There seem to be a http/https issue on your website, that https://buket.bg/ only allows contents to come from https://buket.bg/, but for some reason in your case https://buket.bg/ is used. That entire https://buket.bg/waf/id/ link seems to be kind of weird, as I think you should rather see a wp-admin link, even if the http part of the link is wrong. As I read on Google, waf probably means a Firewall. Do you know if you have a Firewall installed on your server, which redirects your urls through itself?
Also, just to make sure that your WordPress is configured correctly, please check your left WP admin menu’s Settings -> Configuration -> WordPress Address (URL) and Site Address (URL), where you should have the https links of your website.