.77.144.69	true	false	unknown
www9.0zz0.com	104.21.112.1	true	false	unknown
gcdnb.pbrd.co	172.67.198.249	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.100	true	false	high
upload.wikimedia.org	185.15.59.240	true	false	high
wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com	198.199.109.95	true	true	unknown
assets.vzpstatic.cz	unknown	unknown	false	unknown
img.tiplicdn.com	unknown	unknown	false	unknown
cdn.flaticon.com	unknown	unknown	false	unknown
cdn6.aptoide.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/style/script.js	true	Avira URL Cloud: phishing	unknown
https://img.tiplicdn.com/zoh4eiLi/IMG/7200/flVAMONb-XDLWHTyJW12jRq_E7zxEw7_f8ckBIO_4VA/resize:fit:200:0:1/gravity:no/quality:90/aHR0cHM6Ly93d3cudGlwbGkuY3ovdXBsb2FkL2ltYWdlcy9zaG9wcy1zaG9wLWxvZ28vMTMyODc0LnBuZw.png	false	Avira URL Cloud: safe	unknown
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/index.php	true		unknown
https://upload.wikimedia.org/wikipedia/commons/d/d7/Logo_VSZP_3riadky_farbaRGB.png	false		high
https://www.vszp.sk/templates/vszp/app/assets/images/mobilna-aplikacia/benefity.png	false	Avira URL Cloud: safe	unknown
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/style/style.css	true	Avira URL Cloud: phishing	unknown
https://assets.vzpstatic.cz/202411141426/images/vzp-logo-white.png	false	Avira URL Cloud: safe	unknown
https://www9.0zz0.com/2023/09/04/11/273994248.jpg	false	Avira URL Cloud: safe	unknown
https://gcdnb.pbrd.co/images/CrEimqFHoqvG.png?o=1	false		high
https://gcdnb.pbrd.co/images/gZGx6iwLNFFU.png?o=1	false		high
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/style/script.js	true	Avira URL Cloud: phishing	unknown
https://cdn6.aptoide.com/imgs/a/f/6/af6af35ac8c48f78b30377ca3c8f989d_icon.png	false		high
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://img.tiplicdn.com/zoh4eiLi/IMG/7200/flVAMONb-XDLWHTyJW12jRq_E7zxEw7_f8ckBIO_4VA/resize:fit:20	chromecache_87.4.dr	false	Avira URL Cloud: safe	unknown
https://pasteboard.co/images/CrEimqFHoqvG.png/load	chromecache_73.4.dr	false	Avira URL Cloud: safe	unknown
https://pasteboard.co/images/gZGx6iwLNFFU.png/load	chromecache_73.4.dr	false	Avira URL Cloud: safe	unknown
http://cdn.flaticon.com/svg/44/44386.svg	chromecache_82.4.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.198.249	gcdnb.pbrd.co	United States	13335	CLOUDFLARENETUS	false
86.105.155.150	tiplicdn.vshcdn.net	Romania	56430	CHROOTBucharestROMANIAEURO	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.22.10.83	cdn6.aptoide.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
104.21.80.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.112.1	www9.0zz0.com	United States	13335	CLOUDFLARENETUS	false
185.15.59.240	upload.wikimedia.org	Netherlands	14907	WIKIMEDIAUS	false
198.199.109.95	wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com	United States	14061	DIGITALOCEAN-ASNUS	true
185.77.144.69	www.vszp.sk	Slovakia (SLOVAK Republic)	8290	SLOVANET-WSSK	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.17
192.168.2.7
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1613184
Start date and time:	2025-02-12 15:14:41 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@16/51@40/14

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.131, 216.58.212.142, 173.194.76.84, 172.217.16.206, 142.250.185.206, 142.250.184.238, 142.250.185.106, 142.250.185.74, 142.250.186.99, 142.250.186.170, 142.250.185.195, 142.250.185.138, 142.250.186.106, 142.250.74.202, 216.58.206.42, 142.250.186.138, 142.250.185.234, 142.250.185.170, 216.58.212.170, 142.250.186.42, 142.250.186.74, 142.250.185.202, 172.217.16.202, 142.250.181.234, 2.16.100.168, 142.250.184.206, 142.250.186.142, 142.250.186.174, 142.250.186.78, 142.251.41.14, 173.194.7.38, 172.217.18.3, 13.107.253.45, 2.18.97.153, 4.175.87.197
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, time.windows.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, r1.sn-p5qddn76.gvt1.com, r1---sn-p5qddn76.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Source: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/style/script.js	Avira URL Cloud: Label: phishing
Source: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/style/style.css	Avira URL Cloud: Label: phishing
Source: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/style/script.js	Avira URL Cloud: Label: phishing

Source: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/index.php	Joe Sandbox AI: Score: 9 Reasons: The brand 'Visa' is a well-known financial services corporation., The URL 'wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com' does not match the legitimate domain 'visa.com'., The URL contains multiple suspicious elements such as hyphens and a subdomain structure that is not associated with Visa., The domain 'codeanyapp.com' is not related to Visa and appears to be a generic service provider., The presence of input fields for sensitive information like card details is a common phishing tactic. DOM: 2.4.pages.csv
Source: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Citi' is a well-known financial institution, typically associated with the domain 'citi.com'., The URL 'wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com' does not match the legitimate domain 'citi.com'., The URL contains multiple hyphens and a subdomain structure that is not typical for a legitimate Citi website., The domain 'codeanyapp.com' is a generic domain, often used for development or testing purposes, which is not associated with Citi., The presence of 'wordpress' in the URL suggests a possible use of a content management system, which is unusual for a major bank's official site. DOM: 1.0.pages.csv

Source: global traffic	TCP traffic: 192.168.2.7:53619 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.7:49396 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 104.40.149.189
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /sk/sksiha/ HTTP/1.1Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk/sksiha/main/style/style.css HTTP/1.1Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/CrEimqFHoqvG.png?o=1 HTTP/1.1Host: gcdnb.pbrd.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/gZGx6iwLNFFU.png?o=1 HTTP/1.1Host: gcdnb.pbrd.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /202411141426/images/vzp-logo-white.png HTTP/1.1Host: assets.vzpstatic.czConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk/sksiha/style/script.js HTTP/1.1Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/gZGx6iwLNFFU.png?o=1 HTTP/1.1Host: gcdnb.pbrd.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/CrEimqFHoqvG.png?o=1 HTTP/1.1Host: gcdnb.pbrd.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2023/09/04/11/273994248.jpg HTTP/1.1Host: www9.0zz0.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /202411141426/images/vzp-logo-white.png HTTP/1.1Host: assets.vzpstatic.czConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk/sksiha/main/index.php HTTP/1.1Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk/sksiha/main/style/script.js HTTP/1.1Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/index.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/d/d7/Logo_VSZP_3riadky_farbaRGB.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /imgs/a/f/6/af6af35ac8c48f78b30377ca3c8f989d_icon.png HTTP/1.1Host: cdn6.aptoide.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/vszp/app/assets/images/mobilna-aplikacia/benefity.png HTTP/1.1Host: www.vszp.skConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sk/sksiha/main/style/script.js HTTP/1.1Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2023/09/04/11/273994248.jpg HTTP/1.1Host: www9.0zz0.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /imgs/a/f/6/af6af35ac8c48f78b30377ca3c8f989d_icon.png HTTP/1.1Host: cdn6.aptoide.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/d/d7/Logo_VSZP_3riadky_farbaRGB.png HTTP/1.1Host: upload.wikimedia.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /templates/vszp/app/assets/images/mobilna-aplikacia/benefity.png HTTP/1.1Host: www.vszp.skConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zoh4eiLi/IMG/7200/flVAMONb-XDLWHTyJW12jRq_E7zxEw7_f8ckBIO_4VA/resize:fit:200:0:1/gravity:no/quality:90/aHR0cHM6Ly93d3cudGlwbGkuY3ovdXBsb2FkL2ltYWdlcy9zaG9wcy1zaG9wLWxvZ28vMTMyODc0LnBuZw.png HTTP/1.1Host: img.tiplicdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zoh4eiLi/IMG/7200/flVAMONb-XDLWHTyJW12jRq_E7zxEw7_f8ckBIO_4VA/resize:fit:200:0:1/gravity:no/quality:90/aHR0cHM6Ly93d3cudGlwbGkuY3ovdXBsb2FkL2ltYWdlcy9zaG9wcy1zaG9wLWxvZ28vMTMyODc0LnBuZw.png HTTP/1.1Host: img.tiplicdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com
Source: global traffic	DNS traffic detected: DNS query: gcdnb.pbrd.co
Source: global traffic	DNS traffic detected: DNS query: assets.vzpstatic.cz
Source: global traffic	DNS traffic detected: DNS query: cdn.flaticon.com
Source: global traffic	DNS traffic detected: DNS query: www9.0zz0.com
Source: global traffic	DNS traffic detected: DNS query: upload.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: www.vszp.sk
Source: global traffic	DNS traffic detected: DNS query: cdn6.aptoide.com
Source: global traffic	DNS traffic detected: DNS query: img.tiplicdn.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	27145
Entropy (8bit):	7.8209722372460115
Encrypted:	false
SSDEEP:	384:p2JO+P9qE9v5e47RgAzP7K4qevGxGA0KkauEvNgc8TmPiW40G/X/U4BCGz:n+PX9v5eg7fqd4IEaNgc3RmvU6
MD5:	AF6AF35AC8C48F78B30377CA3C8F989D
SHA1:	A2BBED4B04F1AEBA9BFB14BD26312CFB59354C95
SHA-256:	B56585104182B04F1D91E29CFE2D6AC9E0854E12F2E7EDC7214DDFE65FFD8422
SHA-512:	B9473EE3C7DE79DC97BF07489DA586E8A7735C6FF3F6808A0C7B53F2D8E2D55109537DDFF3E11CE854408A1DA0119086DAA10E6728E312A7ADA4C5562702E765
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............x......sBIT....\|.d... .IDATx..y.].u....&. .F.$1s&EP$...@...XJ.XV$.#..me.t..GNz..zE..Xr...d[.-Gr8`.,Q.%Q.5P .. Hb....N...j.:.........{O.SU_U...x/..........2..h.4.H. ..$A.yJo=.1N.5+.L.....y..jh.<..U...7...T..2.yu...q.S..I'........N..Oj].u.A.:..i]h.U.q.I'.{k_.....Nz{'...:..r.w.[.zp..2..W./2...F.J.e.....$..F..D..R..4..F.......[.E.<7.....J..}...V.g.4.....W..m..^.N.}.}.q..#.9<g..#..<7..y%..P..g...r.t.;.vg.+u]D.8[......s.;{^....#.z..Q.M..N........X.^.\|...~+.0....w.C....;.y..I. ......K...0.AU.m"....o..,1..E.,.DI.30...H .R&S...J.q?......%.8.RF..~...............?./.......:..........Ok.E..\.(3..mwh^y.o^......Cf....kw..:..:k=H..u.e<7....o^g........,......W..u.......{...a..o^..m..N....2.~.y.k.A.J....X..<..~..!.U.C..VF...8..t.Zf'.c.. Jg........t..>..Z....`..........]........o.>.....r...xh]X.t}..5.\}.>o50 O..'.2..d(0_..W.fi....e...j..s'...S....Ok.E...?8.B.J.... u...?........:..g.t...P#q.{#.@Z..k....1^.(..}.3.. ..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 12, 2025 15:15:42.870954037 CET	53	57721	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:42.906137943 CET	53	52410	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:43.934670925 CET	53	61723	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:44.450103998 CET	123	123	192.168.2.7	104.40.149.189
Feb 12, 2025 15:15:44.619537115 CET	123	123	104.40.149.189	192.168.2.7
Feb 12, 2025 15:15:46.638015032 CET	54664	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:46.638434887 CET	54560	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:46.645446062 CET	53	54664	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:46.646076918 CET	53	54560	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:48.791731119 CET	58172	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:48.791928053 CET	52606	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:48.811640024 CET	53	58172	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:48.814379930 CET	53	52606	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:49.878865957 CET	53	50304	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:49.879213095 CET	53	61813	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:50.278744936 CET	59025	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:50.278925896 CET	49989	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:50.287616968 CET	53	59025	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:50.290518045 CET	53	49989	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:51.099373102 CET	59695	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:51.099853039 CET	60596	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:51.103878021 CET	62080	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:51.104037046 CET	57331	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:51.113029957 CET	53	62080	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:51.113056898 CET	53	57331	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:51.114995956 CET	51217	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:51.123748064 CET	53	51217	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:51.129559994 CET	53	60596	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:51.140261889 CET	53	59695	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:51.301342010 CET	53	50634	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:51.426953077 CET	57605	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:51.427115917 CET	61303	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:51.435683966 CET	53	61303	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:51.438210011 CET	53	57605	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:52.323035955 CET	53	55942	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:52.497678995 CET	50510	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:52.497838020 CET	54950	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:52.506917000 CET	53	54950	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:52.507004976 CET	53	50510	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:53.186855078 CET	49779	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:53.186919928 CET	64450	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:53.241295099 CET	53	64450	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:53.246289968 CET	53	49779	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:56.606405020 CET	56184	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:56.606559038 CET	60384	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:56.612374067 CET	53	60194	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:56.613327026 CET	53	60384	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:56.613679886 CET	53	56184	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:56.716975927 CET	59551	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:56.717128038 CET	58685	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:56.720251083 CET	61468	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:56.720396042 CET	63229	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:56.736226082 CET	53	61468	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:56.736726046 CET	53	58685	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:56.737087011 CET	53	59551	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:56.738890886 CET	53	63229	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:57.024450064 CET	57293	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:57.024663925 CET	55129	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:57.032033920 CET	53	55129	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:57.033485889 CET	53	57293	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:57.060205936 CET	60033	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:57.060376883 CET	58353	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:57.079482079 CET	53	60033	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:57.087238073 CET	53	58353	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:57.981044054 CET	54718	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:57.981417894 CET	64939	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:57.989386082 CET	53	54718	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:57.990768909 CET	53	64939	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:58.005036116 CET	58351	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:58.014786959 CET	53	58351	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:58.035662889 CET	55219	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:58.035832882 CET	56809	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:58.039496899 CET	63524	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:58.039671898 CET	61097	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:58.041214943 CET	64155	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:58.041476965 CET	52415	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:58.048058033 CET	53	52415	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:58.048648119 CET	53	64155	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:58.058202028 CET	53	61097	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:58.063478947 CET	53	63524	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:58.071574926 CET	53	55219	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:58.113639116 CET	49383	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:58.113904953 CET	60237	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:58.133060932 CET	53	49383	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:58.133275986 CET	53	60237	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:58.193487883 CET	53	56809	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:59.314332962 CET	57749	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:59.314483881 CET	53434	53	192.168.2.7	1.1.1.1
Feb 12, 2025 15:15:59.322061062 CET	53	53434	1.1.1.1	192.168.2.7
Feb 12, 2025 15:15:59.498842001 CET	53	57749	1.1.1.1	192.168.2.7
Feb 12, 2025 15:16:00.939842939 CET	53	54926	1.1.1.1	192.168.2.7
Feb 12, 2025 15:16:19.791724920 CET	53	64484	1.1.1.1	192.168.2.7
Feb 12, 2025 15:16:23.843564034 CET	53	55435	1.1.1.1	192.168.2.7
Feb 12, 2025 15:16:37.658862114 CET	138	138	192.168.2.7	192.168.2.255
Feb 12, 2025 15:16:42.315673113 CET	53	52768	1.1.1.1	192.168.2.7
Feb 12, 2025 15:17:03.953051090 CET	53	56956	1.1.1.1	192.168.2.7

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:49 UTC	710	OUT	GET /sk/sksiha/ HTTP/1.1 Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:49 UTC	261	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 12 Feb 2025 13:17:04 GMT Content-Type: text/html Content-Length: 24359 Connection: close Last-Modified: Sat, 16 Nov 2024 18:47:54 GMT ETag: "5f27-6270c1f086a80" Accept-Ranges: bytes Vary: Accept-Encoding
2025-02-12 14:15:49 UTC	1173	IN	Data Raw: 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 20 64 65 73 69 67 6e 65 64 20 62 79 20 6a 61 63 6b 69 20 61 6e 64 20 63 69 78 6f 74 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 20 2d 2d 3e 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 Data Ascii: ... ############################################ designed by jacki and cixot ############################################################ --><!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8" /> <meta http-equiv="refres
2025-02-12 14:15:49 UTC	11604	IN	Data Raw: 2c 20 30 2e 35 29 3b 0d 0a 20 20 20 20 20 20 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 20 62 6c 75 72 28 38 70 78 29 3b 0d 0a 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0d 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 0d 0a 20 20 20 20 2e 6c 6f 61 64 65 72 20 7b 0d 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 Data Ascii: , 0.5); backdrop-filter: blur(8px); z-index: 9999; display: flex; justify-content: center; align-items: center; } .loader { display: flex; justify-content: center; align-items: center
2025-02-12 14:15:49 UTC	2896	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 2f 73 65 6c 65 63 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 69 64 3d 22 63 61 72 64 2d 65 78 70 69 72 61 74 69 6f 6e 2d 79 65 61 72 22 20 6e 61 6d 65 3d 22 65 78 70 64 61 74 65 32 22 20 72 65 71 75 69 72 65 64 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 22 22 20 64 69 73 61 62 6c 65 64 3d 22 22 3e 59 59 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 32 30 32 34 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 Data Ascii: </select> </div> <div class="select"> <select id="card-expiration-year" name="expdate2" required=""> <option selected="" disabled="">YY</option> <option>2024</option>
2025-02-12 14:15:49 UTC	8686	IN	Data Raw: 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 6c 6f 67 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 68 73 6c 28 30 64 65 67 20 30 25 20 33 30 2e 32 25 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 33 30 30 6d 73 3b 77 69 64 74 68 3a 20 37 30 70 78 3b 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 73 73 65 74 73 2e 76 7a 70 73 74 61 74 69 63 2e 63 7a 2f 32 30 32 34 31 31 31 34 31 34 32 36 2f 69 6d 61 67 65 73 2f 76 7a 70 2d 6c 6f 67 6f 2d 77 68 69 74 65 2e 70 6e Data Ascii: lass="footer-logo"> <img style="display: block;-webkit-user-select: none;margin: auto;background-color: hsl(0deg 0% 30.2%);transition: background-color 300ms;width: 70px;" src="https://assets.vzpstatic.cz/202411141426/images/vzp-logo-white.pn

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:49 UTC	653	OUT	GET /sk/sksiha/main/style/style.css HTTP/1.1 Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:50 UTC	259	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 12 Feb 2025 13:17:04 GMT Content-Type: text/css Content-Length: 8329 Connection: close Last-Modified: Tue, 07 Nov 2023 10:55:10 GMT ETag: "2089-6098dcdea7f80" Accept-Ranges: bytes Vary: Accept-Encoding
2025-02-12 14:15:50 UTC	1195	IN	Data Raw: 2a 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 25 3b 0d 0a 7d 0d 0a 68 65 61 64 65 72 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 30 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 23 61 61 64 66 37 38 20 73 6f 6c 69 64 20 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 20 20 61 6c 69 67 6e 2d Data Ascii: * { padding: 0%; margin: 0%;}header { background-color: #ffffff; padding: 20px 0; border-bottom: #aadf78 solid 3px;}.container { max-width: 100%; margin: 0 auto; display: flex; justify-content: space-between; align-
2025-02-12 14:15:50 UTC	7134	IN	Data Raw: 62 64 65 64 37 64 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 30 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 31 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 2e 62 74 6e 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 3b 0d 0a 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 68 65 Data Ascii: bded7d; color: white; text-decoration: none; margin: 20px 0; padding: 15px 15px; border-radius: 5px; position: relative;}.btn::after { content: ""; position: absolute; z-index: 1; top: 0; left: 0; width: 100%; he

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35328, version 1.0
Category:	downloaded
Size (bytes):	35328
Entropy (8bit):	7.994332301165168
Encrypted:	true
SSDEEP:	768:ref/0cWmx/+kx+VzykFOgg80zBQd0Q8LdDY0NC+GJor:6McWmx/TIykFPctQdi0or
MD5:	7670DBA29AA2A1560C5D711EA6F6B369
SHA1:	6A2A620D2972F139C804C5A8363C91EB1A7595F6
SHA-256:	ADFA45260A1306CB5FEFC1F17C1B5E7B61135534A82BF1B8E3D0540AF7E07E3B
SHA-512:	CDA686C9E3AF62B9D13AF3C71F79184E4C57A06B8AF067316C70A5A56CB7A62C319E9F3B81DC57B58B052672126F2F019B32C687F05324D1C12F5664BCE9F7BA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
Preview:	wOF2...............\..............................@.....\|?HVAR.D.`?STAT.$'...J+...\|.../V.....\.i....0....6.$..,. ..~.........'.sp.V.m..^.R...C..U.1..z...@P.Q...g&.14.>m.Q.m...rG.[^"ji[o.bW"plhM....(:......D'%.G.D^=j.).1....8 .............n.2.....a...a_t..<.......mJe.k...Mer}!...2&RY.9.KB....3.L...k.Q.Y."..d.7r.F!_.Z...~\.$[....D..<...b^..4~.....3..#.o2.\k<...;D....m.....;.p.......E2j..5ptHK...9$K....l.>.3..i.....rc....nr...]i...l..%d.B.2.d..'.uwtw.qrk...wn.wo...nx<.....}...O..v..rk....cgu...].$.....9.D.{._..cJ)m..d`..<~6./i$...;...*B.../..`........7...R.yP....l.....x....OF.... ..&... b. ...w..o.V"..1.../....3..)V.$'.X...f#..0ic..[...%......{_O.=.M..=o....L.cv.6........F..9 M....5Y.N.0.4...g....b....k.^......&......?.....$.@.:.J.2..v:...>%..C...>f.4..3e.6..4.`I..D..B.Q.Ou..J._..M.."2...x;G.\}U.HlbG..D.'.p.....D.'.:..G..h`........I.H...-o...~W.j.....e.\.d..;...m.?.)q...7k.R.....y..(.IX.=r7....g........>v.f........'.....L%...:%ChZ\|..[h>..dz.[.][@.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 176x176, components 3
Category:	dropped
Size (bytes):	7155
Entropy (8bit):	7.894201312936539
Encrypted:	false
SSDEEP:	192:QftTJ41eTo2NbHiB83jjq4z+gAaa8KeN8CEWY:QVcepbHU8jjq4zLm3eN8DWY
MD5:	068B7E2EDD27382D013B052D01811BEE
SHA1:	D179670D30F61B573E1111B06AC67A26F862AC88
SHA-256:	1729B9A1365071EF0F44E0A0CF4E4496CC04F3B81FC6B4F345E6EA4F41294CAE
SHA-512:	8810D75492D433FE134B1B231F9BF209AEDADC067DA96530264C24A9D351383F6F33531A08D52A42F45E98C054B1DA89D53CD807D25569C546DD62B8CC58A4F1
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Google.............................................................................................................................................................................................D............................!..1."AQa.#..23Rbqr%5Bu...Us........4C.................................@.......................!1..AQa..q.."2...3Rbr...S..#.....BCT...............?..:.@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(...:...q.......A,.......j.01{C....".`..J..W.D..:ZD..7W?..G.p`.o#...m...o.....p,y......?i......7.i..)...'iB.W7............iW.$.....E6.y..N..?..ttx>.l.cQ.Z;.#+.O.J..\.j.By....P..@(......P..@(.M...$......UU.,.p...&...a.)4...K.O<i..IY..{.z...\|...b4?..K..X....x...J....v<jq..5d....K&V;...I]..^I......f.I..1..RNsm..&.o...h.<2...4....O2:..U....z....W..%;....t.....J.U..I....N.?.6..d...zq/G.^)Z......,.>..>3.E....W..5w=.fmJ.J.}A....\|....3..M.....P..@(......P...sa....g.........

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 63 x 27, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2103
Entropy (8bit):	7.422227365614992
Encrypted:	false
SSDEEP:	48:tzo7FDvnLakJb8J31KW/zK0zU3tQskTxbrsQPpLQ:Bo7FbXJW/zAzWsaQ
MD5:	F46B9B4A53D11B2D8AA28D4D4C65A4D4
SHA1:	2475444CE770DE7EDA16B6A12E36245050764B90
SHA-256:	5BCDB588D6A73BA23FEFE17216BE81F135518A7394E844B39EB9AB137303D690
SHA-512:	E114C6D2AECBD30A6C83AC6C4C7CFC70974B5941F57F331F45AEBE0AB1C8BC51564625775C1C38DA028B3F24FE6383A654431A23AA0817CD23FCB6AAB7FE0A37
Malicious:	false
Reputation:	low
URL:	https://assets.vzpstatic.cz/202411141426/images/vzp-logo-white.png
Preview:	.PNG........IHDR...?..........bW.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6cc9bb46-32ad-314b-afd5-a85dc971c158" xmpMM:DocumentID="xmp.did:F9CCCDCDD5CC11E7AC0FC18DF9A7D259" xmpMM:InstanceID="xmp.iid:F9CCCDCCD5CC11E7AC0FC18DF9A7D259" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ac168b4-c1bf-9f4c-8ca9-328ad4782c3a" stRef:documentID="adobe:docid:photoshop:d7857e48-3a5c-11e7-bb55-ba1b21c5a4fb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>}..\|...IIDATx..YlMQ..

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 63 x 27, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2103
Entropy (8bit):	7.422227365614992
Encrypted:	false
SSDEEP:	48:tzo7FDvnLakJb8J31KW/zK0zU3tQskTxbrsQPpLQ:Bo7FbXJW/zAzWsaQ
MD5:	F46B9B4A53D11B2D8AA28D4D4C65A4D4
SHA1:	2475444CE770DE7EDA16B6A12E36245050764B90
SHA-256:	5BCDB588D6A73BA23FEFE17216BE81F135518A7394E844B39EB9AB137303D690
SHA-512:	E114C6D2AECBD30A6C83AC6C4C7CFC70974B5941F57F331F45AEBE0AB1C8BC51564625775C1C38DA028B3F24FE6383A654431A23AA0817CD23FCB6AAB7FE0A37
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...?..........bW.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6cc9bb46-32ad-314b-afd5-a85dc971c158" xmpMM:DocumentID="xmp.did:F9CCCDCDD5CC11E7AC0FC18DF9A7D259" xmpMM:InstanceID="xmp.iid:F9CCCDCCD5CC11E7AC0FC18DF9A7D259" xmp:CreatorTool="Adobe Photoshop CC 2017 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:7ac168b4-c1bf-9f4c-8ca9-328ad4782c3a" stRef:documentID="adobe:docid:photoshop:d7857e48-3a5c-11e7-bb55-ba1b21c5a4fb"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>}..\|...IIDATx..YlMQ..

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:51 UTC	641	OUT	GET /images/CrEimqFHoqvG.png?o=1 HTTP/1.1 Host: gcdnb.pbrd.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:51 UTC	1162	IN	HTTP/1.1 200 OK Date: Wed, 12 Feb 2025 14:15:51 GMT Content-Type: image/png Content-Length: 8487 Connection: close Cache-Control: public, max-age=14400 Cf-Bgj: h2pri,csam-hash ETag: "4403a57b5aeb4c323900ece3aafa3311" Expires: Wed, 12 Feb 2025 14:23:08 GMT Last-Modified: Sat, 16 Nov 2024 19:33:27 GMT X-GUploader-UploadID: AHMx-iHun_3IbpjB5QwgwuvenzpNjncEa8buw9BcpwgzPKT7N35eUpMgMFliuJuaFbekbeW9PJ00JNA x-goog-expiration: Fri, 14 Feb 2025 19:33:27 GMT x-goog-generation: 1731785607740363 x-goog-hash: crc32c=Ntdy+w== x-goog-hash: md5=RAOle1rrTDI5AOzjqvozEQ== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 8487 CF-Cache-Status: HIT Age: 3163 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EZbm4hfPF1ngrUbXFDOH8nJxmlQfa%2BsqMho7TUqHKqMLWJ6bsUhqmeA%2FwtFQJv689NvDlTqCYDruQMNZZjURDVYXZ7T9A8tdx4LxUydqNb1bHSBWNATuSc42XbHHryS1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 910d31720cbbc452-EWR alt-svc: h3=":443"; ma=86400
2025-02-12 14:15:51 UTC	219	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 32 30 34 38 39 26 6d 69 6e 5f 72 74 74 3d 31 35 31 36 26 72 74 74 5f 76 61 72 3d 31 31 39 31 35 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 31 31 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 31 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 39 32 36 31 32 31 26 63 77 6e 64 3d 32 31 35 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 36 35 62 62 63 39 62 32 33 61 65 31 35 31 66 26 74 73 3d 31 36 38 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=20489&min_rtt=1516&rtt_var=11915&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2811&recv_bytes=1219&delivery_rate=1926121&cwnd=215&unsent_bytes=0&cid=065bbc9b23ae151f&ts=168&x=0"
2025-02-12 14:15:51 UTC	1357	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 4d 00 00 00 4d 08 06 00 00 00 22 87 36 70 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 20 bc 49 44 41 54 78 5e ed 9d 87 7f 2d 55 b5 c7 df df f1 7c cf f7 9e 62 ef 5d ec 58 b0 62 43 6c a0 82 8a 0d 2b 2a 2a 62 c1 ae d8 b0 8b 8a 0a 82 02 22 88 0a 62 57 14 14 7b ef 8d db 73 7b 92 9b db 72 33 ef 7c 77 66 9d fc 66 65 cd 99 7d 72 4f 72 93 dc fd fb 7c d6 e7 93 ec bd 67 4e 9b f9 cd da ab fe 47 55 50 50 50 50 90 8d 42 9a 05 05 05 05 43 a0 90 66 41 41 41 c1 10 28 a4 79 18 61 66 6a aa da f8 d8 87 57 bb 2e bf b4 1e a9 aa 5d 5f b9 bc da f8 b8 47 54 33 93 13 f5 48 c1 42 70 60 db d6 fa af 82 d5 8e 42 9a 87 Data Ascii: PNGIHDRMM"6psRGBgAMAapHYs%%IR$ IDATx^-U\|b]XbCl+**b"bW{s{r3\|wffe}rOr\|gNGUPPPPBCfAAA(yafjW.]_GT3HBp`B
2025-02-12 14:15:51 UTC	1369	IN	Data Raw: c3 fa 07 dd bb 71 2c da 27 08 b7 e7 4f 38 66 6e ac 47 c0 bb bf f7 ed b4 16 0c b2 69 9a d6 4c c8 8f 8e 6f 7e fe b3 d2 78 1b da 48 13 d3 85 3a 79 22 d2 54 bb f2 f6 b7 bf a9 ff 37 c2 d6 bd 60 f5 62 d9 93 a6 37 b6 b7 09 01 da 78 50 b7 bc f8 79 8d 0b ba 4d d0 b4 56 72 40 f7 ee 1f fe a0 f1 79 a6 be 71 55 ba b9 ed 7f b2 7d 14 d3 9b 36 36 d6 47 02 51 ed fb c3 ef d3 fa 5c d2 d4 f1 f5 0f 38 b2 1e 9d 03 5a a4 ae d9 f3 d3 9f cc 8e 3b fb a5 97 dd 3f f8 6e 5a 67 c8 21 4d 6f f7 c4 96 39 08 4a 9a 38 9e 34 2a 03 2f be fd ed 49 53 c9 99 63 08 69 b3 ff 11 7e 8b 82 d5 8b 65 4d 9a 53 5f ff 5a e3 62 6c 93 bd bf fa 45 7d c4 2c f6 5c ff e3 ac b0 a4 2d 2f 7a 6e 7d c4 ca 04 f6 37 fb 2c 6c d1 f5 b3 4d 7c fe fc 7a d5 1c 88 9b 84 ac 20 47 5d ab 62 e9 94 0b 21 4d de 8f 07 5b 64 5d 83 Data Ascii: q,'O8fnGiLo~xH:y"T7`b7xPyMVr@yqU}66GQ\8Z;?nZg!Mo9J84*/ISci~eMS_ZblE},\-/zn}7,lM\|z G]b!M[d]
2025-02-12 14:15:51 UTC	1369	IN	Data Raw: b7 d4 47 14 14 34 41 46 d2 86 87 3f 30 5d 27 e9 01 1b 24 14 ac 04 6c 7b dd ab e6 5d f7 26 ec ca 3c b4 6a 95 d6 11 45 0e 97 aa f5 87 94 34 a9 42 a3 5f 7a 24 5b 5e f8 9c 7a f5 2c a8 de 13 ad eb 92 f5 0f b9 6f 43 5b 1d ff f4 27 c2 75 0d b9 f9 7f 37 d2 32 0b 0a 00 ad 36 f4 3a 21 95 75 25 e7 9a 53 dc 86 84 11 fb 3c f4 73 6a fb 3c 68 96 3e bb 6c c3 d1 f7 af f6 fc e4 da 7a c5 ea c7 21 23 4d 6c 26 fa c5 47 c2 0f a9 ed 77 09 26 d6 e6 fc c3 4a c3 2e 4a 0b 8d 47 cc 6a 0a 83 64 35 54 79 2f 18 2d 28 26 83 13 12 bb 7a ea 95 24 69 bb 2b 15 ec fa 48 2e 20 1d 39 47 6b a6 6c 23 be 88 f1 4f 7d 3c dd 4b 87 13 0e 19 69 e6 10 16 ad 5c 15 db df fc fa 70 5d ae a4 82 b1 75 bb 05 40 1c 67 b4 ce 4b d4 26 f7 50 43 33 4f 22 d1 ee 8c dc e4 7e 1e 4d db 0a 02 7b 60 b7 f2 eb 11 ec cf cc Data Ascii: G4AF?0]'$l{]&<jE4B_z$[^z,oC['u726:!u%S<sj<h>lz!#Ml&Gw&J.JGjd5Ty/-(&z$i+H. 9Gkl#O}<Ki\p]u@gK&PC3O"~M{`
2025-02-12 14:15:51 UTC	1369	IN	Data Raw: 2f 6c 8c a3 35 7a db 9e 11 80 42 e7 a9 78 6f 58 08 69 46 66 00 7a 34 b1 b5 c6 de a8 99 74 8a 2e d2 e4 37 d5 79 6c d2 0a 6c d5 3a 4f a7 86 34 2e 8a 8b ed 1a b0 b9 ea 5a bd ff da b2 02 a7 be f3 ad 46 b9 48 4f 9a da 9e d9 2b 4b 44 05 74 61 c9 48 93 1a 98 fa e6 22 21 96 b2 9a 9e 8b a5 4c f9 e5 12 3f d6 26 f3 3a 2f ce cc cc 6b 1d 1b 89 39 1a 0c 3b de fd 8e 70 9d 0a 24 a2 75 17 0f 35 bc ad 69 cb a9 2f ac 67 e6 d0 46 9a be 42 be 55 90 52 d2 44 92 d7 33 70 4c 68 38 18 75 3c 75 ce 6b 69 ea 79 f6 d7 42 0a 77 91 f3 a3 7d d8 13 df 6f af fd 45 ed c9 76 e7 87 de 5f cf cc 62 a1 a4 89 60 b2 d0 ff 47 41 9a d8 51 b9 f1 bd 5d 1f af 3d b1 8e 3a 16 d5 40 d0 46 76 28 0b 86 85 90 66 8e ad 38 b2 f3 75 91 a6 ce 21 1e f4 a3 d7 79 ab 46 e6 77 32 44 45 f8 f6 25 6a c7 6d 23 4d ec e6 Data Ascii: /l5zBxoXiFfz4t.7yll:O4.ZFHO+KDtaH"!L?&:/k9;p$u5i/gFBURD3pLh8u<ukiyBw}oEv_b`GAQ]=:@Fv(f8u!yFw2DE%jm#M
2025-02-12 14:15:51 UTC	1369	IN	Data Raw: 4a 35 4d 15 b4 c8 1d ef 3f ab 5e 35 87 06 69 d6 9a 26 f0 1a 04 bf b1 f7 70 7a cd c1 97 ff c3 2e 67 f0 d9 3e c4 07 b6 81 1b d3 db da 10 7e b3 41 45 80 17 aa 69 02 af 6d 2e 85 a6 09 c8 f8 6a 2b 94 cd 83 4b 9b 0b 1a f4 bb 21 db c5 d0 46 9a 84 74 f1 dd b0 15 d5 79 13 ec fa 9e 98 0d 5d 9a 26 e0 77 c6 57 10 25 9a 40 ea bc af 36 90 09 a6 eb 71 78 46 88 34 4d e0 b5 4d 23 4d f5 a8 f3 fd 7a 70 ad db bc 65 85 45 58 14 d2 cc 21 9b e4 fc a9 83 5a 0d 5d 45 19 10 af ad 64 63 7a 7f d2 be a2 73 aa 58 66 91 21 87 a0 96 da 29 84 fd 35 39 13 06 88 66 c6 e0 0d f4 f3 7b 7f fb eb 7a 76 3e c8 da e9 af 75 95 90 f4 1c 9c 17 5b 6a ff 7f 57 44 02 34 ce d5 13 25 4d 00 a9 d8 5c 14 2e e5 41 1e 32 a4 0e 59 7b 5b 5b 04 c2 65 f4 f5 23 e8 bc c6 01 92 99 a6 73 de 11 91 03 3e 6f e3 1c f2 50 Data Ascii: J5M?^5i&pz.g>~AEim.j+K!Fty]&wW%@6qxF4MM#MzpeEX!Z]EdczsXf!)59f{zv>u[jWD4%M\.A2Y{[[e#s>oP
2025-02-12 14:15:51 UTC	1369	IN	Data Raw: 90 5d 0c d2 e4 9a d1 f5 f8 0c e8 cc 88 c6 4d fa a5 8d 5b d9 3f 5f 6c 64 50 11 8b c3 09 0b 26 cd 9c 5e 3a 54 51 51 64 05 96 1f 71 a3 7e 7e 39 55 b8 c3 35 2d 32 6c a1 82 83 01 61 50 d1 7b 50 19 a6 e6 e7 b0 f0 1a c0 e4 a5 f3 2b cd 18 da 2a b7 7b f8 82 26 1a ff 49 16 96 f7 6e fb 6a 32 c0 97 62 63 3b ae e0 c6 b6 39 9f 4e db 05 25 2b ab ac e3 6b b6 d2 bf c8 a0 3b 21 5f 51 4b e1 49 13 60 86 f0 55 be cd 34 91 4d 9a 56 51 c8 91 a6 15 85 49 65 e0 c4 36 ae 36 fc 83 26 4d 69 f5 62 df f3 86 63 9a 26 1c 7e 2b 03 b5 13 74 8e df de 3b 4f a3 82 c5 87 23 16 44 9a 78 86 f5 cb 8c 44 6b fa 25 64 06 96 f3 43 29 72 8a 7f 98 50 8b 73 a9 e0 8b 96 46 e2 e3 44 47 05 df ea 75 ec e9 73 a5 c0 22 64 93 66 4f 23 d1 f3 52 94 76 90 03 28 22 4d 1c 60 f6 3f 5b 41 8f 51 93 a6 2f 2f 47 29 32 Data Ascii: ]M[?_ldP&^:TQQdq~~9U5-2laP{P+*{&Inj2bc;9N%+k;!_QKI`U4MVQIe66&Mibc&~+t;O#DxDk%dC)rPsFDGus"dfO#Rv("M`?[AQ//G)2
2025-02-12 14:15:51 UTC	285	IN	Data Raw: eb 31 88 7f d8 eb 5c 21 cd f9 e8 24 cd a8 d7 b4 17 5f 3a 8d 80 63 b6 dd d1 5a 15 7e c0 61 91 1b 27 6a 42 c6 88 82 1b 2a 5a 37 8c 50 1c 83 02 1e e6 10 39 94 20 05 8e 02 28 5b 5f f3 f2 94 23 4d 68 0c 41 fe 16 ee 02 36 3f e7 c4 74 13 b6 89 9a 47 b0 57 e2 f5 26 2e 93 62 1e 64 59 91 cc e0 9d 2c 80 ad bb 9d c3 db 13 09 8c d7 d7 c0 2c 00 08 f8 d7 71 2f 51 0f 6d 43 5b a1 0c 2d 1c 92 e6 2e 38 2f 8d 93 53 ad e3 5e cc 83 0c 31 e0 fc 31 c9 05 df 8b d9 7b b1 2b 6f 3c e6 e8 14 35 61 a4 ad 88 5e 7f ec 84 e3 d2 75 14 85 f4 b0 bd 8e 8e 41 34 a4 4f c7 1b 05 3b ce 3b b7 3f 8e a2 a1 d0 cf 1a 7d 66 1d 2f a4 39 1f d9 8e a0 82 82 82 82 82 42 9a 05 05 05 05 43 a1 90 66 41 41 41 c1 10 28 a4 59 50 50 50 30 04 0a 69 16 14 14 14 0c 81 42 9a 05 05 05 05 43 a0 90 66 41 41 41 c1 10 28 Data Ascii: 1\!$_:cZ~a'jB*Z7P9 ([_#MhA6?tGW&.bdY,,q/QmC[-.8/S^11{+o<5a^uA4O;;?}f/9BCfAAA(YPPP0iBCfAAA(

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:51 UTC	641	OUT	GET /images/gZGx6iwLNFFU.png?o=1 HTTP/1.1 Host: gcdnb.pbrd.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:51 UTC	1369	IN	HTTP/1.1 200 OK Date: Wed, 12 Feb 2025 14:15:51 GMT Content-Type: image/png Content-Length: 1702 Connection: close Cache-Control: public, max-age=14400 Cf-Bgj: h2pri,csam-hash ETag: "cd394cb09c4a17c3f4a234b831566638" Expires: Wed, 12 Feb 2025 14:23:08 GMT Last-Modified: Sat, 16 Nov 2024 19:40:38 GMT X-GUploader-UploadID: AHMx-iEJ69aLq22wQconLDU4-C2mbp4VqW4flBfe2jrib4V9gKc5K2JYchvzEWaySHTxz60b x-goog-expiration: Fri, 14 Feb 2025 19:40:38 GMT x-goog-generation: 1731786038799657 x-goog-hash: crc32c=3isx7Q== x-goog-hash: md5=zTlMsJxKF8P0ojS4MVZmOA== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 1702 CF-Cache-Status: HIT Age: 3163 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zR21sJmHOLcnhjk2RHSVhOaFqjAkcSh9ajyHjDDo8OC2e1UQMfvA5ekLXLLS2nZZLcnH%2BwcXdzQgV29xQMwlJzuPoyAl9tzHgt2N1C1gxFIfWTZv5Se9KWdbbbQ7z4tF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 910d3171fa1f8c5f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=13075&min_rtt=1858&rtt_var=7510&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2813&recv_bytes=1219&delivery_rate=1571582&cwnd=186&unsent_bytes=0&cid=e7de3384f86fb650&ts=157&x=0"
2025-02-12 14:15:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-02-12 14:15:51 UTC	1367	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 9f 00 00 00 45 08 06 00 00 00 54 be 34 a9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 06 3b 49 44 41 54 78 5e ed 9c fd 6b 5b 55 18 c7 fd 17 44 71 e2 0f d6 17 7c 01 d1 a2 a2 fe b4 89 b0 fd a2 48 8d 96 fa 83 91 12 90 ae 30 6b 5c e8 60 28 0b 85 54 69 49 49 a3 a5 2b ad 48 11 cc c4 45 2d a5 2e 88 75 b4 56 5d ca 24 56 3a 98 2d 4a 68 b8 b3 b4 66 4d 2d a4 94 a6 2f 8f f7 49 4e b2 bc 9c e4 de 34 b9 f7 b9 c5 e7 03 5f 28 e7 9e e7 70 e8 fd 70 4e ee 4b 72 1b 30 0c 11 2c 1f 43 06 cb c7 90 c1 f2 31 64 b0 7c 0c 19 52 f9 f6 f7 f7 21 1e 8f 43 2c 16 83 a5 a5 25 0e e7 c0 41 87 d0 25 74 aa 18 a9 7c d8 39 91 48 Data Ascii: PNGIHDRET4sRGBgAMAapHYs%%IR$;IDATx^k[UDq\|H0k\`(TiII+HE-.uV]$V:-JhfM-/IN4_(ppNKr0,C1d\|R!C,%A%t\|9H
2025-02-12 14:15:51 UTC	335	IN	Data Raw: 57 3e 44 b9 e4 ce 09 68 6b 6e 01 47 a7 27 7d bb a3 e0 dd be 16 17 8c 67 b7 d6 dc 95 b2 de 14 de ce c9 c9 a7 15 67 50 f7 e7 48 2b 41 26 df d3 47 3b e0 9b 7b 1b a5 42 98 99 6a e4 43 52 cb 33 30 e8 6c 29 15 40 95 b1 c3 3b 0e f3 eb a2 23 a2 ae 96 25 fd 2a 86 e5 33 5c be 57 9f 79 13 7e bb ab 41 2a 83 d9 a9 56 be 1c f8 9e de f2 02 44 66 22 b0 b0 5c db 63 ae ff 2b a6 cb e7 7a fc 65 a9 04 54 39 b0 7c 4c cd 98 22 1f 7e 3d f1 c8 f1 f7 e1 e3 87 8e 4a 05 a0 0c 7f 75 92 0e c3 e5 cb 7e 69 7c ec 8d b7 2d 19 fe d2 38 1d 86 cb c7 3f 97 c1 94 c3 70 f9 10 3c b9 b8 ba e0 f6 66 a5 e0 9c 58 3c 3a 4c 91 8f 61 64 b0 7c 0c 19 2c 1f 43 06 cb c7 90 c1 f2 31 64 b0 7c 0c 19 2c 1f 43 06 cb c7 90 c1 f2 31 64 b0 7c 0c 19 2c 1f 43 06 cb c7 90 c1 f2 31 64 e8 96 2f 16 8b f1 1b 20 4c dd 40 Data Ascii: W>DhknG'}ggPH+A&G;{BjCR30l)@;#%3\Wy~AVDf"\c+zeT9\|L"~=Ju~i\|-8?p<fX<:Lad\|,C1d\|,C1d\|,C1d/ L@

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:51 UTC	658	OUT	GET /202411141426/images/vzp-logo-white.png HTTP/1.1 Host: assets.vzpstatic.cz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:52 UTC	439	IN	HTTP/1.1 200 OK Date: Wed, 12 Feb 2025 14:15:52 GMT Content-Type: image/png Content-Length: 2103 Connection: close Access-Control-Allow-Origin: * Cache-Control: private ETag: "1db78a18d1b3db7" Last-Modified: Thu, 06 Feb 2025 14:15:19 GMT Arr-Disable-Session-Affinity: true x-azure-ref: 20250212T141551Z-1868d69f86fnv4zphC1EWRm6bw0000000kv000000000cxdv x-fd-int-roxy-purgeid: 0 X-Cache: PRIVATE_NOSTORE Accept-Ranges: bytes
2025-02-12 14:15:52 UTC	2103	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3f 00 00 00 1b 08 06 00 00 00 cb 62 57 ff 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 84 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR?bWtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:51 UTC	634	OUT	GET /sk/sksiha/style/script.js HTTP/1.1 Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:52 UTC	372	IN	HTTP/1.1 404 Not Found Server: openresty Date: Wed, 12 Feb 2025 13:17:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/wp-json/>; rel="https://api.w.org/"
2025-02-12 14:15:52 UTC	3973	IN	Data Raw: 66 37 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 73 6b 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 27 20 2f 3e 0a 09 3c 73 74 79 6c 65 3e 69 Data Ascii: f7e<!doctype html><html lang="en-US" ><head><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Page not found – sk</title><meta name='robots' content='max-image-preview:large' /><style>i
2025-02-12 14:15:52 UTC	7254	IN	Data Raw: 31 63 34 65 0d 0a 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 30 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e Data Ascii: 1c4e id='wp-emoji-styles-inline-css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 0.07em !important;vertical-align

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:53 UTC	641	OUT	GET /2023/09/04/11/273994248.jpg HTTP/1.1 Host: www9.0zz0.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:53 UTC	1010	IN	HTTP/1.1 200 OK Date: Wed, 12 Feb 2025 14:15:53 GMT Content-Type: image/jpeg Content-Length: 7155 Connection: close last-modified: Mon, 04 Sep 2023 11:30:16 GMT etag: "1bf3-60486d59ec423" Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 3163 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bDg9FYJ3Lf0KO830VTmA0mltHIN23bcv0EU88TtRnpNzYFLjVhxawD4yI%2Blv5DvG7vBSePyKg%2Fdb9kNSPr%2BH2VzU54qHejGG%2Bbpe6mW1rxeTxb3g8XIQpVHC%2FQ%2BwGcaH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 910d3180d9200f5b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1639&min_rtt=1625&rtt_var=637&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2814&recv_bytes=1219&delivery_rate=1680092&cwnd=221&unsent_bytes=0&cid=0689456f2a7f0599&ts=232&x=0"
2025-02-12 14:15:53 UTC	359	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 09 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 08 08 08 08 0a 09 09 08 08 0b 0d 0a 08 0d 08 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0b 0e 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0e 0e 0d 0d 0d 0d 0e 0d 0e 0d 0d 0d 0d 0d 0d 0a 0d 0d 0e 0e 0d 0d 0d 0e 0d 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d ff c0 00 11 08 00 b0 00 b0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 03 00 02 03 01 00 00 00 00 00 00 00 00 00 00 07 08 09 04 06 01 03 05 02 ff c4 00 44 10 00 02 Data Ascii: JFIFExifII1GoogleD
2025-02-12 14:15:53 UTC	1369	IN	Data Raw: 05 05 06 03 06 07 00 00 00 00 00 01 02 03 11 04 21 31 05 12 41 51 61 06 13 71 81 91 22 32 a1 b1 d1 33 52 62 72 b2 c1 14 53 f0 15 23 82 92 d2 e2 16 42 43 54 a2 c2 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 d5 3a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 3a ff 00 16 71 fd 9d 8a ee bc ba 82 dc 1f 41 2c 8a ac df c8 99 de e7 e8 aa 6a 97 30 31 7b 43 0d 83 8e f6 22 a4 60 bf 13 4a fe 0b 57 e4 44 fa c7 3a 5a 44 7f ab 37 57 3f ee ad d9 47 e7 70 60 aa 6f 23 91 ad db 6d 9b 05 ec 6f cf f2 c1 af d7 ba 70 2c 79 e1 d2 d9 b0 f0 df c4 3f 69 a1 89 87 e5 14 f2 37 f9 69 bc 88 29 f6 e7 01 27 69 42 ac 57 Data Ascii: !1AQaq"23RbrS#BCT?:@(P@(P@(P@(P@(P@(P@(:qA,j01{C"`JWD:ZD7W?Gp`o#mop,y?i7i)'iBW
2025-02-12 14:15:53 UTC	1369	IN	Data Raw: 4a 7b d0 a0 14 02 80 8b f9 92 bf bb 87 48 b9 9e c6 77 b7 9a dc c7 2b 32 05 dc d0 ab 81 2a 82 ca d8 f7 5b 7e 40 cf b9 8c e0 9a b5 e8 73 1d a5 a9 88 a5 b3 ea 55 c2 cd c6 51 b4 9b 56 f7 53 f6 96 69 f0 cf c8 a4 bf fc 84 d6 7f da 77 3f 9c 7f f8 ea 2b b3 c4 ff 00 e2 2d a7 ff 00 71 3f 48 ff 00 a4 ec 1e 1f 73 11 aa 8b fb 2e b6 a1 3c b0 b5 d4 09 2c 6f d3 2a d1 c9 22 a3 83 84 07 f4 58 90 41 04 10 2a a9 99 fb 3f b4 7b 41 62 a9 77 95 a5 28 b9 c5 49 3d db 34 da 4f 44 b8 33 42 aa 63 e8 41 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 01 47 79 e3 43 f6 ad b1 3e 86 c5 31 f8 4f 36 7f ea 2a 39 1e 1b db 94 ff 00 8e a7 7f e5 e5 fe 67 7f 9a 2b b5 46 79 e1 6d 39 0a 95 7f a5 17 fb 79 b4 6f ae dc 4e 07 f9 81 a9 62 7a c7 60 65 1b e2 23 c7 d8 7e 5e d5 be 29 96 de af 3d 74 50 0a 01 40 Data Ascii: J{Hw+2[~@sUQVSiw?+-q?Hs.<,o"XA?{Abw(I=4OD3BcA@(P@(GyC>1O69g+Fym9yoNbz`e#~^)=tP@
2025-02-12 14:15:53 UTC	1369	IN	Data Raw: 4f 92 67 11 c3 1c 93 48 7d 23 89 1a 47 3f c1 10 33 7f 85 56 c5 d4 e1 2a b2 dc a7 17 29 72 8a 72 7e 8a ec b0 fe 14 f2 69 75 72 cb 2e a6 4d 9d be 41 e8 29 56 ba 90 7c 89 04 a4 00 fc c9 77 c6 46 c4 3d c5 ca 27 a2 6c ae c6 62 2b b5 53 1b fd dc 3e ea ce 72 e9 75 94 3e 2e dc 13 cc b9 1c 2f c2 d0 59 40 96 d6 b1 24 30 c6 30 a8 83 03 bf 72 c4 fa b3 31 ee ce c4 b3 1e e4 93 52 9e c9 85 c2 d1 c2 52 54 68 45 46 2b 44 bf ac db e2 de 6f 89 f5 68 65 8a 01 40 28 05 00 a0 14 02 80 50 0a 01 40 28 05 00 a0 14 02 80 f5 cd 00 60 55 80 65 3d 88 60 08 23 e4 41 ec 68 51 a4 d5 99 d1 f5 5f 02 34 99 89 69 34 cb 32 c7 b9 2b 02 46 49 f9 93 18 42 4f d4 d5 2c 8d 1d 5d 83 b3 aa b6 e7 87 a7 77 ab dd 4b e5 63 87 6b cb 8e 8c 87 23 4c b5 3f cc a5 c7 e4 ec c3 fc 2a 9b a8 86 3d 9c d9 91 d3 0f Data Ascii: OgH}#G?3V)rr~iur.MA)V\|wF='lb+S>ru>./Y@$00r1RRThEF+Dohe@(P@(`Ue=`#AhQ_4i42+FIBO,]wKck#L?=
2025-02-12 14:15:53 UTC	1369	IN	Data Raw: 59 5d 92 df 78 d7 13 c8 0d d3 29 08 6d 52 7c b4 32 06 72 d3 38 81 a0 cc 96 d0 ad 56 1d dc 56 6f 56 b5 6b 95 96 9d 6d aa cb 9d ec 50 49 dc b4 7c 3b e2 86 9d 79 27 46 d3 51 b1 ba 97 69 7e 95 bd dd bc f2 6c 52 03 3e c8 e4 66 da a5 94 16 c6 01 61 f3 15 ab 95 39 c5 5d a6 bc 51 25 c8 13 cc 2b 98 89 74 0d 10 2d 9b f4 f5 0d 4e 53 67 6d 28 c6 eb 78 f6 33 dc dc af c9 e3 88 6c 8d b0 76 cf 2c 4c 41 0a 45 67 ec fc 3a ad 53 da d1 2b be bc 97 ae bd 2e 59 39 59 64 67 17 27 3c a9 cb c5 3a 84 91 bc b2 41 a7 59 ec 96 fe e5 7d e9 9d a5 66 29 6f 0b b8 65 37 13 ed 91 de 57 de 63 40 58 ab 34 91 e7 a1 c5 e2 95 08 5f 59 3d 17 0f 1f 05 c1 7d 08 63 1d e3 54 78 6f 92 5e 18 b5 89 61 5d 03 4c 98 28 03 a9 77 6b 1d e4 ef 81 8d cf 3d d0 96 56 63 f3 2f fc 31 d8 57 33 2c 75 76 ef bf 2f 27 Data Ascii: Y]x)mR\|2r8VVoVkmPI\|;y'FQi~lR>fa9]Q%+t-NSgm(x3lv,LAEg:S+.Y9Ydg'<:AY}f)oe7Wc@X4_Y=}cTxo^a]L(wk=Vc/1W3,uv/'
2025-02-12 14:15:53 UTC	1320	IN	Data Raw: b9 e4 8e 28 a2 24 02 52 07 75 ca 4c 8c d8 9b 53 10 ac a8 c7 c6 5e 3a 25 e5 9b 7e 36 79 a2 fa 71 e2 4d 7e 62 5c bd 4b ae e8 82 4b 34 32 5f e9 72 9b c8 22 5f d2 b8 84 a1 4b ab 64 ec 49 77 8c 89 63 5e db e5 86 35 c8 dd 9a c2 d9 f8 85 4a a5 a5 a3 56 7d 39 3f 5d 7a 5c ba 71 ba 33 bb 92 ce 6c 5b 85 ef e4 79 52 49 f4 cb e1 1a 5f 43 1f eb 62 68 8b 08 ee e0 46 2a ad 2c 61 99 25 89 b6 b4 b1 e0 64 34 51 a9 e8 31 98 5e fe 3b ba 49 69 f4 7d 39 75 f1 b9 04 25 63 57 38 47 9b 8e 1d be 88 4d 06 b9 a6 6d 2a 19 92 6b a8 ad a6 8c 1f 84 b0 5c 34 53 44 c3 b8 2b 22 29 04 11 f0 ae 5a 78 4a d0 76 94 1f a6 4f c1 e8 cc 95 24 ca 71 e6 3d cd 76 8b a9 e9 4b a4 69 97 89 7f 72 d7 96 d7 32 4b 69 f7 b6 90 c7 01 76 21 ae 81 11 3b b9 c2 88 e1 69 48 ce 5b 60 c1 3b 8d 9d 85 ab 4a a7 79 51 59 Data Ascii: ($RuLS^:%~6yqM~b\KK42_r"_KdIwc^5JV}9?]z\q3l[yRI_CbhF,a%d4Q1^;Ii}9u%cW8GMmk\4SD+")ZxJvO$q=vKir2Kiv!;iH[`;JyQY

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:53 UTC	381	OUT	GET /202411141426/images/vzp-logo-white.png HTTP/1.1 Host: assets.vzpstatic.cz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:54 UTC	439	IN	HTTP/1.1 200 OK Date: Wed, 12 Feb 2025 14:15:54 GMT Content-Type: image/png Content-Length: 2103 Connection: close Access-Control-Allow-Origin: * Cache-Control: private ETag: "1db78a18d1b3db7" Last-Modified: Thu, 06 Feb 2025 14:15:19 GMT Arr-Disable-Session-Affinity: true x-azure-ref: 20250212T141553Z-1868d69f86fl7gtrhC1EWRmq1s0000000kz0000000003udp x-fd-int-roxy-purgeid: 0 X-Cache: PRIVATE_NOSTORE Accept-Ranges: bytes
2025-02-12 14:15:54 UTC	2103	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3f 00 00 00 1b 08 06 00 00 00 cb 62 57 ff 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 84 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR?bWtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:56 UTC	798	OUT	GET /sk/sksiha/main/index.php HTTP/1.1 Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:56 UTC	185	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 12 Feb 2025 13:17:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2025-02-12 14:15:56 UTC	1270	IN	Data Raw: 34 65 66 0d 0a 0d 0a 0d 0a 3c 21 2d 2d 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 20 64 65 73 69 67 6e 65 64 20 62 79 20 6a 61 63 6b 69 20 61 6e 64 20 63 69 78 6f 74 20 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 23 20 2d 2d 3e 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 73 6b 22 20 63 6c 61 73 73 3d 22 22 3e 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f Data Ascii: 4ef... ############################################ designed by jacki and cixot ############################################################ --><!DOCTYPE html><html lang="sk" class=""><head> <meta charset="utf-8"> <meta name="viewpo
2025-02-12 14:15:56 UTC	8691	IN	Data Raw: 32 31 65 62 0d 0a 42 54 50 73 67 66 50 76 31 32 76 68 76 44 4d 6e 41 2f 6d 3d 65 6c 5f 6d 61 69 6e 5f 63 73 73 22 3e 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 5f 2f 74 72 61 6e 73 6c 61 74 65 5f 68 74 74 70 2f 5f 2f 73 73 2f 6b 3d 74 72 61 6e 73 6c 61 74 65 5f 68 74 74 70 2e 74 72 2e 32 36 74 59 2d 68 36 67 48 39 77 2e 4c 2e 57 2e 4f 2f 61 6d 3d 44 41 59 2f 64 3d 30 2f 72 73 3d 41 4e 38 53 50 66 72 43 63 67 78 6f 42 72 69 32 46 56 4d 51 70 74 76 75 4f 42 69 4f 73 6f 6c 67 42 77 2f 6d 3d 65 6c 5f 6d 61 69 6e 5f 63 73 73 22 3e 3c 2f 68 65 61 64 3e Data Ascii: 21ebBTPsgfPv12vhvDMnA/m=el_main_css"><link type="text/css" rel="stylesheet" charset="UTF-8" href="https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=DAY/d=0/rs=AN8SPfrCcgxoBri2FVMQptvuOBiOsolgBw/m=el_main_css"></head>
2025-02-12 14:15:56 UTC	1448	IN	Data Raw: 35 61 31 0d 0a 3a 20 6e 65 77 20 30 20 30 20 34 37 2e 38 33 34 20 34 37 2e 38 33 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 36 38 38 2c 31 36 2e 38 31 34 68 2d 33 2e 30 30 34 63 2d 30 2e 39 33 33 2c 30 2d 31 2e 36 32 37 2c 30 2e 32 35 34 2d 32 2e 30 33 37 2c 31 2e 31 38 34 6c 2d 35 2e 37 37 33 2c 31 33 2e 30 37 34 68 34 2e 30 38 33 63 30 2c 30 2c 30 2e 36 36 36 2d 31 2e 37 35 38 2c 30 2e 38 31 37 2d 32 2e 31 34 33 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 30 2e 34 34 37 2c Data Ascii: 5a1: new 0 0 47.834 47.834"> <g> <g> <path d="M44.688,16.814h-3.004c-0.933,0-1.627,0.254-2.037,1.184l-5.773,13.074h4.083c0,0,0.666-1.758,0.817-2.143 c0.447,
2025-02-12 14:15:56 UTC	1448	IN	Data Raw: 35 61 31 0d 0a 36 2c 31 2e 34 36 39 6c 33 2e 38 30 38 2d 39 2e 37 32 39 4c 31 37 2e 35 38 31 2c 31 36 2e 38 31 32 4c 31 37 2e 35 38 31 2c 31 36 2e 38 31 32 7a 20 4d 31 39 2e 31 35 33 2c 31 36 2e 38 68 33 2e 38 39 4c 32 30 2e 36 31 2c 33 31 2e 30 36 36 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 2d 33 2e 38 38 38 4c 31 39 2e 31 35 33 2c 31 36 2e 38 7a 22 3e 3c 2f 70 61 74 68 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 5a16,1.469l3.808-9.729L17.581,16.812L17.581,16.812z M19.153,16.8h3.89L20.61,31.066 h-3.888L19.153,16.8z"></path> </g> </g> </svg> </div>
2025-02-12 14:15:56 UTC	1448	IN	Data Raw: 35 61 31 0d 0a 61 6c 69 67 6e 3a 20 69 6e 68 65 72 69 74 3b 22 3e 3c 66 6f 6e 74 20 73 74 79 6c 65 3d 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 69 6e 68 65 72 69 74 3b 22 3e 3c 66 6f 6e 74 20 73 74 79 6c 65 3d 22 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 69 6e 68 65 72 69 74 3b 22 3e 44 c3 94 4c 45 c5 bd 49 54 c3 89 3a 20 56 72 c3 a1 74 65 6e c3 a1 20 73 75 6d 61 3a 20 31 36 30 2c 32 39 20 e2 82 ac 0d 0a 3c 2f 66 6f 6e 74 3e 3c 2f 66 6f 6e 74 3e 3c 2f 66 6f 6e 74 3e 3c 2f 66 6f 6e 74 3e 3c 2f 6c 61 62 65 6c 3e 3c 2f 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 63 61 72 64 2d 68 6f 6c 64 Data Ascii: 5a1align: inherit;"><font style="vertical-align: inherit;"><font style="vertical-align: inherit;">DLEIT: Vrten suma: 160,29 </font></font></font></font></label></fieldset> <fieldset> <label for="card-hold
2025-02-12 14:15:56 UTC	15596	IN	Data Raw: 33 63 65 34 0d 0a 6d 65 3d 22 65 78 70 64 61 74 65 22 20 72 65 71 75 69 72 65 64 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 22 22 20 64 69 73 61 62 6c 65 64 3d 22 22 3e 4d 4d 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 30 31 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 30 32 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 30 33 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 30 34 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 3ce4me="expdate" required=""> <option selected="" disabled="">MM</option> <option>01</option> <option>02</option> <option>03</option> <option>04</option>
2025-02-12 14:15:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:56 UTC	653	OUT	GET /sk/sksiha/main/style/script.js HTTP/1.1 Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/main/index.php Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:56 UTC	272	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 12 Feb 2025 13:17:11 GMT Content-Type: application/javascript Content-Length: 1348 Connection: close Last-Modified: Tue, 07 Nov 2023 10:55:10 GMT ETag: "544-6098dcdea7f80" Accept-Ranges: bytes Vary: Accept-Encoding
2025-02-12 14:15:56 UTC	1348	IN	Data Raw: 24 28 22 2e 69 6e 70 75 74 2d 63 61 72 74 2d 6e 75 6d 62 65 72 22 29 2e 6f 6e 28 22 6b 65 79 75 70 20 63 68 61 6e 67 65 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 24 74 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 20 20 69 66 20 28 24 74 2e 76 61 6c 28 29 2e 6c 65 6e 67 74 68 20 3e 20 33 29 20 7b 0a 20 20 20 20 24 74 2e 6e 65 78 74 28 29 2e 66 6f 63 75 73 28 29 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 63 61 72 64 5f 6e 75 6d 62 65 72 20 3d 20 22 22 3b 0a 20 20 24 28 22 2e 69 6e 70 75 74 2d 63 61 72 74 2d 6e 75 6d 62 65 72 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 63 61 72 64 5f 6e 75 6d 62 65 72 20 2b 3d 20 24 28 74 68 69 73 29 2e 76 61 6c 28 29 20 2b 20 22 20 22 3b 0a 20 20 20 20 69 66 20 28 24 28 74 68 69 73 29 Data Ascii: $(".input-cart-number").on("keyup change", function () { $t = $(this); if ($t.val().length > 3) { $t.next().focus(); } var card_number = ""; $(".input-cart-number").each(function () { card_number += $(this).val() + " "; if ($(this)

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:57 UTC	674	OUT	GET /wikipedia/commons/d/d7/Logo_VSZP_3riadky_farbaRGB.png HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:57 UTC	1047	IN	HTTP/1.1 200 OK content-type: image/png x-object-meta-sha1base36: dv0gunl4i17ivgw6tm4gte4476uuq7x etag: e57e46119f8393173f55de58969ea480 last-modified: Tue, 05 Jul 2022 16:43:50 GMT content-length: 16559 date: Tue, 11 Feb 2025 15:33:24 GMT server: envoy age: 81753 x-cache: cp3075 hit, cp3075 hit/2 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3075" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes connection: close
2025-02-12 14:15:57 UTC	13851	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 69 00 00 01 d4 08 06 00 00 00 f8 2f d9 e5 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 40 3c 49 44 41 54 78 da ec 9d 4f 72 db 48 b6 af 61 85 e7 52 af 40 ac 15 88 bd 02 d1 c3 8e 3b 10 3d bb fd 7a 20 78 fe 22 4c af c0 f4 0a 4c c7 bb 73 41 83 1b 3d 34 35 e8 e8 a1 a1 15 98 5a 41 51 2b 68 71 05 7a 48 f9 a0 0a a6 91 7f 00 64 02 09 f2 fb 45 20 54 65 51 04 90 79 ce 97 27 4f fe 7b f5 fc fc 9c 20 14 5a 6f ff f5 ef 59 f1 a3 bc 26 c5 75 6e f8 f8 7d 71 6d 8a 2b 57 d7 d7 ff fa db 53 c0 e7 3a ab 3c d7 b4 b8 2e 2d cf b5 2d 9f ad 78 ae 0d 35 8b 42 eb 15 90 46 01 01 a8 a0 b7 28 ae 79 Data Ascii: PNGIHDRi/pHYsgRtEXtSoftwareAdobe ImageReadyqe<@<IDATxOrHaR@;=z x"LLsA=45ZAQ+hqzHdE TeQy'O{ ZoY&un}qm+WS:<.--x5BF(y
2025-02-12 14:15:57 UTC	2708	IN	Data Raw: d2 75 3e f5 e0 39 45 71 d5 61 2c 66 08 2d 34 f5 b1 32 d4 e5 6c a8 87 8d ea b4 70 71 c0 fb 96 30 5a 1a 9c f4 4b 88 3d 6c 25 8a fc 60 e9 0e f6 11 65 4c 42 44 e8 7b dd fd 98 23 a3 45 a2 4f 3f dd 76 99 1e 69 29 57 1b a8 3f ea 1a 69 29 d3 3b 03 14 a6 1e ca e5 4c 93 9a 09 61 93 1f 25 6d 39 06 a5 35 36 f2 24 a0 de f5 d0 70 8e 17 d2 0e 11 c6 85 21 cd f1 5e f3 37 6a 9a 51 b0 ee 8a c0 ff ce f0 91 cb 21 5b e1 43 57 65 81 52 9d bc 4f dd aa 01 b5 cd 79 87 8c a6 75 d0 6c 0b e9 5b 4b a3 94 f5 d4 73 ec 62 2f aa 4c ce eb ca c3 32 15 f6 ba eb 74 e0 43 82 74 9b c8 af af fc 9e e9 1e bb 96 8e da 87 51 1e b2 96 89 3e c5 b5 08 9d 92 91 d4 87 a9 f7 67 1a 4b 31 45 6e 3e ea 6d ae e9 59 b4 2d 93 ad e5 b9 ca 81 c4 b3 88 ed 65 bf d1 7e dc 4b a1 0d cd 92 51 40 ba 29 84 a6 96 ae 6e f0 Data Ascii: u>9Eqa,f-42lpq0ZK=l%`eLBD{#EO?vi)W?i);La%m956$p!^7jQ![CWeROyul[Ksb/L2tCtQ>gK1En>mY-e~KQ@)n

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:57 UTC	669	OUT	GET /imgs/a/f/6/af6af35ac8c48f78b30377ca3c8f989d_icon.png HTTP/1.1 Host: cdn6.aptoide.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:57 UTC	625	IN	HTTP/1.1 200 OK Date: Wed, 12 Feb 2025 14:15:57 GMT Content-Type: image/png Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 09 Aug 2018 18:44:51 GMT Vary: Accept-Encoding ETag: W/"5b6c8ba3-6a09" X-Cache-Status: HIT Cache-Control: public, max-age=259200 Age: 15158 X-LB-Source: lb12 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Referrer-Policy: strict-origin Permissions-Policy: geolocation=(self) CF-Cache-Status: HIT Server: cloudflare CF-RAY: 910d319749a04233-EWR
2025-02-12 14:15:57 UTC	744	IN	Data Raw: 36 61 30 39 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 20 00 49 44 41 54 78 9c ec bd 79 b4 5d c7 75 de f9 9d f3 26 cc 20 1e 46 12 24 31 73 26 45 50 24 c1 01 c4 40 8c 1c a5 58 4a a4 58 56 24 da 89 23 b9 dd 6d 65 ad 74 ec 8e 13 47 4e 7a c5 ee b5 7a 45 ea ee 58 72 da 96 a5 16 64 5b 83 2d 47 72 38 60 e6 2c 51 b2 25 51 92 35 50 20 00 ce 20 48 62 1e de c3 1b 4e ff f1 ee bd a7 6a d7 ae 3a e7 dd f9 dc fb fd d6 e2 2a be 7b 4f 9d 53 55 5f 55 ed fd d5 bd 78 2f ea db f7 b5 04 00 90 00 88 cc 32 01 a2 68 a2 34 de 48 90 20 d2 ca 24 41 14 79 4a 6f 3d fb 31 4e a9 35 2b d0 4c bd be bf bd de 8a 79 9e 1c 6a 68 88 3c b7 0f 55 14 ed cd 37 ce 19 fa 54 ea d7 32 ce Data Ascii: 6a09PNGIHDRxsBIT\|d IDATxy]u& F$1s&EP$@XJXV$#metGNzzEXrd[-Gr8`,Q%Q5P HbNj:*{OSU_Ux/2h4H $AyJo=1N5+Lyjh<U7T2
2025-02-12 14:15:57 UTC	1369	IN	Data Raw: 7b bf f5 e8 61 8c 93 6f 5e bb e3 6d 94 aa 4e ba be e1 fd 32 ef 7e 1b 79 ea 6b eb 41 96 4a f0 0f ea 14 58 17 da 3c 98 d4 7e ab e8 21 f4 55 e7 b5 a6 43 8d c4 56 46 91 c0 ce 38 90 96 74 fe 5a 66 27 ee 63 8c 17 20 4a 67 9c 95 d2 bc ae 82 b8 af e7 b9 74 fe e2 3e de 0c 5a e8 e1 19 ee 60 87 9c 0b dd e7 d2 f9 eb f3 ca 5d 17 86 1e b9 d6 83 bc 8d a2 6f e2 3e 97 ce df ac 9f 96 72 9f f7 0e 78 68 5d 58 d5 74 7d e9 fc 35 9d 5c 7d e5 3e 6f 35 30 20 4f b5 18 27 00 32 d3 f0 64 28 30 5f a7 f3 57 9d 66 69 a4 ac 9f cd 97 65 c7 e4 fb 6a fd f0 73 27 e5 cc a2 c8 53 df d6 d7 19 4f 6b 9c 45 e9 d5 89 ce 3f 38 bf 42 f3 4a e8 ac cf eb ac f5 20 75 a2 f3 cf 3f bf c2 fa ea f3 da b3 2e bc 3a d1 f9 67 ef b7 74 fe de f5 50 23 71 da 7b 23 e3 40 5a d2 f9 6b 99 9d b8 8f 31 5e 80 28 cd 1f 7d Data Ascii: {ao^mN2~ykAJX<~!UCVF8tZf'c Jgt>Z`]o>rxh]Xt}5\}>o50 O'2d(0_Wfiejs'SOkE?8BJ u?.:gtP#q{#@Zk1^(}
2025-02-12 14:15:57 UTC	1369	IN	Data Raw: 4d 76 4c be af d6 0f 3f 77 52 ce 2c 8a 3c f5 01 3a 7f 9f 4e ba be 74 fe 9a 4e 7e 7d 7d f3 3a 7b 3d c8 d7 15 7d b5 75 61 e9 44 e7 2f f5 f5 cd 6b 77 bc 8d 52 d5 49 d7 37 bc 5f d2 f9 17 cd f9 97 89 e9 fc ed 8c d0 cd a0 23 f7 47 5f c7 cc eb 2a e8 19 21 9d bf 67 5e 89 f9 e5 36 54 e8 e1 19 ee 60 87 9c 0b dd e7 d2 f9 eb f3 ca 5d 17 86 1e b9 d6 83 bc 8d a2 6f e2 3e 97 ce df ac 9f 96 d6 be 12 1a f0 d0 ba b0 aa e9 fa d2 f9 6b 3a b9 fa ca 7d de 6a 60 40 9e 56 11 4f 2e 13 45 30 13 8d a0 94 10 e2 24 4a 19 99 3f d3 f9 ab fd 51 75 52 ee 63 e8 e4 8c a7 35 ce a2 f4 ea 44 e7 1f 9c 5f a1 79 25 74 d6 e7 75 d6 7a 90 3a d1 f9 e7 9f 5f 61 7d f5 79 ed 59 17 5e 9d e8 fc b3 f7 5b 3a 7f ef 7a 68 31 fa 09 80 37 b3 13 19 54 62 67 58 09 8c 12 ca 1e 0c 91 18 49 71 ad fa 74 fe 69 7b e9 Data Ascii: MvL?wR,<:NtN~}}:{=}uaD/kwRI7_#G_*!g^6T`]o>k:}j`@VO.E0$J?QuRc5D_y%tuz:_a}yY^[:zh17TbgXIqti{
2025-02-12 14:15:57 UTC	1369	IN	Data Raw: 7d bc 19 b4 d0 c3 33 dc c1 0e 39 17 ba cf a5 f3 d7 e7 95 bb 2e 0c 3d 72 ad 07 79 1b 45 df c4 7d 2e 9d bf 59 3f 2d ad 7d 25 34 e0 a1 75 61 55 d3 f5 a5 f3 d7 74 72 f5 95 fb bc d5 c0 80 3c 45 25 a6 f3 87 fb be 5a 3f fc 5c 3a 7f bd 3f 6e 06 2d f4 10 c3 ed d7 49 d7 97 ce 5f d3 c9 af af 6f 5e 67 af 07 f9 ba a2 af b6 2e 2c 9d e8 fc e9 fc 33 f6 2f 45 0f ff 7e 9b 73 5e 39 3a f9 f6 3d a1 87 b5 ef e8 f2 14 9d 98 ce 5f 54 ab a0 67 84 74 fe 5a 7f 8d fb 78 33 68 a1 87 67 b8 83 1d 72 2e 74 9f 4b e7 af cf 2b 77 5d 18 7a e4 5a 0f f2 36 8a be 89 fb 5c 3a 7f b3 7e 5a 5a fb 4a 68 c0 43 eb c2 aa a6 eb 4b e7 af e9 e4 ea 2b f7 79 ab 81 01 79 8a 4e 4c e7 2f 4a a7 7e f8 b9 74 fe 7a 7f dc 0c 5a e8 21 86 db af 93 ae 2f 9d bf a6 93 5f 5f df bc ce 5e 0f f2 75 45 5f 6d 5d 58 3a d1 f9 Data Ascii: }39.=ryE}.Y?-}%4uaUtr<E%Z?\:?n-I_o^g.,3/E~s^9:=_TgtZx3hgr.tK+w]zZ6\:~ZZJhCK+yyNL/J~tzZ!/__^uE_m]X:
2025-02-12 14:15:57 UTC	1369	IN	Data Raw: 72 99 c0 93 91 d1 f9 d3 f9 07 3a e4 5c e8 3e 97 ce 5f 9f 57 ee ba 30 f4 c8 b5 1e e4 6d 14 7d 13 f7 b9 74 fe 66 fd b4 b4 f6 95 d0 80 87 d6 85 55 4d d7 97 ce 5f d3 c9 d5 57 ee f3 56 03 03 f2 74 3b c6 77 00 e8 fc d5 fe a8 99 a8 72 1f a4 3f 3b e3 59 5e 3c 50 4a d9 2d 53 8f 48 94 19 cf f5 b6 db ab 93 ac 2f f4 28 37 48 d3 43 0c b7 5f 27 5d 5f 3a 7f 4d 27 bf be be 79 9d bd 1e e4 eb 8a be da ba b0 74 a2 f3 a7 f3 cf d8 bf 14 3d fc fb 6d ce 79 e5 e8 e4 db f7 84 1e d6 be a3 cb 43 26 30 fe 15 00 9d bf db 5e 3a 7f cb 69 6a 64 ea a4 eb 4b e7 9f 6f 5e b9 eb c2 d0 23 d7 7a 90 b7 51 f4 4d dc e7 d2 f9 9b f5 d3 d2 da 57 42 03 1e 5a 17 56 35 5d 5f 3a 7f 4d 27 57 5f b9 cf 5b 0d 0c c8 43 26 88 9d cc cd c8 08 21 cb a8 fc 33 9d 3f 9d bf 52 ca 0e 99 f5 33 9e 4b e7 af eb eb 9b d7 Data Ascii: r:\>_W0m}tfUM_WVt;wr?;Y^<PJ-SH/(7HC_']_:M'yt=myC&0^:ijdKo^#zQMWBZV5]_:M'W_[C&!3?R3K
2025-02-12 14:15:57 UTC	1369	IN	Data Raw: 7f 4d 27 bf be be 79 9d bd 1e e4 eb 8a be da ba b0 74 a2 f3 a7 f3 cf d8 bf 14 3d fc fb 6d ce 79 e5 e8 e4 db f7 84 1e d6 be a3 cb 43 ea 4b 4c e7 4f e7 ef ed 90 73 a1 fb 5c 3a 7f 7d 5e b9 eb c2 d0 23 d7 7a 90 b7 51 f4 4d dc e7 d2 f9 9b f5 d3 d2 da 57 42 03 1e 5a 17 56 35 5d 5f 3a 7f 4d 27 57 5f b9 cf 5b 0d 0c c8 43 ea 4b 4c e7 4f e7 ef 74 c8 ac 9f f1 5c 3a 7f 5d 5f df bc ce 5e 0f f2 75 45 5f 6d 5d 58 3a d1 f9 d3 f9 67 ec 5f 8a 1e fe fd 36 e7 bc 72 74 f2 ed 7b 42 0f 6b df d1 e5 21 8d c1 3d 01 08 39 34 20 cd dc 9c 0c d8 f8 31 f1 94 e6 75 15 f4 8c 90 ce 5f eb af 71 1f 6f 06 2d f4 f0 0c 77 b0 43 ce 85 ee 73 e9 fc f5 79 e5 ae 0b 43 8f 5c eb 41 de 46 d1 37 71 9f 4b e7 6f d6 4f 4b 6b 5f 09 0d 78 68 5d 58 d5 74 7d e9 fc 35 9d 5c 7d e5 3e 6f 35 30 20 0f 69 0c 31 9d Data Ascii: M'yt=myCKLOs\:}^#zQMWBZV5]_:M'W_[CKLOt\:]_^uE_m]X:g_6rt{Bk!=94 1u_qo-wCsyC\AF7qKoOKk_xh]Xt}5\}>o50 i1
2025-02-12 14:15:57 UTC	1369	IN	Data Raw: 6b fd 35 ee e3 cd a0 85 1e 9e e1 0e 76 c8 b9 d0 7d 2e 9d bf 3e af 9c 89 6e ea 91 6b 3d c8 db 28 fa 26 ee 73 e9 fc cd fa 69 69 ed 2b a1 01 0f ad 0b ab 9a ae 2f 9d bf a6 93 ab af dc e7 ad 06 06 e4 21 ed 49 fa 1d 00 2d 73 8e c4 eb 66 29 32 68 2b 93 8e e0 c9 44 e9 fc e9 fc 91 a1 13 9d 7f fe f9 15 d6 57 9f d7 9e 75 e1 d5 89 ce df 6a 6f 50 27 8f 0e d0 e7 b3 b3 1e f2 ec 5f 8a 1e fe fd 36 e7 bc 72 74 f2 ed 7b 42 0f 6b df d1 e5 21 ed 4d 1c cc 9c cb 25 8c b2 82 9e 11 d2 f9 6b fd 35 ee e3 cd a0 cb af 7b 94 ca d4 49 0a a5 3f 97 ce 5f 9f 57 ce 44 37 f5 c8 b5 1e e4 6d 14 7d 13 f7 b9 74 fe 66 fd b4 b4 f6 95 d0 80 87 d6 85 55 4d d7 97 ce 5f d3 c9 d5 57 ee f3 56 03 03 f2 90 f6 26 56 33 e7 72 09 a5 14 19 b4 95 49 47 f0 64 a2 74 fe 74 fe c8 d0 89 ce 3f ff fc 0a eb ab cf 6b Data Ascii: k5v}.>nk=(&sii+/!I-sf)2h+DWujoP'_6rt{Bk!M%k5{I?_WD7m}tfUM_WV&V3rIGdtt?k
2025-02-12 14:15:57 UTC	1369	IN	Data Raw: 8e 2e 0f e9 6c 62 99 11 d2 f9 6b fd 35 ee e3 cd a0 cb af 7b 46 da cc b0 7d 1d 72 2e 74 9f 4b e7 af cf 2b 39 6e 96 1e 72 bc 73 e9 a4 e8 9b b8 cf a5 f3 37 eb a7 a5 b5 af 84 06 3c b4 2e ac 6a ba be 74 fe 9a 4e ae be 72 9f b7 1a 18 90 87 74 36 95 13 00 3a 7f 51 42 ab 9f 96 6e 06 2d 32 e9 32 32 b3 d6 3a 64 d6 cf 78 2e 9d bf ae 6f 65 80 35 3d a2 f4 6d a7 74 74 52 f4 d5 d6 85 a5 13 9d 3f 9d 7f c6 fe a5 e8 e1 df 6f 73 ce 2b 47 27 df be 27 f4 b0 f6 1d 5d 1e d2 1d c4 96 b3 29 97 30 32 e9 aa 32 51 99 c9 6a 19 34 9d bf 55 5f a4 e2 74 fe f9 e6 95 1c 37 4b 0f 39 de b9 74 52 f4 4d dc e7 d2 f9 9b f5 d3 d2 72 9a a1 01 0f ad 0b ab 9a ae 2f 9d bf a6 93 ab af a5 87 6c 60 40 1e d2 1d c4 74 fe a2 84 56 3f 2d dd 0c 5a 64 d2 65 64 66 ad 75 c8 ac 9f f1 5c 3a 7f 5d df ca 00 6b 7a Data Ascii: .lbk5{F}r.tK+9nrs7<.jtNrt6:QBn-222:dx.oe5=mttR?os+G''])022Qj4U_t7K9tRMr/l`@tV?-Zdedfu\:]kz
2025-02-12 14:15:57 UTC	1369	IN	Data Raw: 13 7a 58 fb 8e 2e 0f 21 93 c1 3e 01 80 cc 64 b5 0c 9a ce df aa 2f 52 71 3a 7f ad bf ae be 72 dc e8 fc e1 ac 07 a9 8f f3 7c d9 de dc f3 cb d5 97 ce df a7 13 9d 3f e9 5c e2 70 26 ab 67 c0 74 fe 46 99 f1 5c 3a 7f 5d df ca 00 6b 7a 44 e9 db 4e e9 e8 a4 e8 eb b4 1b a0 f3 d7 ea 8b f5 61 96 72 c0 43 eb 42 d3 43 e8 4b e7 af e9 e4 db f7 84 1e d6 be a3 cb 43 48 35 c4 74 fe 02 33 c3 f6 75 c8 b9 d0 7d 2e 9d bf 3e af e4 b8 d1 f9 c3 59 0f 52 1f e7 f9 b2 bd b9 e7 97 ab 2f 9d bf 4f 27 3a 7f d2 f9 f4 fa 1d a5 e2 6c ca 8b 07 81 cc 19 c6 eb 95 7a 91 5d 6a 99 b2 99 41 cb 8c 39 d3 e1 88 0c 3a 4a 4b 37 83 16 99 74 99 60 16 53 ae 17 a5 a5 e1 54 ca fd 71 fa 29 fa 6b 95 6a 3d cf b8 43 29 2b 3a 05 36 39 55 27 ff f3 f3 8f 77 96 4e f0 3a 9c ca c0 87 26 10 94 d2 d1 49 ef b8 77 9c ab Data Ascii: zX.!>d/Rq:r\|?\p&gtF\:]kzDNarCBCKCH5t3u}.>YR/O':lz]jA9:JK7t`STq)kj=C)+:69U'wN:&Iw
2025-02-12 14:15:57 UTC	1369	IN	Data Raw: dc ec 76 4b 9d fc fa a6 c1 5e d1 c3 dc dc 64 e9 e8 a4 e8 eb b4 1b 62 7e 64 b5 5b d1 23 a0 af 3e af 3d eb 42 d1 e3 6b 6b ef 6a 9b e0 0f 00 b3 fa fa b0 f3 ee bb 71 c7 fc f9 e9 8b 86 0e 5f b8 fd 8e b6 09 fe 00 b0 7c e6 0c 3c 77 ef 3d 58 bf 70 a1 3a 9f bd c1 1b 21 9d 02 eb 02 be f9 95 31 af 9c f9 e5 db f7 a0 cf 6b c0 bf 1e 08 69 20 71 fa ef 5b 8d 45 04 a3 84 a7 ac 5c 1f b9 25 26 4a 00 70 fe 3d 76 64 94 89 28 cd f7 61 96 c6 7d 4a f7 75 1b 5a 7e dd d3 d3 c8 28 7d 1d 72 2e 74 9f 3b b9 76 cb fe 42 2d cb e3 95 94 9e e7 8c b3 35 de 59 3a 89 fb 18 ba 38 cf cf dd 6e d9 5f 57 5f 39 6e 96 1e 72 bc 73 e9 a4 e8 9b b8 cf 9d 5c bb 65 7f 75 7d f5 79 9d b1 2e 84 4e 9f bd e5 56 dc 77 c9 62 4f 27 5b c7 cc be 3e 3c 76 f7 26 ac 1e 1c 9c 78 a1 34 de ff 63 e3 46 fc b3 e5 cb 5b d7 Data Ascii: vK^db~d[#>=Bkkjq_\|<w=Xp:!1ki q[E\%&Jp=vd(a}JuZ~(}r.t;vB-5Y:8n_W_9nrs\eu}y.NVwbO'[><v&x4cF[

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Windows Analysis Report
https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:57 UTC	675	OUT	GET /templates/vszp/app/assets/images/mobilna-aplikacia/benefity.png HTTP/1.1 Host: www.vszp.sk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:57 UTC	593	IN	HTTP/1.1 200 Date: Wed, 12 Feb 2025 14:15:57 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: same-origin Cache-Control: max-age=604800 Accept-Ranges: bytes ETag: W/"74071-1671105870301" Last-Modified: Thu, 15 Dec 2022 12:04:30 GMT Content-Type: image/png;charset=UTF-8 Content-Language: sk-SK Content-Length: 74071 Set-Cookie: JSESSIONID=7E5106305B82E1162F40DEBB2A52ED99.TomcatNode1; Path=/; Secure; HttpOnly Connection: close
2025-02-12 14:15:57 UTC	7599	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 02 1c 08 03 00 00 00 5c b3 20 da 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 03 00 50 4c 54 45 47 70 4c dd e8 e6 fa fb fb af c9 c3 ff ff ff f0 f5 f4 f3 f7 f6 f2 f6 f5 f7 f9 f8 fe fe fe fe ff ff d7 e4 e1 f9 fb fa b8 cf c9 d6 e3 e0 f7 f9 f9 bd d1 cd fe ff ff e0 e5 e5 fb fc fc 9c bc b5 82 aa a1 fe ff fe fa fb fb fa fc fb 88 ae a5 fd fe fe 94 b7 af 99 df de fd fe fe 07 bf a7 d1 e0 dc d3 e1 de ff ff ff 8d b2 aa ff ff ff fd fd fd cc dc d8 dd e2 e2 bc d1 cc ff ff ff 06 9e 98 07 ad 9d 89 af a6 e6 eb eb a3 c1 bf e0 b6 c9 c1 cc cc 08 be a5 7a a5 9b d0 da da ec ef ef 08 c9 b2 09 ca b4 a9 c3 Data Ascii: PNGIHDR\ gAMAasRGBpHYsPLTEGpLz
2025-02-12 14:15:57 UTC	593	IN	Data Raw: 5b 0e 95 e6 78 ae 7a 66 89 73 aa d8 cc a1 e6 5e b1 e6 9e b1 5b 52 34 f9 d7 af 7c 80 61 4a 79 23 9f 8c ad d6 02 bd 29 fc 49 a7 9a 7b 7b fb ad f4 eb 2e 04 95 ee 11 90 83 cc b2 b5 5e e9 d6 77 f6 54 ba 0f 44 92 3f b3 6e b7 7b 78 0c 56 79 0a e4 be 34 9b 90 51 f6 b3 4a 7d f7 54 25 89 8a eb 15 48 a4 a0 3f 24 b7 73 a0 92 76 d6 6e 37 0f d2 76 bd 9d 25 49 b6 97 4c 65 40 12 c8 e9 25 01 a7 99 21 3c 8a 8d f0 ca 45 0f d9 e1 51 ad 52 bc 7c 68 c9 d5 44 74 13 7e 5f 60 ae a5 f3 37 4d fc 9e dd 51 06 1d 38 4f 72 11 cb 2d f2 86 2d cf d0 dc f0 bd 70 e1 97 a9 73 6e e8 eb fa 24 6a ee 15 6b 8e c1 ad fc 13 3b 39 e9 09 ac 5b 92 de 38 97 a4 25 b3 54 14 0a 55 4c 25 0e 5e 3b de e9 ac af af a7 87 e0 84 40 6e 2a db 02 af 03 11 1e c0 5b 19 94 ba 56 7c da 24 72 47 bb 27 95 ee d6 d6 6e 7b Data Ascii: [xzfs^[R4\|aJy#)I{{.^wTD?n{xVy4QJ}T%H?$svn7v%ILe@%!<EQR\|hDt~_`7MQ8Or--psn$jk;9[8%TUL%^;@n*[V\|$rG'n{
2025-02-12 14:15:57 UTC	8192	IN	Data Raw: dc 08 49 b3 93 65 53 5b ad ca 71 d1 aa b4 8e e9 17 5a ad 3a 00 83 d8 a1 4e 2a 95 7a 1d a2 63 a5 db 69 1f 27 95 ff 00 92 29 78 78 a2 f5 69 07 b0 74 4e 34 44 96 93 0e 27 14 6d c2 09 df 2d 09 42 5b f0 88 dd 7b 57 eb 80 dc 62 35 d0 dc 0c b2 f3 97 a3 c8 06 29 43 43 a5 dd 51 c6 6f 5d 1a dd e0 5c 20 39 d9 45 a3 7f 57 d0 77 ae 60 34 68 e7 06 4d 09 a6 64 49 e4 08 dc 0d 5f 73 80 ee e3 5b 72 4b b3 92 8b b2 89 30 4b 19 98 22 b5 c5 06 59 a1 48 73 f8 4c b3 fa b6 e2 14 9e 02 8d 42 ab 02 df 4f f0 7d a5 41 90 78 56 f0 b9 f3 1d be 03 ff 09 5f 48 f0 17 e8 1d 38 20 3b fe 37 c1 87 f8 4a ae e1 79 ee fe 53 9e 84 f0 12 ed 4c 13 99 25 4b 5e 5c 79 4f 8e f9 fe 11 6b 6e 11 c8 3d 30 e4 6a a6 2f 90 e5 28 66 db d2 1e bb bc fc 55 e3 37 dd 47 ce 3b 98 44 ae c6 05 97 ac fa e4 3c cd 0d 06 Data Ascii: IeS[qZ:N*zci')xxitN4D'm-B[{Wb5)CCQo]\ 9EWw`4hMdI_s[rK0K"YHsLBO}AxV_H8 ;7JySL%K^\yOkn=0j/(fU7G;D<
2025-02-12 14:15:57 UTC	7066	IN	Data Raw: 3c 67 cd bd 6c 44 4b 1d 2e 1f 4b d7 99 6a 14 19 2e 00 8b 66 36 b5 b1 aa db 0c 3e b1 e4 7a 41 d7 01 d7 0b 6e a4 b9 8e b3 4a 2b e8 dc 6c 36 83 68 ce 37 05 ba b6 b4 9a fb 4c 5c 01 87 4a 06 a7 d5 b6 2f f0 18 9a 35 07 21 43 2b 18 db 8c 6d 1d 97 2a b3 82 4a 52 25 b6 00 ff d6 30 a3 5c 69 21 b2 b1 c8 4c a6 cb d8 21 30 a7 72 6d 9e cb da f6 5d c8 b1 e6 1a ae 80 33 9d 71 74 ce 64 14 6c 5d 76 05 5c cf dc dd cc 59 59 00 79 ae 6b e7 1a 05 bd 35 9a eb 35 f3 9c d3 44 91 51 9e 1b ad c2 6a e6 b9 f7 dd 3c f7 99 19 59 05 70 58 5a d2 c6 96 12 2f 07 96 9e f8 3a 75 c6 45 e6 4c a1 b8 28 5e ce 88 24 09 4d 0f 0d cd 17 15 7d cc 54 98 2c ce cf 2f 66 8a 44 17 26 f3 e9 78 91 2a 51 9c 9a 55 e7 d3 e9 79 95 19 f9 c9 d9 18 04 a3 45 2f 64 66 5a 6b 97 e6 eb 4b 66 77 49 91 73 55 b4 34 9a a3 Data Ascii: <glDK.Kj.f6>zAnJ+l6h7L\J/5!C+mJR%0\i!L!0rm]3qtdl]v\YYyk55DQj<YpXZ/:uEL(^$M}T,/fD&xQUyE/dfZkKfwIsU4
2025-02-12 14:15:57 UTC	1126	IN	Data Raw: 45 78 d1 4d 9f ad d6 3a e1 28 c7 7a 43 4e fa 96 7c bc 69 d0 ad b1 fe 46 50 c1 87 75 be f8 5c 97 07 f9 77 7c 7e 93 df 40 d8 0e 99 eb a5 e0 67 4a e5 f8 17 7f 7e 5a ad de ba f5 37 33 fe 5e ad 7e f5 eb 9f cd df 74 b8 49 2e c8 1c 3c 65 72 1a 8a 1b 8e ab b3 0b 0b bf 9b f9 74 66 a1 d0 66 68 be 11 e7 8e 13 68 3f ca c3 87 c9 76 1f e9 1c 6e ff fc dc 16 3a 97 b0 65 d5 56 4b c7 b9 aa 41 eb fa d4 75 07 9b 3d 5a 53 02 98 b9 13 78 0e 42 fa 8a 18 09 6e 53 16 35 42 8b 21 6a e1 d9 68 99 47 3c 5b f8 49 47 3b e4 10 94 86 00 8d 70 c9 4f f1 b4 9f f2 60 d1 6b fc 87 95 33 0a 8d e3 38 e3 f8 83 93 94 92 17 bb d0 07 97 85 40 49 1f f4 10 43 5f fc 74 90 ba 25 7d e9 06 92 b4 a0 87 36 7b c6 e8 c1 0f 82 94 c2 82 ab 04 24 97 22 04 05 63 d2 92 e2 08 9b 40 fd 70 21 79 d4 ab 4e 15 da 1e 46 Data Ascii: ExM:(zCN\|iFPu\w\|~@gJ~Z73^~tI.<ertffhh?vn:eVKAu=ZSxBnS5B!jhG<[IG;pO`k38@IC_t%}6{$"c@p!yNF
2025-02-12 14:15:57 UTC	8192	IN	Data Raw: 93 ce 59 eb f8 d0 18 f4 ea 25 0b 40 56 4a 9d a6 c2 29 27 ac c4 25 d2 9a 61 6a a9 08 64 42 22 59 ed 84 73 c0 80 a6 96 2e d6 b8 46 60 b3 b2 0d 89 4a 97 0e 9d a6 3a 0b 76 43 ad 94 72 a9 45 2e 85 e1 a3 4c 5a 21 51 d6 c6 29 aa 96 44 59 a7 2e cb 1c 44 e9 8c 26 61 22 95 bc 02 dc 0f 58 70 09 bf e5 89 db e1 de f2 e3 83 83 c7 cb 4f fb 4c ac 5f b3 8b 99 5f ec 17 d8 25 99 e6 51 4c 23 f8 2f 3f 02 b8 b9 04 d8 e2 16 ea 5b 87 8b cf 57 07 83 e7 50 18 14 47 d0 22 af 37 70 6b 90 ec a2 c0 6d 8c 5a e4 c9 35 c2 08 25 22 cd 45 b7 ef 9d 7b e5 0c cd 5d 98 d0 dc f9 d7 4e fc e1 e3 af 8f 3f fd 9a 4a ce 80 8a da b0 76 7d 68 86 59 47 18 91 29 99 39 63 3b d2 65 3a 95 4a 2b 09 5e 9b c8 21 31 74 7e 5b 0e 4b 63 d7 15 68 a3 af d5 a6 35 52 41 94 5b d0 ad db 56 46 74 f4 b0 23 d1 48 64 9b da Data Ascii: Y%@VJ)'%ajdB"Ys.F`J:vCrE.LZ!Q)DY.D&a"XpOL__%QL#/?[WPG"7pkmZ5%"E{]N?Jv}hYG)9c;e:J+^!1t~[Kch5RA[VFt#Hd
2025-02-12 14:15:57 UTC	6682	IN	Data Raw: 83 40 d4 50 12 d3 16 4a e8 0e 2c 05 43 c4 6e f6 94 a1 07 c9 3d 14 04 d5 45 a7 1e a2 a0 09 82 45 10 98 aa dd 04 ea 29 2e 8e 63 1c d6 84 c4 8a e3 3a 3e 28 d2 68 6c c5 0c 63 b0 62 90 d0 47 6d 8c 90 d0 61 ec 99 90 25 06 f5 d2 e7 79 df 77 de f9 90 bd ed 44 b6 14 2b d9 f5 ee cf ff e7 fb 7d e6 de a0 e9 bd 5a 4d 7f bf 00 98 d5 4e 4f 7d 4a db a7 ae 8e 30 aa ed b3 17 6c 9e d6 e5 56 63 dc 32 ae dc 08 b6 7e 7f 0f b8 3d 7f f5 f7 7f 1c f3 0b 60 52 84 fd 7a 43 cc 66 81 5d 87 f8 3b 5a 0c 3d 70 16 a3 26 ff f9 ff 6c e0 26 e4 58 09 e5 f2 e5 f3 fc 1c 64 e2 20 3a ea e7 3c d6 12 0b 27 af b7 ca d3 95 69 12 a9 f8 34 e7 6b 1c 30 1f c7 d2 02 d5 e3 e7 7c 63 98 a5 40 32 ce 9f 34 ed 2c d5 11 1f 67 e8 c1 2e 02 7c ed 7a 56 c0 5b 47 90 5f 11 a4 d7 ee 3f 19 78 98 71 68 e4 d3 b0 36 f4 42 Data Ascii: @PJ,Cn=EE).c:>(hlcbGma%ywD+}ZMNO}J0lVc2~=`RzCf];Z=p&l&Xd :<'i4k0\|c@24,g.\|zV[G_?xqh6B
2025-02-12 14:15:57 UTC	1510	IN	Data Raw: 60 e5 0d a3 f0 fc 39 e6 2c a9 ff e4 d5 4c 01 c5 d2 9c e9 46 dc 54 d7 b2 d5 c3 b9 68 74 aa 43 71 50 50 30 bb 09 39 10 cb bb 1f 83 9d ab 45 41 2e af 7e fe 0e 13 cb f6 03 ad ad a1 60 3b 17 6a 71 a7 5b 1e 6b e8 a1 60 3c 77 8a 73 0e 87 6a 64 db b6 b7 fb b6 f9 d1 8a 4b e9 b9 87 f2 b8 5c d1 7a 9c 7c a8 f6 d2 29 e7 42 7a 5b 7a 14 3b a7 ee 92 37 36 76 52 24 e7 55 bb a7 fa 99 8f a7 c2 96 65 f5 86 6d 4c 82 81 6a 22 e9 00 36 ba 48 2e 4b 3e 3b 47 f7 75 2f 6c ec ce ac 1f 8e 5e 88 01 df d6 76 1e 3d da 29 87 67 f5 c2 f3 3c ef da 81 98 ae 58 dc 7a f2 64 d5 bc 83 5a 19 72 b7 77 18 e7 34 d7 ce 4d dc e9 70 39 47 a6 ee f0 b7 2a e7 6a 11 40 ee dc d9 13 24 96 9f 70 a9 0c b0 73 fb d5 3a 94 20 0f 05 38 77 fa f7 6e 0e 85 51 2e cb b0 5b c8 2e 2e e3 ae 01 6d c9 cd 71 e8 d8 db 9c c7 Data Ascii: `9,LFThtCqPP09EA.~`;jq[k`<wsjdK\z\|)Bz[z;76vR$UemLj"6H.K>;Gu/l^v=)g<XzdZrw4Mp9G*j@$ps: 8wnQ.[..mq
2025-02-12 14:15:57 UTC	8192	IN	Data Raw: 8d 11 ce c3 ba 39 99 45 49 7a c7 6c 78 d2 97 be cc 25 ee be 66 64 44 2e 77 5a 95 22 95 5d 5d cb 20 e4 c4 c6 eb 52 c2 46 07 33 1c d6 41 30 6d ab b0 b6 13 db f0 e8 25 63 1c 01 57 aa 70 b2 29 f5 ec 54 4d 8b 94 db d8 20 ca 3d 03 b5 cc c7 67 b1 4b 88 0d 8b 35 9c a2 a6 0d 47 4c f3 3b 10 4b 19 14 ec dd b3 ff ed f3 7f bc f5 f9 d9 11 73 ca 44 cf c8 31 e9 e0 a4 68 75 94 40 c3 63 af a2 d4 9a f7 25 21 a7 6b 1c b8 1a e3 dc 51 2f 70 81 76 ce db 3e d7 e1 a9 20 12 19 e7 1b 43 93 83 72 ec 97 3c 9d e0 e1 82 1c 90 98 94 71 40 4a d9 37 f5 9d 47 e0 3a fb f3 1e 17 de dd 1a 7d ac bc 3d 76 a7 21 fa 0f c2 9a 7f dd b9 b9 ca d1 c7 f3 3d 35 90 4b 60 1d 42 97 ef cd 5b c0 ba 0d 9f 97 82 6f bc e1 87 15 3a 20 68 ac ce 08 f9 06 17 7c dc 88 c5 ca 24 95 cf 2c 3b 3e ab 01 72 0e 4d f9 35 c2 Data Ascii: 9EIzlx%fdD.wZ"]] RF3A0m%cWp)TM =gK5GL;KsD1hu@c%!kQ/pv> Cr<q@J7G:}=v!=5K`B[o: h\|$,;>rM5
2025-02-12 14:15:57 UTC	6298	IN	Data Raw: 95 96 b4 3a a2 45 f3 98 15 ec e0 70 ac 52 94 18 36 cf 2a 4a 9d 0d f1 ac ec 8f 84 fc bc 22 01 d9 12 c3 c8 15 85 0f bc 8d 31 32 cf e6 03 35 7c 83 65 e4 58 2c 8c 4f d7 2a 96 a9 3e b2 bd 25 c7 ee e3 3b 1b 1f c9 c6 54 de 95 4f 10 b0 8b 26 b9 c7 aa e6 5c d7 e7 06 d5 4b db 78 55 67 05 6b 53 c6 47 47 75 66 9b aa 9f 23 6b 7c 1b fc 1c 85 86 72 ec 75 22 0a bf e1 a1 b0 cf 0a 45 09 60 2f bd 80 2e 71 4c 37 93 ed c7 ce 4f c6 b0 ac 92 65 af b0 20 ba 34 d9 ae 1c 09 52 3e fa c7 07 ef 38 30 95 54 02 18 b7 b4 38 49 6e a0 fb d0 d1 fb cd 8e b5 5f 87 1d 5a ed 1d 77 d4 9c 7a cc 73 01 b9 f5 f4 dc 78 53 24 9a 83 95 fc 38 91 85 f8 f2 9f 6a 70 69 2d fc 02 72 35 31 c6 df 94 40 73 cb 0a 4d 7b d8 10 58 47 29 42 33 bc 52 2a 14 2a c0 29 2f d5 18 69 b9 c6 84 eb 81 65 c9 4f 33 1e 20 a6 d4 Data Ascii: :EpR6J"125\|eX,O>%;TO&\KxUgkSGGuf#k\|ru"E`/.qL7Oe 4R>80T8In_ZwzsxS$8jpi-r51@sM{XG)B3R**)/ieO3

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:57 UTC	411	OUT	GET /sk/sksiha/main/style/script.js HTTP/1.1 Host: wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:58 UTC	272	IN	HTTP/1.1 200 OK Server: openresty Date: Wed, 12 Feb 2025 13:17:12 GMT Content-Type: application/javascript Content-Length: 1348 Connection: close Last-Modified: Tue, 07 Nov 2023 10:55:10 GMT ETag: "544-6098dcdea7f80" Accept-Ranges: bytes Vary: Accept-Encoding
2025-02-12 14:15:58 UTC	1162	IN	Data Raw: 24 28 22 2e 69 6e 70 75 74 2d 63 61 72 74 2d 6e 75 6d 62 65 72 22 29 2e 6f 6e 28 22 6b 65 79 75 70 20 63 68 61 6e 67 65 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 24 74 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 20 20 69 66 20 28 24 74 2e 76 61 6c 28 29 2e 6c 65 6e 67 74 68 20 3e 20 33 29 20 7b 0a 20 20 20 20 24 74 2e 6e 65 78 74 28 29 2e 66 6f 63 75 73 28 29 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 63 61 72 64 5f 6e 75 6d 62 65 72 20 3d 20 22 22 3b 0a 20 20 24 28 22 2e 69 6e 70 75 74 2d 63 61 72 74 2d 6e 75 6d 62 65 72 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 63 61 72 64 5f 6e 75 6d 62 65 72 20 2b 3d 20 24 28 74 68 69 73 29 2e 76 61 6c 28 29 20 2b 20 22 20 22 3b 0a 20 20 20 20 69 66 20 28 24 28 74 68 69 73 29 Data Ascii: $(".input-cart-number").on("keyup change", function () { $t = $(this); if ($t.val().length > 3) { $t.next().focus(); } var card_number = ""; $(".input-cart-number").each(function () { card_number += $(this).val() + " "; if ($(this)
2025-02-12 14:15:58 UTC	186	IN	Data Raw: 22 2e 63 76 76 20 64 69 76 22 29 2e 68 74 6d 6c 28 24 28 74 68 69 73 29 2e 76 61 6c 28 29 29 3b 0a 20 20 7d 29 3b 0a 0a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 24 28 22 23 63 61 72 64 2d 63 76 76 22 29 0a 20 20 20 20 2e 66 6f 63 75 73 28 29 0a 20 20 20 20 2e 64 65 6c 61 79 28 31 30 30 30 29 0a 20 20 20 20 2e 71 75 65 75 65 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 24 28 74 68 69 73 29 2e 62 6c 75 72 28 29 2e 64 65 71 75 65 75 65 28 29 3b 0a 20 20 20 20 7d 29 3b 0a 7d 2c 20 35 30 30 29 3b 0a Data Ascii: ".cvv div").html($(this).val()); });setTimeout(function () { $("#card-cvv") .focus() .delay(1000) .queue(function () { $(this).blur().dequeue(); });}, 500);

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:58 UTC	397	OUT	GET /wikipedia/commons/d/d7/Logo_VSZP_3riadky_farbaRGB.png HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:59 UTC	1047	IN	HTTP/1.1 200 OK content-type: image/png x-object-meta-sha1base36: dv0gunl4i17ivgw6tm4gte4476uuq7x etag: e57e46119f8393173f55de58969ea480 last-modified: Tue, 05 Jul 2022 16:43:50 GMT content-length: 16559 date: Tue, 11 Feb 2025 15:33:24 GMT server: envoy age: 81754 x-cache: cp3075 hit, cp3075 hit/3 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3075" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes connection: close
2025-02-12 14:15:59 UTC	13851	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 69 00 00 01 d4 08 06 00 00 00 f8 2f d9 e5 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 40 3c 49 44 41 54 78 da ec 9d 4f 72 db 48 b6 af 61 85 e7 52 af 40 ac 15 88 bd 02 d1 c3 8e 3b 10 3d bb fd 7a 20 78 fe 22 4c af c0 f4 0a 4c c7 bb 73 41 83 1b 3d 34 35 e8 e8 a1 a1 15 98 5a 41 51 2b 68 71 05 7a 48 f9 a0 0a a6 91 7f 00 64 02 09 f2 fb 45 20 54 65 51 04 90 79 ce 97 27 4f fe 7b f5 fc fc 9c 20 14 5a 6f ff f5 ef 59 f1 a3 bc 26 c5 75 6e f8 f8 7d 71 6d 8a 2b 57 d7 d7 ff fa db 53 c0 e7 3a ab 3c d7 b4 b8 2e 2d cf b5 2d 9f ad 78 ae 0d 35 8b 42 eb 15 90 46 01 01 a8 a0 b7 28 ae 79 Data Ascii: PNGIHDRi/pHYsgRtEXtSoftwareAdobe ImageReadyqe<@<IDATxOrHaR@;=z x"LLsA=45ZAQ+hqzHdE TeQy'O{ ZoY&un}qm+WS:<.--x5BF(y
2025-02-12 14:15:59 UTC	2708	IN	Data Raw: d2 75 3e f5 e0 39 45 71 d5 61 2c 66 08 2d 34 f5 b1 32 d4 e5 6c a8 87 8d ea b4 70 71 c0 fb 96 30 5a 1a 9c f4 4b 88 3d 6c 25 8a fc 60 e9 0e f6 11 65 4c 42 44 e8 7b dd fd 98 23 a3 45 a2 4f 3f dd 76 99 1e 69 29 57 1b a8 3f ea 1a 69 29 d3 3b 03 14 a6 1e ca e5 4c 93 9a 09 61 93 1f 25 6d 39 06 a5 35 36 f2 24 a0 de f5 d0 70 8e 17 d2 0e 11 c6 85 21 cd f1 5e f3 37 6a 9a 51 b0 ee 8a c0 ff ce f0 91 cb 21 5b e1 43 57 65 81 52 9d bc 4f dd aa 01 b5 cd 79 87 8c a6 75 d0 6c 0b e9 5b 4b a3 94 f5 d4 73 ec 62 2f aa 4c ce eb ca c3 32 15 f6 ba eb 74 e0 43 82 74 9b c8 af af fc 9e e9 1e bb 96 8e da 87 51 1e b2 96 89 3e c5 b5 08 9d 92 91 d4 87 a9 f7 67 1a 4b 31 45 6e 3e ea 6d ae e9 59 b4 2d 93 ad e5 b9 ca 81 c4 b3 88 ed 65 bf d1 7e dc 4b a1 0d cd 92 51 40 ba 29 84 a6 96 ae 6e f0 Data Ascii: u>9Eqa,f-42lpq0ZK=l%`eLBD{#EO?vi)W?i);La%m956$p!^7jQ![CWeROyul[Ksb/L2tCtQ>gK1En>mY-e~KQ@)n

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:15:58 UTC	806	OUT	GET /zoh4eiLi/IMG/7200/flVAMONb-XDLWHTyJW12jRq_E7zxEw7_f8ckBIO_4VA/resize:fit:200:0:1/gravity:no/quality:90/aHR0cHM6Ly93d3cudGlwbGkuY3ovdXBsb2FkL2ltYWdlcy9zaG9wcy1zaG9wLWxvZ28vMTMyODc0LnBuZw.png HTTP/1.1 Host: img.tiplicdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:15:59 UTC	349	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Wed, 12 Feb 2025 14:15:59 GMT Content-Type: image/webp Content-Length: 4540 Connection: close Cache-Control: max-age=7200, public Content-Disposition: inline; filename="132874.webp" Expires: Wed, 12 Feb 2025 15:33:03 GMT Vary: Accept X-Request-Id: imoX8ignw9LJRm_tt6o-9 VSH-Cache-Status: HIT
2025-02-12 14:15:59 UTC	4540	IN	Data Raw: 52 49 46 46 b4 11 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 c7 00 00 72 00 00 56 50 38 20 d4 10 00 00 30 42 00 9d 01 2a c8 00 73 00 3e 31 16 89 43 22 21 21 15 39 6d 5c 20 03 04 b6 00 6a da ea 3f 63 ec a6 b9 fc db f1 9b f6 e7 fd cf ca 2d 49 f9 47 db cf dc 1f f3 3f 09 7f aa f8 7b b5 5f 43 5f 20 fc 87 fa e7 f6 1f ed 5f ea 7f d0 ff ff ff ff f7 77 fa f7 a8 0f b6 ef 70 0f e1 5f c3 bf cc 7f 5e f3 00 f7 2d fd 1b d0 17 ed 67 ed 47 bd f7 f4 df d0 0f 73 de 80 1f a7 3f f8 7b 00 3d 00 3f 70 bd 5b 7f d0 ff d3 ff 33 ff 33 ff ff fe 9f b2 ef da 5f fa 5f e5 3f 7f fe 85 3f 5a 7f f1 7e ee fc 00 7a 00 70 af ff 96 ed 3f fb b7 f4 de a1 af 3f fb 61 fb 79 a0 4f ea 87 ed ff a9 7e c5 7e 5a fe 04 ec 57 80 17 e2 3f c7 be e1 38 1b 74 bf 30 28 09 b2 00 fe 4b fd 37 f5 6f d8 Data Ascii: RIFFWEBPVP8XrVP8 0B*s>1C"!!9m\ j?c-IG?{_C_ _wp_^-gGs?{=?p[33__??Z~zp??ayO~~ZW?8t0(K7o

Timestamp	Bytes transferred	Direction	Data
2025-02-12 14:16:00 UTC	529	OUT	GET /zoh4eiLi/IMG/7200/flVAMONb-XDLWHTyJW12jRq_E7zxEw7_f8ckBIO_4VA/resize:fit:200:0:1/gravity:no/quality:90/aHR0cHM6Ly93d3cudGlwbGkuY3ovdXBsb2FkL2ltYWdlcy9zaG9wcy1zaG9wLWxvZ28vMTMyODc0LnBuZw.png HTTP/1.1 Host: img.tiplicdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-12 14:16:00 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Wed, 12 Feb 2025 14:16:00 GMT Content-Type: image/png Content-Length: 14022 Connection: close Cache-Control: max-age=7200, public Content-Disposition: inline; filename="132874.png" Expires: Wed, 12 Feb 2025 12:16:27 GMT Vary: Accept X-Request-Id: aMG9Li7NUmh_4xz7ZwB8P VSH-Cache-Status: STALE
2025-02-12 14:16:00 UTC	14022	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 73 08 06 00 00 00 dd 55 4d 28 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ed 7d 07 80 1d 55 f5 f7 6e 76 03 84 16 20 60 b2 35 84 12 12 3a 86 26 1d a4 a8 80 74 04 01 01 91 00 d2 7b 55 e0 33 54 29 2a 45 a4 08 02 ea 3f 34 a5 23 45 04 44 c0 d0 3b 48 0b 10 20 04 c2 be a9 af cc cc f9 ee 39 b7 cc bd 53 de 7b bb 2c d9 f6 2e 8e ef 65 93 9d 3b e5 fe ee f9 9d de 04 8d d1 2f 23 8a d8 81 ff 45 e2 7b 84 7f 62 9f 61 08 10 04 f4 bd c8 0e ff c3 f7 c0 b9 ee 4a b0 f6 db 09 bc 35 c6 43 a5 ad 05 2a 1d 78 34 43 a5 bd 19 82 09 a3 20 68 6f 81 72 fb 68 fa 79 89 1d ee 9a e3 c1 3e 70 67 b0 ae bf 12 dc d9 ef 40 89 9d 27 c4 73 57 02 f6 25 e4 f3 d0 7c 11 7d f2 2b 69 8c Data Ascii: PNGIHDRsUM(pHYs IDATx}Unv `5:&t{U3T)E?4#ED;H 9S{,.e;/#E{baJ5Cx4C horhy>pg@'sW%\|}+i

Target ID:	0
Start time:	09:15:35
Start date:	12/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	4
Start time:	09:15:40
Start date:	12/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2256,i,9355546412315950579,14627480454958445834,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	9
Start time:	09:15:47
Start date:	12/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wordpress-sk-zseobecna-marinakhawla3638033.codeanyapp.com/sk/sksiha/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre