r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6652
Expires: Sun, 11 Sep 2022 21:48:47 GMT
Date: Sun, 11 Sep 2022 19:57:55 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 48addd18ae062290effff9efdd21a3ce
98e624b1ca94404241ab83099a3a0f0fe3121249
4d928bf1843cbdd41db876bf1c5d027bf2aaadfa9763b419f4900602a6d6aa18
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D928BF1843CBDD41DB876BF1C5D027BF2AAADFA9763B419F4900602A6D6AA18"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8960
Expires: Sun, 11 Sep 2022 22:27:15 GMT
Date: Sun, 11 Sep 2022 19:57:55 GMT
Connection: keep-alive
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
200 OK 44 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 55ce2d7a7966bcd86c91d6de497facbc
2d09c71c2dacfcd88e86610e43b2bdc1a3dc70e0
dd1546d1414cedbac87066186529d6b8c0e0646929893f2801767f79940e83ac
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Miss from cloudfront
x-amz-cf-pop: SEA19-C1
x-amz-cf-id: P75gTVKZajcMRR1S7sXkgBUfP8W1kvZ-_YjVZZQFlV2fBuqKqJ_mMA==
content-encoding: gzip
via: 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 19:49:24 GMT
content-type: application/json
content-length: 44309
age: 511
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain
IP
File type PEM certificate\012- , ASCII text
Hash 48ca0beea419a9039591cf1aee5179e0
9e92629f505fcc07aab51221e8fe62197a23e307
630a5f110337b4a4876aa85c21107d9e8f2550bcc60f023a4777d895b17399fd
GET /chains/remote-settings.content-signature.mozilla.org-2022-06-30-19-51-38.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Wed, 11 May 2022 19:51:39 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 11 Sep 2022 01:50:48 GMT
etag: "48ca0beea419a9039591cf1aee5179e0"
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5-qjg8tIbC6bZCxXJoRFjyUUE0kqtu0FR-FQyR3_TUhLF_w8BMAE0g==
age: 66944
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 11 Sep 2022 19:07:48 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: f4lqlgCCXWDnXTTVZ-J-nBMJ4u4SsDjQPssMSrTJgIr_pnSlFfIshg==
Age: 3008
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:57:56 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash e8909d08ddd5877ce773a5de44589505
cd67c8cfeeb99f7159aa9f1efb1217aaa4c27e2d
c0a6b42958c95403b98d25a2a214e4f5a1a19efbd5e04ba19ade1131247596b7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3274
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:57:56 GMT
Last-Modified: Sun, 11 Sep 2022 19:03:22 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 11 Sep 2022 19:56:07 GMT
Expires: Sun, 11 Sep 2022 20:29:08 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 0GxeqKvbQehxP2Hvei36Crzf17Paa6Q7uz_OWmr5Eg10EaCWJBuyMA==
Age: 109
ocsp.digicert.com/
200 OK 471 B IP
Hash 26e829ba5f754918e20cbd316dc4348e
ba198501da0812dd11ca3b38a51325b5de6cfa60
4352c25d4af7637a8435b0df6d042fc606d37a348e966b99fecce8a853b8ebc0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4370
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:57:56 GMT
Last-Modified: Sun, 11 Sep 2022 18:45:06 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
200 OK 8 B URL HTTP/1.1 shavar.services.mozilla.com/downloads?client=Firefox&appver=96.0a&pver=2.2
IP
Hash 29fc57841962e407cb50c1be60284bf7
ce968a77e2996da5eee8925182318f171ccdce47
ae7e7075247dcfad763f1e131aeac3d2e756bb03d48b0d315a50c69636e5dc8b
POST /downloads?client=Firefox&appver=96.0a&pver=2.2 HTTP/1.1
Host: shavar.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 773
Connection: close
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: none
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Date: Sun, 11 Sep 2022 19:57:56 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Length: 8
Connection: Close
www.berufsorientierung-plus.de/bw
301 Moved Permanently 0 B URL HTTP/1.1 www.berufsorientierung-plus.de/bw
IP
ASN #8741 Ratiokontakt GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET /bw HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 11 Sep 2022 19:57:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Redirect-By: WordPress
Set-Cookie: apbct_timestamp=1662926275; path=/; HttpOnly; SameSite=Lax
apbct_site_landing_ts=1662926275; path=/; HttpOnly; SameSite=Lax
apbct_page_hits=1; path=/; HttpOnly; SameSite=Lax
apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252221dae2ced4194244c01694b656f9d114%2522%257D; path=/; HttpOnly; SameSite=Lax
apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%7D; expires=Wed, 14-Sep-2022 19:57:55 GMT; Max-Age=259200; path=/; domain=www.berufsorientierung-plus.de; HttpOnly; SameSite=Lax
apbct_site_referer=UNKNOWN; expires=Wed, 14-Sep-2022 19:57:55 GMT; Max-Age=259200; path=/; domain=www.berufsorientierung-plus.de; HttpOnly; SameSite=Lax
ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50; expires=Tue, 11-Oct-2022 19:57:55 GMT; Max-Age=2592000; path=/; SameSite=Lax
Location: http://www.berufsorientierung-plus.de/bw/
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PHP/7.4.30, PleskLin
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: RbWUTgbe7Kw7V45QcQS1Pw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1lijqwNL4EZa3jd4wDhUrfcmW44=
firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221662922634376%22
200 OK 4.7 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/monitor/collections/changes/changeset?_expected=%221662922634376%22
IP
File type JSON data\012- , ASCII text, with very long lines (22383), with no line terminators
Hash 402cac151ae4c03432ddff9d85569e84
fdb4373bf9e3f56738dfc998d3f75219ea8b3f23
5549504bdb445fd057deea322f570f4f52ae6f3adebbdfd55c5f60f3d4182d00
GET /v1/buckets/monitor/collections/changes/changeset?_expected=%221662922634376%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 11 Sep 2022 19:02:01 GMT
Expires: Sun, 11 Sep 2022 20:02:01 GMT
Last-Modified: Sun, 11 Sep 2022 18:57:14 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1FC0IieK_v943OCZrod2AmZi0ZkO6ocdAX96gArryJZDwMqoHyCE2Q==
Age: 3355
firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1662683838451&_since=%221653914271178%22
200 OK 12 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1662683838451&_since=%221653914271178%22
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 17408c9519b5f281127b53ae1cdd2c1f
8437f3b97c662bc8526b86a747fa124638fdf424
843466bea7f6dafe736dd1475f8ac8fc055d1c0f08b34e80e9088b5cfac399f3
GET /v1/buckets/blocklists/collections/addons-bloomfilters/changeset?_expected=1662683838451&_since=%221653914271178%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 09 Sep 2022 00:37:18 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Sun, 11 Sep 2022 19:05:13 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Dt8QtXUQn1GuUDcN0bxXb4K6CEklC5YkQB4Bdv7wrf6bL602D-FK5w==
Age: 3257
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 11 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: kXUgZLbTLLF9zz6rpMaOiVZTxmDXCMI9tIJaCLHYa1NorFbriAQigQ==
age: 45645
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 11 Sep 2022 19:07:48 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PWhs7Zvzb_HF-J-IKyFxRPwXXPEHHFy4zOaLfS_3Gr2PwT8jiLU8vg==
Age: 3009
firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/67600448-6fc2-4f40-bd4a-8687d731734f.bin
200 OK 796 kB URL HTTP/1.1 firefox-settings-attachments.cdn.mozilla.net/staging/addons-bloomfilters/67600448-6fc2-4f40-bd4a-8687d731734f.bin
IP
Size 796 kB (795699 bytes)
Hash 9b95765b0e26af76116a95a966d61354
3f7c1b40fc999b83f3696f455402e49ab484b027
34f969c8e082310785ec4262e2d5b58c919d4de856ffc64b3467507f83ac9571
GET /staging/addons-bloomfilters/67600448-6fc2-4f40-bd4a-8687d731734f.bin HTTP/1.1
Host: firefox-settings-attachments.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 795699
Connection: keep-alive
Last-Modified: Mon, 27 Jun 2022 12:39:11 GMT
x-amz-version-id: 9np1boOrxtHVWzMczpbX1a.N_ewQWHDF
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 11 Sep 2022 01:16:38 GMT
ETag: "9b95765b0e26af76116a95a966d61354"
X-Cache: Hit from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8wy-GWH0CMQxL5C1Gblxoizk-fxAAKW7NIwE_971_CZitSKy1IYvzQ==
Age: 67459
firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1659547595259&_since=%221653578606314%22
200 OK 1.4 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/cfr/changeset?_expected=1659547595259&_since=%221653578606314%22
IP
File type JSON data\012- , ASCII text, with very long lines (3677), with no line terminators
Hash 7c2cf5e6216dc47511f819acd70197a5
f8f556d7600b3e74941bc4d3100463e054879170
0b13a9837661102f8e1ee4647007e78ddff90738b62eeb2df69713ed0c2be6bd
GET /v1/buckets/main/collections/cfr/changeset?_expected=1659547595259&_since=%221653578606314%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Wed, 03 Aug 2022 17:26:35 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Sun, 11 Sep 2022 19:48:19 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HxymFNDiFMX2XIYVCHksJKv057cC33O6hgHHXExLHcObMbd57S4ssA==
Age: 702
firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
200 OK 682 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258
IP
File type JSON data\012- , ASCII text, with very long lines (682), with no line terminators
Hash a8de25186ce42cdab231094c99d2d75b
aeb089a528c6f0844e670e53ec3b96dcd85dbca9
51340f915ba9b000a031d2c99084c4385f4b404796cbbeb3cd463e1920f7ea87
GET /v1/buckets/main/collections/hijack-blocklists?_expected=1605801189258 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 682
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Sat, 10 Sep 2022 16:36:56 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sun, 11 Sep 2022 19:27:59 GMT
Cache-Control: no-cache, no-store
ETag: "1662827816534"
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: m5Mn-z-8OAmXZgNT_yqZJjf-E1r1NmjGFTFepZxQUYFBQuvgOVFQHw==
Age: 1800
firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1656585893704&_since=%221649762862679%22
200 OK 897 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/query-stripping/changeset?_expected=1656585893704&_since=%221649762862679%22
IP
File type JSON data\012- , ASCII text, with very long lines (1710), with no line terminators
Hash 2ef700623eb0b783e8a583fb14fcbb80
c6b6cbb847d3a5e5c6d991c8d6dce6e9b9c902cf
b2a5ecbd87cc70c34c20d9470de54751cc1f48c8945e2239f12874ed35839983
GET /v1/buckets/main/collections/query-stripping/changeset?_expected=1656585893704&_since=%221649762862679%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Thu, 30 Jun 2022 10:44:53 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Sun, 11 Sep 2022 19:43:42 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RDJolj9sLKJwsqMOmQVSBhoycF58sVqRJTAm_8GUw3YhGwHuYXUCeQ==
Age: 882
firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1657747510534&_since=%221654266643527%22
200 OK 1.1 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1657747510534&_since=%221654266643527%22
IP
File type JSON data\012- , ASCII text, with very long lines (2195), with no line terminators
Hash ea7be8630c2ab64565dcf909ddd6b1e9
99b5c68aea2e5c3f498290bca5affa8c4d5ccaee
46a7bd4666db075b42064484105f0381c5cd8ff11ce5a9a555711ad03f83b38c
GET /v1/buckets/main/collections/partitioning-exempt-urls/changeset?_expected=1657747510534&_since=%221654266643527%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Wed, 13 Jul 2022 21:25:10 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 19:09:12 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cIFJ8RIHEwjCUqwkapeCkqAyhRVHXhaBSdJvivimqMIzskf3h4OI8Q==
Age: 3060
firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1662768065034&_since=%221654732864402%22
200 OK 12 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1662768065034&_since=%221654732864402%22
IP
File type JSON data\012- , ASCII text, with very long lines (59437), with no line terminators
Hash 2892f44e1b5e26e8917cc119e8bf5c68
b4a5f016d4d6a865e135b8e9df1d33e564c2452a
954abdccf19eb2519c9780047ec65e51adfa80afb887d6f630f14813d8234c1d
GET /v1/buckets/main/collections/normandy-recipes-capabilities/changeset?_expected=1662768065034&_since=%221654732864402%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Sat, 10 Sep 2022 00:01:05 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Sun, 11 Sep 2022 19:29:13 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HsIgXmr0tVt9dNUcm34HfMDUqQ5Yjx9kN10rKzWhRxP2wCTMOoW6Yw==
Age: 2579
firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1662667723810&_since=%221654636467710%22
200 OK 5.2 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1662667723810&_since=%221654636467710%22
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 5f000060fe443d52c150b2fe5cc38d38
b96c82129faf0ac2a3c4f133424e610a42476934
3928345bc3410deb4a331e386b293133153d902ff7a3e2d60e1cc934a0f25392
GET /v1/buckets/main/collections/nimbus-desktop-experiments/changeset?_expected=1662667723810&_since=%221654636467710%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Thu, 08 Sep 2022 20:08:43 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Sun, 11 Sep 2022 19:29:13 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: U1d-AIXxA3M_6oGURlZsQTVwxr6FyS8yAuWWUetKQ6Bj7AAxYWWmTg==
Age: 2320
firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1662044085942&_since=%221622732735407%22
200 OK 5.9 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1662044085942&_since=%221622732735407%22
IP
File type JSON data\012- , ASCII text, with very long lines (20424), with no line terminators
Hash f28e40410916597002bfaca8b80cd143
386751dbd0839587f0be429fee8a33552d8d1d96
eb0711e7aa1efa94e639dac7b3f62f4c3f80cc0d6aa611a8f23c94876d58ec11
GET /v1/buckets/main/collections/fxmonitor-breaches/changeset?_expected=1662044085942&_since=%221622732735407%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Thu, 01 Sep 2022 14:54:45 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 19:56:29 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: q4r97AknDyWyXZEweBo4tKxajQIjT630PYrfMcW6Gr-rvWZ_aUCdqQ==
Age: 104
firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1659924409785&_since=%221652712410939%22
200 OK 779 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/password-rules/changeset?_expected=1659924409785&_since=%221652712410939%22
IP
File type JSON data\012- , ASCII text, with very long lines (1392), with no line terminators
Hash feb548016d67969c8408dc4afd03a12e
9449c0b40446e2fff553406270b879b40c8bbd2a
4384cca875647f7bf975f9ac51298bbe5e632e54597284d0a6a49971bc8f2798
GET /v1/buckets/main/collections/password-rules/changeset?_expected=1659924409785&_since=%221652712410939%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Mon, 08 Aug 2022 02:06:49 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Sun, 11 Sep 2022 19:39:55 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dLgI53EWdWMOA9jD_9VsYFwUHwv8RsVSmt3N2jQMhvfdvau_5LgOlw==
Age: 1095
firefox.settings.services.mozilla.com/v1/buckets/main/collections/websites-with-shared-credential-backends/changeset?_expected=1659924446436&_since=%221650898092205%22
200 OK 3.1 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/websites-with-shared-credential-backends/changeset?_expected=1659924446436&_since=%221650898092205%22
IP
File type JSON data\012- , ASCII text, with very long lines (8682), with no line terminators
Hash cb546ddfc075945fc3edcc0a08714230
d0c184b28768e0b60712ebfb2a1d7efed49ec5e7
1140ff372948c06d0577eb7a7299c2d95c87b4d47839defef7307486f9f7ea21
GET /v1/buckets/main/collections/websites-with-shared-credential-backends/changeset?_expected=1659924446436&_since=%221650898092205%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Mon, 08 Aug 2022 02:07:26 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: br
Date: Sun, 11 Sep 2022 19:21:27 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PqF-lM4t8wMTzJVI6dzzrWMQ4JtnqBUoz2jwX4HV6-jvYa9RY0drEQ==
Age: 2245
firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1661199949574&_since=%221648132005528%22
200 OK 3.4 kB URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/search-config/changeset?_expected=1661199949574&_since=%221648132005528%22
IP
File type JSON data\012- , ASCII text, with very long lines (14030), with no line terminators
Hash 9498433bbbcad841ef1b67c31e9e19f7
bc89dbd1261594949ebc09eb0978e22d14fb5c3f
01a250849ba7c6b099e5e2e85059f7657041d3997a5a0118b85aea782aa408b2
GET /v1/buckets/main/collections/search-config/changeset?_expected=1661199949574&_since=%221648132005528%22 HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Mon, 22 Aug 2022 20:25:49 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Sun, 11 Sep 2022 19:36:23 GMT
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: dSNV2LhALMGZ3306r0wakvjkYTuBsp-rCszLY-N3JeLLVFFYTLbybA==
Age: 1325
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/liquid-icon/lqd-essentials/fonts/lqd-essentials.woff2
200 OK 6.0 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/liquid-icon/lqd-essentials/fonts/lqd-essentials.woff2
IP
ASN #8741 Ratiokontakt GmbH
File type Web Open Font Format (Version 2), TrueType, length 6024, version 1.0\012- data
Hash d1e9c0bf884b9276ca85f842ed361084
3f4681c4a9594d3cccbc6f4a956a83e8df11e44c
41ff6a986e90375f4f966ddf4db2647091bdadc49301e1fca105bb3350d334b1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/liquid-icon/lqd-essentials/fonts/lqd-essentials.woff2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: font/woff2
Content-Length: 6024
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-1788"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
200 OK 19 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-includes/js/wp-emoji-release.min.js?ver=6.0.2
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (15660)
Hash 32beb68a374e3aeac00abdf9e12b84ea
b5d18aa625e8696dd9d07cd0869337717b211ae0
5aad5fbd4238981a9ff5e2772ff1353dfe1a801fb49542fe157418c1438f7782
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.0.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 18617
Last-Modified: Wed, 25 May 2022 00:32:52 GMT
Connection: keep-alive
ETag: "628d7934-48b9"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.183
200 OK 205 B URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.183
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with no line terminators
Hash 33705e5f00acbc17018a5f8538e97c26
c3e8008eda866331e081297bc0e20b842982dbb5
05424bd65f149422dfd3bdbd02d1f46347ffbac374d18671136c5083faba978a
GET /wp-content/plugins/cleantalk-spam-protect/css/cleantalk-public.min.css?ver=5.183 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 205
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Wed, 31 Aug 2022 07:31:56 GMT
ETag: "cd-5e7847dddecc4"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
www.berufsorientierung-plus.de/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.2
200 OK 2.7 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.2
IP
ASN #8741 Ratiokontakt GmbH
Hash e6fae855021a88a0067fcc58121c594f
6299ac3987b5e81725781799dad361d19ac3b99d
e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.6.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 2731
Last-Modified: Wed, 31 Aug 2022 09:49:25 GMT
Connection: keep-alive
ETag: "630f2ea5-aab"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/plugins/my-favorites/assets/select.css?ver=1.4.1
200 OK 2.3 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/my-favorites/assets/select.css?ver=1.4.1
IP
ASN #8741 Ratiokontakt GmbH
Hash 377ae329fdf00f4fc86161c990032db6
6d9d8181b5458be9707394c49f110b6cf3942579
6f68c76cd41699700fe882fb621f83bfb51754b9f66db8b72a6b50b9c5f7ee89
GET /wp-content/plugins/my-favorites/assets/select.css?ver=1.4.1 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 2308
Last-Modified: Wed, 31 Aug 2022 09:55:25 GMT
Connection: keep-alive
ETag: "630f300d-904"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/style.css
200 OK 3.7 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/style.css
IP
ASN #8741 Ratiokontakt GmbH
Hash e09ec553ee917db477119b5d447cb4b2
1268847fa2578571317e5978e001eb5671d7fdf5
abb05a7ef795a8f3c396deb98ca4d65710c9916c7f17d973e056425395db6489
GET /wp-content/themes/hub/style.css HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 3652
Last-Modified: Wed, 31 Aug 2022 10:01:33 GMT
Connection: keep-alive
ETag: "630f317d-e44"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/bw/
200 OK 85 kB URL HTTP/1.1 www.berufsorientierung-plus.de/bw/
IP
ASN #8741 Ratiokontakt GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash ac8931954d790f53e7bc7452691297f1
6c7173e979367a94237b32c89dce09dfed4f41e0
3cee45e9fb3cf91388c1d15264f9012cb1b92ad03857833b85e267665d4ceda4
Analyzer Verdict Alert fortinet Malware
GET /bw/ HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: apbct_timestamp=1662926275; apbct_site_landing_ts=1662926275; apbct_page_hits=1; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252221dae2ced4194244c01694b656f9d114%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:57 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Link: <https://www.berufsorientierung-plus.de/wp-json/>; rel="https://api.w.org/", <https://www.berufsorientierung-plus.de/wp-json/wp/v2/pages/8571>; rel="alternate"; type="application/json", <https://www.berufsorientierung-plus.de/?p=8571>; rel=shortlink
Set-Cookie: apbct_timestamp=1662926277; path=/; HttpOnly; SameSite=Lax
apbct_page_hits=2; path=/; HttpOnly; SameSite=Lax
apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; path=/; HttpOnly; SameSite=Lax
apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; expires=Wed, 14-Sep-2022 19:57:57 GMT; Max-Age=259200; path=/; domain=www.berufsorientierung-plus.de; HttpOnly; SameSite=Lax
apbct_site_referer=UNKNOWN; expires=Wed, 14-Sep-2022 19:57:57 GMT; Max-Age=259200; path=/; domain=www.berufsorientierung-plus.de; HttpOnly; SameSite=Lax
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PHP/7.4.30, PleskLin
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 57b75ea93de540716c45f1397781431a
431cc2c684385c4e46facd7210b5ac49b9dd09cc
4581d7dd422dc110fa7cfe667297cdb75d92a02ce7226db6db89448befa5b780
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:57:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/bootstrap/css/bootstrap.min.css
200 OK 52 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/bootstrap/css/bootstrap.min.css
IP
ASN #8741 Ratiokontakt GmbH
File type Unicode text, UTF-8 text, with very long lines (49610)
Hash dfb69e1e1a958f1ecd59362fdd00918b
e0b781dbba18dd3d257de8c1bc8496e690f5690e
d444a5436878a3d86841fe597a78ee414a5811c5bb572b42e07e8687afddb7d2
GET /wp-content/themes/hub/assets/vendors/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 52167
Last-Modified: Wed, 31 Aug 2022 10:01:30 GMT
Connection: keep-alive
ETag: "630f317a-cbc7"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c3d8032059a24d14d00c2ee5d8840c01
62efae1ea6aaea612a12d42b6e5b65d24be11437
2319fe90c8b4d3cc41ec9cce275c82d19fb764015196bd1c52dfb9c5d85b9b0b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:57:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c3d8032059a24d14d00c2ee5d8840c01
62efae1ea6aaea612a12d42b6e5b65d24be11437
2319fe90c8b4d3cc41ec9cce275c82d19fb764015196bd1c52dfb9c5d85b9b0b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:57:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.berufsorientierung-plus.de/wp-content/plugins/hub-core/assets/css/landinghub-core.min.css?ver=6.0.2
200 OK 737 B URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/hub-core/assets/css/landinghub-core.min.css?ver=6.0.2
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (736)
Hash 982a5333bb1dcdd981d163be0e226fb6
09af8eab35ca4576a35a67a40b4366d8347eb3da
7f442908245c5f098b960fc9475ea10a4b6da136ee1767ec1ddf692f00e53a1e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/hub-core/assets/css/landinghub-core.min.css?ver=6.0.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 737
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Wed, 31 Aug 2022 10:03:04 GMT
ETag: "2e1-5e7869a5696e0"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/css/theme-responsive-min.min.css?ver=6.0.2
200 OK 22 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/css/theme-responsive-min.min.css?ver=6.0.2
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (22089), with no line terminators
Hash c6c668e842bbbfe2aafcfcd0cf61749f
91bc9171efa755061e17c5b2669f8adfaccbd288
98ae9097d4a560047fe8deea89fe3f19742a9dd6d93879bc8b0caa21addd38c9
GET /wp-content/themes/hub/assets/css/theme-responsive-min.min.css?ver=6.0.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 22089
Last-Modified: Wed, 31 Aug 2022 10:01:30 GMT
Connection: keep-alive
ETag: "630f317a-5649"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65deebab57142db522e6c874673bdd9f
bfd022181afaec5035f868ccd05fac58113f81dc
7470143c8bd79f00190a3766ebaa9c632d0aa47693fc4c146f097873865da327
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:57:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.berufsorientierung-plus.de/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
200 OK 89 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-includes/css/dist/block-library/style.min.css?ver=6.0.2
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (43771)
Hash b7915926fe42d76e9c802353ab01dae4
3a8192a4312f25f53de25b100d62829c0f14d67c
d7705700d24d5919255576642ad2c28bfc790390b7183a369038ff5c1e814d51
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.0.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 88932
Last-Modified: Wed, 13 Jul 2022 00:32:34 GMT
Connection: keep-alive
ETag: "62ce12a2-15b64"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=UA-227746745-1
200 OK 42 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-227746745-1
IP
File type ASCII text, with very long lines (1615)
Hash bd9acf9f3aab3a639819a7c713c3bf3e
908f5ef08a4aee34c2f17ee287076c2f2cec3120
c651a5b7596d115f1085aa97c6de9691df45899306a0000b753fd57a8a27fd7b
GET /gtag/js?id=UA-227746745-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 Sep 2022 19:57:58 GMT
expires: Sun, 11 Sep 2022 19:57:58 GMT
cache-control: private, max-age=900
last-modified: Sun, 11 Sep 2022 18:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 41970
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/uploads/liquid-styles/liquid-css-8571.css?timestamp=1656061551&ver=6.0.2
200 OK 4.2 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/uploads/liquid-styles/liquid-css-8571.css?timestamp=1656061551&ver=6.0.2
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (4074), with CRLF, LF line terminators
Hash 9d333ddc26d93c64656b60a34b16ea09
c396d852f0ac02e936dcc123f07cca8cece75a54
faca65932729cc2dbcc35e512f8b0584108fc40312b8cf7dadbbcc0b9262965c
GET /wp-content/uploads/liquid-styles/liquid-css-8571.css?timestamp=1656061551&ver=6.0.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 4222
Last-Modified: Fri, 24 Jun 2022 09:05:51 GMT
Connection: keep-alive
ETag: "62b57e6f-107e"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/uploads/liquid-styles/liquid-responsive-100.css?timestamp=1646316067&ver=6.0.2
200 OK 202 B URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/uploads/liquid-styles/liquid-responsive-100.css?timestamp=1646316067&ver=6.0.2
IP
ASN #8741 Ratiokontakt GmbH
Hash e8d84990ae18dcf4d0f71b04baab089f
c077bde8bcb6d79e2f3e3f60883604abcd7bfcc4
2e90fae7ce7ef88f6949a5d2db6dbee770ce6efabb6a5acdfb55c33e61a88c4f
GET /wp-content/uploads/liquid-styles/liquid-responsive-100.css?timestamp=1646316067&ver=6.0.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 202
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Thu, 03 Mar 2022 14:01:07 GMT
ETag: "ca-5d950d462657f"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
www.berufsorientierung-plus.de/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 11 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (11126)
Hash 79b4956b7ec478ec10244b5e2d33ac7d
a46025b9d05e3df30d610a8aef14f392c7058dc9
029e0a2e809fd6b5dbe76abe8b7a74936be306c9a8c27c814c4d44aa54623300
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 11224
Last-Modified: Thu, 03 Mar 2022 14:01:14 GMT
Connection: keep-alive
ETag: "6220ca2a-2bd8"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
200 OK 90 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-includes/js/jquery/jquery.min.js?ver=3.6.0
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (65447)
Hash 02dd5d04add4759122013c5ab4dc5cc2
a45a56e396ac549b4ff39b696ce9e0c16a7612de
bd4de6a3fc0fb68d6f76ba7b93514b96a92e585c295b5351c31ad92a4b0777ea
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.0 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 89521
Last-Modified: Thu, 03 Mar 2022 14:01:14 GMT
Connection: keep-alive
ETag: "6220ca2a-15db1"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=G-0SLM5XP02Z
200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-0SLM5XP02Z
IP
File type ASCII text, with very long lines (20189)
Hash 9bc01db6b9f861af70aa7be506bd841f
31c00d1e0905fd722c69ed920729b714f1165f6b
b2faaec863e4505aa86bdabd4a93cb16b39f51211158aa7f73741b57a107dbd3
GET /gtag/js?id=G-0SLM5XP02Z HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 Sep 2022 19:57:58 GMT
expires: Sun, 11 Sep 2022 19:57:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74748
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.183
200 OK 24 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.183
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (23984)
Hash 4dbd933fc19a3fdea378c82e455d791c
cc35e9ecdaae4b2b66f34fdfe1f1b4bff5773bf9
7549b9c24e8760a903e8aeeb713017b6b7b5290a8b51a638ed81b79e9736aa63
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/cleantalk-spam-protect/js/apbct-public-bundle.min.js?ver=5.183 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 24037
Last-Modified: Wed, 31 Aug 2022 07:31:57 GMT
Connection: keep-alive
ETag: "630f0e6d-5de5"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/plugins/my-favorites/assets/fonts.css
200 OK 1.5 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/my-favorites/assets/fonts.css
IP
ASN #8741 Ratiokontakt GmbH
Hash 38957c61e90466aba00297e13be3516e
17fbb8f07e1bf9f66bba23e099713bb5dd7dcfec
c600ac9d4086cf4e2f3db4997b7ac8acc53d3c588a1551acc11d8855e57dbf8a
GET /wp-content/plugins/my-favorites/assets/fonts.css HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/wp-content/plugins/my-favorites/assets/select.css?ver=1.4.1
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 1459
Last-Modified: Wed, 31 Aug 2022 09:55:25 GMT
Connection: keep-alive
ETag: "630f300d-5b3"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/liquid-icon/lqd-essentials/lqd-essentials.min.css
200 OK 3.3 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/liquid-icon/lqd-essentials/lqd-essentials.min.css
IP
ASN #8741 Ratiokontakt GmbH
File type Unicode text, UTF-8 text, with very long lines (3158), with no line terminators
Hash f78a5482f9f560909dcd5b90113be07a
5071e8c0cc8daff88a1b406090ac661c08207733
7dd7a8de72e1a26c39804006c08206e4cc454f896dd732f71ffacd39ac0ea685
GET /wp-content/themes/hub/assets/vendors/liquid-icon/lqd-essentials/lqd-essentials.min.css HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 3300
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-ce4"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/css/theme.min.css
200 OK 588 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/css/theme.min.css
IP
ASN #8741 Ratiokontakt GmbH
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Size 588 kB (587886 bytes)
Hash 1fed30d949971190140c04b606289b05
ea64361a63fb1f266e9c9cae39e31b96c0bc3ee3
b55e5e3c023dd9fba5665b1cf8613b122b779129068c08a475315c74a6b46eb2
GET /wp-content/themes/hub/assets/css/theme.min.css HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 587886
Last-Modified: Wed, 31 Aug 2022 10:01:30 GMT
Connection: keep-alive
ETag: "630f317a-8f86e"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.googletagmanager.com/gtag/js?id=G-WYRSYRFVN2
200 OK 74 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-WYRSYRFVN2
IP
File type ASCII text, with very long lines (17807)
Hash 97a9574734b2471b27d0f6a5ed315e8f
0a6b53a91943a5e5d20de79a97221bb78d0a6905
6b4781a98a7c1495bc6d76aa5af8ffefc482230d9200d733d8edc7775f1a630b
GET /gtag/js?id=G-WYRSYRFVN2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 Sep 2022 19:57:58 GMT
expires: Sun, 11 Sep 2022 19:57:58 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74192
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/uploads/2022/03/BOplus_Schriftzug_HIntergrund-transparent.png
200 OK 21 kB URL HTTP/2 www.berufsorientierung-plus.de/wp-content/uploads/2022/03/BOplus_Schriftzug_HIntergrund-transparent.png
IP
ASN #8741 Ratiokontakt GmbH
File type PNG image data, 619 x 274, 8-bit/color RGBA, non-interlaced\012- data
Hash c09b42f2aff4c9703465a1a353d16f92
2016d15112c812f2ceb28b285f9742a89e783199
4ef0d7eeefd04108e00a23604831ace37e5dad0b843c1dc7b031c10924a50809
GET /wp-content/uploads/2022/03/BOplus_Schriftzug_HIntergrund-transparent.png HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:57:58 GMT
content-type: image/png
content-length: 21415
last-modified: Thu, 03 Mar 2022 14:12:31 GMT
etag: "6220cccf-53a7"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/plugins/liquid_js_composer/assets/css/js_composer.min.css?ver=6.9.0
200 OK 411 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/liquid_js_composer/assets/css/js_composer.min.css?ver=6.9.0
IP
ASN #8741 Ratiokontakt GmbH
File type Unicode text, UTF-8 text, with very long lines (65452), with no line terminators
Size 411 kB (410784 bytes)
Hash 9315f093a24fa20dd880c29c511230df
77a7cf71cf9acf58ce30e57fae08fcef5785f479
a02ae40dfa0e6df36004df654381041f9f105146cd300cde04fb7d57bbe66145
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/liquid_js_composer/assets/css/js_composer.min.css?ver=6.9.0 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 410784
Last-Modified: Wed, 31 Aug 2022 10:05:49 GMT
Connection: keep-alive
ETag: "630f327d-644a0"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/plugins/liquid_js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.9.0
200 OK 27 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/liquid_js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.9.0
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (26516)
Hash 0a121a1f354de051316c4fff1ebd1f4d
0fc07c1628b390f6d5a05d1cf4a8121e095b93d9
fda3035030d3843c2751dc0da65fb802230ec00a4008aeed83ddddc7b97cbc93
GET /wp-content/plugins/liquid_js_composer/assets/lib/bower/font-awesome/css/v4-shims.min.css?ver=6.9.0 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 26702
Last-Modified: Wed, 31 Aug 2022 10:05:49 GMT
Connection: keep-alive
ETag: "630f327d-684e"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/uploads/2022/06/cookie_02.png
200 OK 26 kB URL HTTP/2 www.berufsorientierung-plus.de/wp-content/uploads/2022/06/cookie_02.png
IP
ASN #8741 Ratiokontakt GmbH
File type PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced\012- data
Hash ab34543b98951269d761a1b43b415d5b
391ea21a0c743396a882d01b81ca9be4a2a0629f
7dd700ac6ec04529d916d576cc552db675ca1af18836d08d1dbaa94d83dd8623
GET /wp-content/uploads/2022/06/cookie_02.png HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:57:58 GMT
content-type: image/png
content-length: 25960
last-modified: Wed, 22 Jun 2022 12:16:12 GMT
etag: "62b3080c-6568"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/plugins/liquid_js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.9.0
200 OK 59 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/liquid_js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.9.0
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (59158)
Hash b227b1617a1763c8bc056772f05482b4
c508528feb9fd540454f838653cd4863b290df2e
af1e6edc875a382b338bb25bd7c5c3f474a7f1b36212002a5896dd06f2186325
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/liquid_js_composer/assets/lib/bower/font-awesome/css/all.min.css?ver=6.9.0 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 59344
Last-Modified: Wed, 31 Aug 2022 10:05:49 GMT
Connection: keep-alive
ETag: "630f327d-e7d0"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/fresco/css/fresco.css
200 OK 37 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/fresco/css/fresco.css
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with CRLF line terminators
Hash 2a318379fcf83b5304af7dd998a6a978
289b5add3f5b6c811189dac995ea429f24f97754
db10dbd95d5b7bfe72838a39e1e7fc3da7006a73413887e482577739edc5de48
GET /wp-content/themes/hub/assets/vendors/fresco/css/fresco.css HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 36883
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-9013"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/jquery-ui/jquery-ui.css
200 OK 24 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/jquery-ui/jquery-ui.css
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (23010)
Hash 2cae93f49203b2c32fb27add22339637
87099119937278137de3bb65dfd5cd9b05d08d03
f3a04b39ed675c78dd2e2e0f567663d69375e6a1b3fb9fcb5a2d1b5d53eb9070
GET /wp-content/themes/hub/assets/vendors/jquery-ui/jquery-ui.css HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: text/css
Content-Length: 24477
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-5f9d"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/plugins/hub-core/shortcodes/header-woo-search/header-woo-search.js?ver=1.0.0
200 OK 1.6 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/hub-core/shortcodes/header-woo-search/header-woo-search.js?ver=1.0.0
IP
ASN #8741 Ratiokontakt GmbH
Hash e47d9bba01efb5e7f142ab272366776b
a10c561e0316bc2a2e995a2c2b00f3150809bd27
7148e7fac4024f312ef48d67d55b047796d98484b33426d1edd481442a5cdf5a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/hub-core/shortcodes/header-woo-search/header-woo-search.js?ver=1.0.0 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 1643
Last-Modified: Wed, 31 Aug 2022 10:03:08 GMT
Connection: keep-alive
ETag: "630f31dc-66b"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 6.5 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (6475), with no line terminators
Hash 61449413a42d2daaa79dbe7298b40e21
d86c474164c603084397bdc50fb0e469d28b5772
f30769ea0b80a5d900c5f0de30b1aad1ab461195e69223d5ef63c2c5de8b6c1a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 6475
Last-Modified: Wed, 25 May 2022 00:32:52 GMT
Connection: keep-alive
ETag: "628d7934-194b"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 19 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #8741 Ratiokontakt GmbH
File type Unicode text, UTF-8 text, with very long lines (19138), with no line terminators
Hash 57459b58fd7665a5e20b2345463df9c9
71c3b177ad1412d5e0b56d99f18bc345148df88b
6fecb89a29ee2bd397bb1bf58ecaa530a76f0654db71fadefd3cc70b0bc302bf
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 19142
Last-Modified: Wed, 25 May 2022 00:32:52 GMT
Connection: keep-alive
ETag: "628d7934-4ac6"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.2
200 OK 22 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.2
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (21905), with no line terminators
Hash ae0f40d4f21faa4c3ae5e3ec85853384
c94eb67feaf4d226d3e08ccd7e2d236d1a013c5d
32dd00604df8db3415240d450341558b6827b1e02dc0f211d8a6d9a4287c522e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.6.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 21905
Last-Modified: Wed, 31 Aug 2022 09:49:25 GMT
Connection: keep-alive
ETag: "630f2ea5-5591"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/plugins/my-favorites/assets/select.js?ver=1.4.1
200 OK 11 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/my-favorites/assets/select.js?ver=1.4.1
IP
ASN #8741 Ratiokontakt GmbH
Hash 8c4f488032b86fa21b5fe6a4577a2574
dec072a969cc30a3e841d2fda4bad8e75ebb47d5
8104b39f6503d638c69585c14355a3d2c39b134801663c0c55de35497fddfd94
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/my-favorites/assets/select.js?ver=1.4.1 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 11182
Last-Modified: Wed, 31 Aug 2022 09:55:25 GMT
Connection: keep-alive
ETag: "630f300d-2bae"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/plugins/hub-core/extensions/redux-typekit/liquid-typekit.js?ver=6.0.2
200 OK 46 B URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/hub-core/extensions/redux-typekit/liquid-typekit.js?ver=6.0.2
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with no line terminators
Hash 55b04ac73271842b818e1f6898648faf
b8fbcebf9409c280e14cfbe6db8fe093e8e72289
b90fb2807fe2a4725b7396d6bf53e88fb4f17e1342c7471ea8d6ffa78b29cfcd
GET /wp-content/plugins/hub-core/extensions/redux-typekit/liquid-typekit.js?ver=6.0.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 46
Connection: keep-alive
X-Accel-Version: 0.01
Last-Modified: Wed, 31 Aug 2022 10:03:06 GMT
ETag: "2e-5e7869a726fe2"
Accept-Ranges: bytes
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
www.berufsorientierung-plus.de/wp-content/plugins/liquid_js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0
200 OK 17 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/plugins/liquid_js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (16767)
Hash 63dd1a8c126e323e9437ff0b767b1229
d385b0e20cb96941ceb7889eab63040c281d3f09
b73a71205e0b5290e8d3e795860074badc7c4ce7bc268b4c44d7319328b1c124
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/liquid_js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 16944
Last-Modified: Wed, 31 Aug 2022 10:05:49 GMT
Connection: keep-alive
ETag: "630f327d-4230"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c3d8032059a24d14d00c2ee5d8840c01
62efae1ea6aaea612a12d42b6e5b65d24be11437
2319fe90c8b4d3cc41ec9cce275c82d19fb764015196bd1c52dfb9c5d85b9b0b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:57:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/fresco/js/fresco.js
200 OK 74 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/fresco/js/fresco.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (31993)
Hash f847b8972709115cb32741e213c6d6fa
b1e9b3ff6b1588030fa921156b65905ab100c812
0a26e8adcf0b57d2dc9695eb48801067839bdb8aa052b6c88e4b262cfac52472
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/fresco/js/fresco.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 74262
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-12216"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/lity/lity.min.js
200 OK 5.2 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/lity/lity.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (5050)
Hash 016cf6657c3eec3e1600cbefd0fb93df
2d3b3356c84db6d4446e02d46b20c4fe2f8740a7
436b683776efec75ab4ae6b4791fc0f48ab56ba07526896e5711a82ab442ee55
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/lity/lity.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 5199
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-144f"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/utils/SplitText.min.js
200 OK 16 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/utils/SplitText.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (15207)
Hash 628315dbf9135e5b88271574278e6eca
ff70280e433a13f69f17aabb94ec3aed218a6e98
ac89245a42071f52d0706bd6d2e0c2459ef8cfc20430a2e7aad45be8ee80949d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/gsap/utils/SplitText.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 15509
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-3c95"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/fastdom/fastdom.min.js
200 OK 2.1 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/fastdom/fastdom.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (2086), with no line terminators
Hash 65e367235ee1ac0ae78c41603e81c250
be3376d7b53fc8d5d7e966383b465855c9a39665
398c7a7954597f4c3e64ad72c8dc8216aa6449fb0eb02dde8e75c36b4b8902f0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/fastdom/fastdom.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 2086
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-826"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 5.6 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (5477)
Hash 3a56752b736635bf69cb069b8818cbfd
42e0951fe74bb3f56a30f51291823bcd4a84d76e
ff4bd34aa98a0214833619d3d751838db015722dfbbec15cd14dadc66cd67869
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 5629
Last-Modified: Thu, 03 Mar 2022 14:01:14 GMT
Connection: keep-alive
ETag: "6220ca2a-15fd"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/minified/gsap.min.js
200 OK 65 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/minified/gsap.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (64964)
Hash 7f452cc6d4183061233146ee634baff9
9b1e5247b4f9cd17417537b2615cf888f2eb413a
785135182c79ee5b2c6df31ca256e0da616f056266ef432ba509ba4db4385753
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/gsap/minified/gsap.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 65262
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-feee"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/utils/CustomEase.min.js
200 OK 7.2 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/utils/CustomEase.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (6803)
Hash e9082481e5b874f10409cb9ed6168562
c3c5533226e5f8b64e9029257eb0e09e171ab02a
961b635c74efbbf66f8f583eb326a490c898e357dfa53c02e6ea4d261d572042
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/gsap/utils/CustomEase.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 7185
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-1c11"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/minified/DrawSVGPlugin.min.js
200 OK 4.2 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/minified/DrawSVGPlugin.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (3882)
Hash 4008012e22b36bd70df26e0913848587
d6d38f5a713013b8ca3d8aed76214cb992161e59
f5a3bfbf5fb798c1be917eb160c5c039f7319c86b8ad6aa5b5170336bce5dd23
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/gsap/minified/DrawSVGPlugin.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 4188
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-105c"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/minified/ScrollTrigger.min.js
200 OK 36 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/gsap/minified/ScrollTrigger.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (35477)
Hash 77f357869a6f64c261fa009e45698c76
f140b16c1b2bf9fa551d933f4f84b8d414a1444b
1676beb913fbe56b0a1c4a4086b79b2bc0febc9465ca4d5707188254ce4e1458
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/gsap/minified/ScrollTrigger.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 35784
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-8bc8"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/js/draw-shape/liquidDrawShape.min.js
200 OK 1.0 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/js/draw-shape/liquidDrawShape.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (1032), with no line terminators
Hash 223797d202840e505404a4195cfb6f88
90018cbdb51898c8ef1bb13ab94430202e76699f
3ec5f51f587f09bf099054ba11b387833414448750650034fad6a54bfbfdda45
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/js/draw-shape/liquidDrawShape.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 1032
Last-Modified: Wed, 31 Aug 2022 10:01:30 GMT
Connection: keep-alive
ETag: "630f317a-408"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
fonts.googleapis.com/css2?family=Manrope:wght@300;500;700&display=swap
200 OK 6.5 kB URL HTTP/2 fonts.googleapis.com/css2?family=Manrope:wght@300;500;700&display=swap
IP
Hash e790226c6f54f086eb25e90b5f8a0682
91de559615c15737bbe78f896ad5178ef96d5dee
539cfae7760e1dc013b51d57f5f314943d916b081d061c5c29ce4cf977865ff6
GET /css2?family=Manrope:wght@300;500;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 11 Sep 2022 19:57:58 GMT
date: Sun, 11 Sep 2022 19:57:58 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/intersection-observer.js
200 OK 7.4 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/intersection-observer.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (6765)
Hash 5a75db2780aa2147fcd751af552271f9
a7c3030ce68f8c82c017c25f1862fe979c0f0675
b0e10ce1b1fa9facaa849e932da5a020688bd397e51bbf9755220092b55dbd38
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/intersection-observer.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 7384
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-1cd8"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/js/animated-blob/liquidAnimatedBlob.min.js
200 OK 3.7 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/js/animated-blob/liquidAnimatedBlob.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (3723), with no line terminators
Hash 328bdb13d96052d63faa4871d3c7bfe4
02c53b3a47f22c2ac148e96e153c8c2beb161150
c77b185a5e41acd475d77b306d4d07d9633661babcd34f4de399d17198cbd7b3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/js/animated-blob/liquidAnimatedBlob.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 3723
Last-Modified: Wed, 31 Aug 2022 10:01:30 GMT
Connection: keep-alive
ETag: "630f317a-e8b"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/lazyload.min.js
200 OK 8.8 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/lazyload.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (8771)
Hash 6aded55a45e2cfab8adef3803f5e861e
84c48b38555f16d3f8a626cd28c3ad992691c648
fb4b93a88613ff8c6d946cff82262a3dace626640fa88c23d1ac9baabc2ff4b0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/lazyload.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 8816
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-2270"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/tinycolor-min.js
200 OK 15 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/tinycolor-min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (14680)
Hash feea59344873ff7aebd159b503804116
04986e91415e34ef0706a2e2b1814c1c5b3f6307
55cc08a17a3dcb5106d45fc4408b8509d149d1795d0417ea545f479526b9c423
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/tinycolor-min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 14783
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-39bf"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/js/theme.min.js
200 OK 296 kB URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/js/theme.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (31985)
Size 296 kB (296219 bytes)
Hash 382676d78a38e39f43a8569f408632ea
810979463870b5b2c428fe4c2bbcea3ba15082ab
fd1f95d8ffea1423c7080701ad2c0b508dddb11ab39a0ab693478630a72c3b5f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/js/theme.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 296219
Last-Modified: Wed, 31 Aug 2022 10:01:30 GMT
Connection: keep-alive
ETag: "630f317a-4851b"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
ocsp.sectigo.com/
200 OK 472 B IP
Hash 081a8fb5d519fe2e52b7ec8cad186f97
adb4b1f620166c275df2bf6448521a2ec69601a5
1b52d7ce1486b12a74612d30d37c17295e78ada728596c3dfacbd3bc3684b820
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 03:20:23 GMT
Expires: Sat, 17 Sep 2022 03:20:22 GMT
Etag: "adb4b1f620166c275df2bf6448521a2ec69601a5"
Cache-Control: max-age=457943,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7492f9b82b3e1c16-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3956
Expires: Sun, 11 Sep 2022 21:03:54 GMT
Date: Sun, 11 Sep 2022 19:57:58 GMT
Connection: keep-alive
moderate5.cleantalk.org/pixel/fc200a804b148edf0238e1ff35ac754d.gif
200 OK 43 B URL HTTP/1.1 moderate5.cleantalk.org/pixel/fc200a804b148edf0238e1ff35ac754d.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /pixel/fc200a804b148edf0238e1ff35ac754d.gif HTTP/1.1
Host: moderate5.cleantalk.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: image/gif
Content-Length: 43
Last-Modified: Mon, 28 Sep 1970 06:00:00 GMT
Connection: keep-alive
X-XSS-Protection: 1; mode=block
Strict-Transport-Security: max-age=31536000; includeSubdomains; preload
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65deebab57142db522e6c874673bdd9f
bfd022181afaec5035f868ccd05fac58113f81dc
7470143c8bd79f00190a3766ebaa9c632d0aa47693fc4c146f097873865da327
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:57:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3956
Expires: Sun, 11 Sep 2022 21:03:54 GMT
Date: Sun, 11 Sep 2022 19:57:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3956
Expires: Sun, 11 Sep 2022 21:03:54 GMT
Date: Sun, 11 Sep 2022 19:57:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3956
Expires: Sun, 11 Sep 2022 21:03:54 GMT
Date: Sun, 11 Sep 2022 19:57:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg
200 OK 8.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eee5b4d617dab6f10d7053f5c4f4e98e
6c728c56797ba921e8001919df4d36e56dd37e54
76a53e2c81ec8da2bc469760b2c57098d587c6a36fa70e5b7c743a224a47d362
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4d72ce1b-951e-4f1f-97b1-db99c399d5f9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8171
x-amzn-requestid: 39c8c044-5287-47bb-8731-5706c27a73e3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0feFFtkIAMF9NA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311ac59-246e1b7e019965f74db95df0;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:10:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FVraudPaXgrkcCLGkaxntfC3h4XtbSfnRgzyp72Wgwb-WgWkDwjYPw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 08:44:26 GMT
age: 40412
etag: "6c728c56797ba921e8001919df4d36e56dd37e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57d797a1c3f6589746a1135bdb19f54f
7aa14fcd982a5cee38d58fc3c89edc4a8daf4c97
ff8855ca951f53ed5f3886cc81a7f28384d41288edeca4fdc621250e4d01c6fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F66c0f84d-aba2-4ce6-9e03-ee51e1c347be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6889
x-amzn-requestid: c82ac543-90cd-4aeb-a65b-7e1bbbacc407
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ2UEE-3IAMFYBw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d0419-427a29067c9c92ec0db6567f;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:39:37 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BPWrjstB3xKeYzHK9eQoJL8ORgRFsqjmNxu0j10epBANBtZCRU-m2g==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 5954c6394458ffb44c970b3819d7ff2a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:43:06 GMT
age: 80092
etag: "7aa14fcd982a5cee38d58fc3c89edc4a8daf4c97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e82f3ab-3fe6-43bc-932c-936ec582e5cf.jpeg
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e82f3ab-3fe6-43bc-932c-936ec582e5cf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fea5dfc4a6a5093fd81899ee4a79d446
c893d7475856809a59486e0bcebd6d662d1fc56f
915fb97690be97d97cb298fc60ceb4cf7c3ed8fb437836beb2d590a8e238363c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e82f3ab-3fe6-43bc-932c-936ec582e5cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7017
x-amzn-requestid: df5e57d7-e54c-4b5a-aa1b-a9aee889842e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_Et0oAMFSjQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-50d15bba03579a935342e22f;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YRgmbTGaMvU9Kf47U90cPYhgpXaYgoNVA8ut6LOUStK4UfWahpSqVA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:41:08 GMT
age: 80210
etag: "c893d7475856809a59486e0bcebd6d662d1fc56f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4ec2646c56c4c522f0744768ad20342b
ad1d9eee90556a359547dc7cbb6758aee2c804cd
0bf9eaa4420bf6290535fd23895c6c723c7de6b849995ba83774532862cfe8b4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F481e7fcb-66df-4e59-8130-9579a79eca9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7635
x-amzn-requestid: dbd07cc7-d0f6-4500-83c6-b19fa9fa2e3d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xt5xDEfUIAMFYXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630f09a0-3771b23118f3711e5caca699;Sampled=0
x-amzn-remapped-date: Wed, 31 Aug 2022 07:11:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ILut4hEDJbs6jNr3wpPST1HgAYMabIT7cdZebRFETn8lL_QfS92KBA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 00:50:01 GMT
age: 68877
etag: "ad1d9eee90556a359547dc7cbb6758aee2c804cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc91b46a1-040b-46aa-a7a1-af67f0058b83.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc91b46a1-040b-46aa-a7a1-af67f0058b83.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb1a86dcf94db0a29a6ebe21866766d4
b3491a6f12c97c8e1848a206a185fae29213c1e5
d05619e519fed6c0b6c0616cf540908006a68f127b25e38fb9d041dfe2546df4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc91b46a1-040b-46aa-a7a1-af67f0058b83.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7519
x-amzn-requestid: bef8445b-1f8b-4c00-a9ad-b32fdefe3d13
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3zXoHOhIAMFfNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312ff63-1a6c3ef64362a4d052a761ae;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:16:51 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Pzv2DSpqnXB0UP3C5EF-YUzRmveFwmal_8YyRfEuHuhZ1FcUWgHocg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Sep 2022 10:22:00 GMT
age: 34558
etag: "b3491a6f12c97c8e1848a206a185fae29213c1e5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e407da4d97d497925b1ab523fd416787
166741631fb93d109b18dde6d316b3fa3276aa8f
707460c02438da6114e35e0b6569d42c0f3fb747f8cb51002f4d52bedbcffa61
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefa6ec5a-4e0b-4c94-b9da-4836fbaa107b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8485
x-amzn-requestid: a56c9282-2786-4ae7-9fc2-0468bcc820a8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YQ1k_FM1oAMFZ2Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631d02ec-753cc4f121c9b77d22bb82b5;Sampled=0
x-amzn-remapped-date: Sat, 10 Sep 2022 21:34:36 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Mfmj40aUc8l5RPk56M-pbqTwhde_HzYcmN5MDrfv-WFPhbpoShWYNw==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 21:57:28 GMT
age: 79230
etag: "166741631fb93d109b18dde6d316b3fa3276aa8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/uploads/2022/05/cropped-BO-Logo-1-192x192.png
200 OK 8.5 kB URL HTTP/2 www.berufsorientierung-plus.de/wp-content/uploads/2022/05/cropped-BO-Logo-1-192x192.png
IP
ASN #8741 Ratiokontakt GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash b2f6859b77745918c93c51aa16a8c57c
d695d5d67d5ca1e237f51c5d96681fbc440404af
ac90f503c482492b29cfe792694e6e1ab1d860b6ecb3654a384977c63e3c6e4c
GET /wp-content/uploads/2022/05/cropped-BO-Logo-1-192x192.png HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:57:58 GMT
content-type: image/png
content-length: 8542
last-modified: Mon, 30 May 2022 10:03:28 GMT
etag: "62949670-215e"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/uploads/2022/05/cropped-BO-Logo-1-32x32.png
200 OK 830 B URL HTTP/2 www.berufsorientierung-plus.de/wp-content/uploads/2022/05/cropped-BO-Logo-1-32x32.png
IP
ASN #8741 Ratiokontakt GmbH
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash b079766e7f54fcf4dc77f00e22e00522
aed75905a20f2d964bf2d69fecb5399e798e038b
10c938a1efdb91240ac36b75a84a52e915851a4da17b1d65ee31037325002705
GET /wp-content/uploads/2022/05/cropped-BO-Logo-1-32x32.png HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:57:58 GMT
content-type: image/png
content-length: 830
x-accel-version: 0.01
last-modified: Mon, 30 May 2022 10:03:28 GMT
etag: "33e-5e037c480c1a4"
accept-ranges: bytes
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/css/theme-responsive-max.min.css?ver=6.0.2
200 OK 14 kB URL HTTP/2 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/css/theme-responsive-max.min.css?ver=6.0.2
IP
ASN #8741 Ratiokontakt GmbH
File type ASCII text, with very long lines (2845), with no line terminators
Hash 9ec1e03f4970277b6ae598dc31b44773
d70aa507f16dbf60b9ff569907dbb557262b6985
c7ef6632740b2c40efab4f565de3cf7e3a589e0d3fcdf92cb7dcc4c751c703e4
GET /wp-content/themes/hub/assets/css/theme-responsive-max.min.css?ver=6.0.2 HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.berufsorientierung-plus.de/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 11 Sep 2022 19:57:58 GMT
content-type: text/css
last-modified: Wed, 31 Aug 2022 10:01:30 GMT
etag: W/"630f317a-b1d"
strict-transport-security: max-age=15768000; includeSubDomains
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Sun, 11 Sep 2022 18:41:12 GMT
expires: Sun, 11 Sep 2022 20:41:12 GMT
cache-control: public, max-age=7200
age: 4606
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
use.typekit.net/puf6ztm.js
200 OK 6.7 kB URL HTTP/2 use.typekit.net/puf6ztm.js
IP
ASN #20940 Akamai International B.V.
File type Unicode text, UTF-8 text, with very long lines (2258)
Hash f8f511bb58a5741475e8c26f2f618166
71826d3c94effa7dd68c864954c856ad0f708da0
42bd6e457964bde1c760397dcca843d22e54856a2d4cd5a4e0bec8c303bddf83
GET /puf6ztm.js HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains;
cache-control: public, max-age=600, stale-while-revalidate=604800
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
content-encoding: gzip
content-length: 6676
date: Sun, 11 Sep 2022 19:57:59 GMT
X-Firefox-Spdy: h2
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/bootstrap/js/bootstrap.min.js
200 OK 1 B URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/bootstrap/js/bootstrap.min.js
IP
ASN #8741 Ratiokontakt GmbH
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/bootstrap/js/bootstrap.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 27255
Last-Modified: Wed, 31 Aug 2022 10:01:30 GMT
Connection: keep-alive
ETag: "630f317a-6a77"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
use.typekit.net/af/341355/000000000000000077359e98/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
200 OK 20 kB URL HTTP/2 use.typekit.net/af/341355/000000000000000077359e98/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 19492, version 1.0\012- data
Hash f5dee1c59acab830f05a1acf7a1faa40
7e1ea646f089007d5c3e78aea0c7c73a82a20c6d
365d62df2361f71d03c42759a078753c293ef35396d4b86dd46f1bdd311548b3
GET /af/341355/000000000000000077359e98/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.berufsorientierung-plus.de
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 19492
etag: "31a9ef1f7181193c266ba60d45b5dcfa7d946e2e"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 11 Sep 2022 19:57:59 GMT
X-Firefox-Spdy: h2
use.typekit.net/af/4a8a65/000000000000000077359e9c/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
200 OK 19 kB URL HTTP/2 use.typekit.net/af/4a8a65/000000000000000077359e9c/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
IP
ASN #20940 Akamai International B.V.
File type Web Open Font Format (Version 2), CFF, length 19088, version 1.0\012- data
Hash c52b5c6fca3ab064ec75627d8797dedc
d18f7f2da2ea5938b5d858fceb9ed0d4167389cf
1224ffd56d7c369fb81c27866dff663e5956f1ebe6c31d47902e3209e5c4abc9
GET /af/4a8a65/000000000000000077359e9c/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3 HTTP/1.1
Host: use.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.berufsorientierung-plus.de
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: application/font-woff2
content-length: 19088
etag: "1571544bef2f8837a6aeb1250eb60b01167a7b57"
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: public, max-age=31536000
date: Sun, 11 Sep 2022 19:57:59 GMT
X-Firefox-Spdy: h2
p.typekit.net/p.gif?s=1&k=puf6ztm&ht=tk&h=www.berufsorientierung-plus.de&f=12102.12103&a=1088800&js=1.21.0&app=typekit&e=js&_=1662926267962
200 OK 35 B URL HTTP/2 p.typekit.net/p.gif?s=1&k=puf6ztm&ht=tk&h=www.berufsorientierung-plus.de&f=12102.12103&a=1088800&js=1.21.0&app=typekit&e=js&_=1662926267962
IP
ASN #20940 Akamai International B.V.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 81144d75b3e69e9aa2fa3e9d83a64d03
f0fbc60b50edf5b2a0b76e0aa0537b76bf346ffc
9b9265c69a5cc295d1ab0d04e0273b3677db1a6216ce2ccf4efc8c277ed84b39
GET /p.gif?s=1&k=puf6ztm&ht=tk&h=www.berufsorientierung-plus.de&f=12102.12103&a=1088800&js=1.21.0&app=typekit&e=js&_=1662926267962 HTTP/1.1
Host: p.typekit.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=604800
content-type: image/gif
cross-origin-resource-policy: cross-origin
etag: "61c32ad2-23"
last-modified: Wed, 22 Dec 2021 13:40:34 GMT
server: nginx
content-length: 35
unused62: 8096267
date: Sun, 11 Sep 2022 19:57:59 GMT
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-0SLM5XP02Z>m=2oe970&_p=9136002&gdid=dZTNiMT&cid=1156627814.1662926268&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662926267&sct=1&seg=0&dl=http%3A%2F%2Fwww.berufsorientierung-plus.de%2Fbw%2F&dt=BO%5Bplus%5D%20Baden-W%C3%BCrttemberg%20-%20BO%5Bplus%5D%20-%20Ritterbach%20Verlag&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-0SLM5XP02Z>m=2oe970&_p=9136002&gdid=dZTNiMT&cid=1156627814.1662926268&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662926267&sct=1&seg=0&dl=http%3A%2F%2Fwww.berufsorientierung-plus.de%2Fbw%2F&dt=BO%5Bplus%5D%20Baden-W%C3%BCrttemberg%20-%20BO%5Bplus%5D%20-%20Ritterbach%20Verlag&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-0SLM5XP02Z>m=2oe970&_p=9136002&gdid=dZTNiMT&cid=1156627814.1662926268&ul=en-us&sr=1280x1024&_z=ccd.v9B&_s=1&sid=1662926267&sct=1&seg=0&dl=http%3A%2F%2Fwww.berufsorientierung-plus.de%2Fbw%2F&dt=BO%5Bplus%5D%20Baden-W%C3%BCrttemberg%20-%20BO%5Bplus%5D%20-%20Ritterbach%20Verlag&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.berufsorientierung-plus.de
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: http://www.berufsorientierung-plus.de
date: Sun, 11 Sep 2022 19:57:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4894843dd17150368f9e81305262c361
09c1036ec45f4da92b1749c5b0a76062d32ee681
5242d2bcde6e9f49b38e0749771de0388b9687af78be7b13a27e147b3e38684e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/manrope/v13/xn7gYHE41ni1AdIRggexSg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/manrope/v13/xn7gYHE41ni1AdIRggexSg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24328, version 1.0\012- data
Hash e85a0263f681aafb7837205b6b0baaa8
d2c7aa9f963a65ad0ce6f969018ca569c3a81cc3
a3c9bb0126992129d561e6615234943f04520c69bdba33205c935ca70414c2ef
GET /s/manrope/v13/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.berufsorientierung-plus.de
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 24328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 06:29:24 GMT
expires: Fri, 08 Sep 2023 06:29:24 GMT
cache-control: public, max-age=31536000
age: 307716
last-modified: Mon, 11 Jul 2022 19:14:32 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4894843dd17150368f9e81305262c361
09c1036ec45f4da92b1749c5b0a76062d32ee681
5242d2bcde6e9f49b38e0749771de0388b9687af78be7b13a27e147b3e38684e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 11 Sep 2022 19:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/jquery-ui/jquery-ui.min.js
200 OK 0 B URL HTTP/1.1 www.berufsorientierung-plus.de/wp-content/themes/hub/assets/vendors/jquery-ui/jquery-ui.min.js
IP
ASN #8741 Ratiokontakt GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/hub/assets/vendors/jquery-ui/jquery-ui.min.js HTTP/1.1
Host: www.berufsorientierung-plus.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.berufsorientierung-plus.de/bw/
Cookie: apbct_timestamp=1662926277; apbct_site_landing_ts=1662926275; apbct_page_hits=2; apbct_cookies_test=%257B%2522cookies_names%2522%253A%255B%2522apbct_timestamp%2522%252C%2522apbct_site_landing_ts%2522%252C%2522apbct_page_hits%2522%255D%252C%2522check_value%2522%253A%252270182049ffc4e32a19853868f295f4ce%2522%257D; apbct_urls=%7B%22www.berufsorientierung-plus.de%2Fbw%22%3A%5B1662926275%5D%2C%22www.berufsorientierung-plus.de%2Fbw%2F%22%3A%5B1662926277%5D%7D; apbct_site_referer=UNKNOWN; ct_sfw_pass_key=f709476ddacab99056abd43e6c2fbdb50
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 Sep 2022 19:57:58 GMT
Content-Type: application/javascript
Content-Length: 108112
Last-Modified: Wed, 31 Aug 2022 10:01:31 GMT
Connection: keep-alive
ETag: "630f317b-1a650"
Strict-Transport-Security: max-age=15768000; includeSubDomains
X-Powered-By: PleskLin
Accept-Ranges: bytes
212.223.17.158
142.250.74.174
95.101.11.115
93.184.220.29
95.216.200.119
184.31.15.48
0.0.0.0