sandrahalbe.com/
301 Moved Permanently 232 B IP
ASN #34788 Neue Medien Muennich GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1b2929d0e9eccbe977c5aaa038762a39
065c8ff7347fb4e5f9c6effc3dd01ed06096cbb8
38339b78bb5b2ec301e93d7c8e97ad11faa3418ea04c717d4debf8e5a41a27cf
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 29 Mar 2023 10:35:57 GMT
Server: Apache
Location: https://sandrahalbe.com/
Content-Length: 232
Keep-Alive: timeout=2, max=1000
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 93f633ce30c038eb581544323c5a971e
2f60526cb750c6babccc207f75fb5a8ae6f7598b
0ff6df80a892199848fb943af78541b66efc09a7ab70d4b169906fdbac1eabf8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FF6DF80A892199848FB943AF78541B66EFC09A7AB70D4B169906FDBAC1EABF8"
Last-Modified: Mon, 27 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10106
Expires: Wed, 29 Mar 2023 13:24:23 GMT
Date: Wed, 29 Mar 2023 10:35:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c83d39f350161ed2f5d20dcd68e47c92
2695a888e652cb314f8094cc6073c3364336d272
62e5cc6aea61c3c32acd964d4bbe143806416008181eebc4451a8f035b69a0bc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62E5CC6AEA61C3C32ACD964D4BBE143806416008181EEBC4451A8F035B69A0BC"
Last-Modified: Mon, 27 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5809
Expires: Wed, 29 Mar 2023 12:12:46 GMT
Date: Wed, 29 Mar 2023 10:35:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Length, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 29 Mar 2023 10:15:55 GMT
content-type: application/json
age: 1202
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ad3eec59bebbf969f175627757507c1
b176af3a70db378c9e1f219bab24d9d446070d6f
704fa284035b4c9aa487331b516f5f11c324e204756ae2503bad2606ed34f25e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "704FA284035B4C9AA487331B516F5F11C324E204756AE2503BAD2606ED34F25E"
Last-Modified: Mon, 27 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5691
Expires: Wed, 29 Mar 2023 12:10:48 GMT
Date: Wed, 29 Mar 2023 10:35:57 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: YdNxUcUuhuzqPZwayEAjlztAwDc70LK0X3cEw2t5bG0TESBzdkn3j30b8WbgLgDwU4JawHh7EaI=
x-amz-request-id: MB3MXYXFJVG5PRSP
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 29 Mar 2023 09:56:35 GMT
age: 2362
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 29 Mar 2023 10:35:57 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a740252e7b24892a3e34f6dfed6e3bde
d44d21abb95edd1ccc775632254f11ee94fb585e
e289995a2b4b340364dd7dfa32c79c7722ece6cc4b893b38fc68bbce680d2f94
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E289995A2B4B340364DD7DFA32C79C7722ECE6CC4B893B38FC68BBCE680D2F94"
Last-Modified: Mon, 27 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15828
Expires: Wed, 29 Mar 2023 14:59:45 GMT
Date: Wed, 29 Mar 2023 10:35:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f3e3509fb60819e752ea450781a93d24
7a4781ba4a4d41defcd0b598ac17ff5db5d38434
78a70eb409acff7fd2c88bd6786bec060b5c066991ec377f7ef9899e819c7bab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "78A70EB409ACFF7FD2C88BD6786BEC060B5C066991EC377F7EF9899E819C7BAB"
Last-Modified: Wed, 29 Mar 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 29 Mar 2023 16:35:57 GMT
Date: Wed, 29 Mar 2023 10:35:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, ETag, Expires, Alert, Pragma, Content-Type, Retry-After, Last-Modified, Content-Length, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 29 Mar 2023 10:14:36 GMT
age: 1281
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 1BEjPsHYubL8i2xWCZxZVw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9I81vE9vO1TSaFQCZInzp1sKMeE=
Date: Wed, 29 Mar 2023 10:35:57 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
sandrahalbe.com/
302 Found 0 B IP
ASN #34788 Neue Medien Muennich GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
vary: Accept-Language,User-Agent
x-redirect-by: Polylang
set-cookie: pll_language=de; expires=Thu, 28-Mar-2024 10:35:58 GMT; Max-Age=31536000; path=/; secure; SameSite=Lax
location: https://sandrahalbe.com/home/
content-length: 0
content-type: text/html
date: Wed, 29 Mar 2023 10:35:57 GMT
server: Apache
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5161
Expires: Wed, 29 Mar 2023 12:01:59 GMT
Date: Wed, 29 Mar 2023 10:35:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5161
Expires: Wed, 29 Mar 2023 12:01:59 GMT
Date: Wed, 29 Mar 2023 10:35:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 195589ff3c6c50463257f10da16de114
7119aeba010d5c5c224fa544feff6f1761739929
dbb5774621e0eee6f9641f6078a650a78d281019726ade7a52c150f0988cd12b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DBB5774621E0EEE6F9641F6078A650A78D281019726ADE7A52C150F0988CD12B"
Last-Modified: Wed, 29 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5161
Expires: Wed, 29 Mar 2023 12:01:59 GMT
Date: Wed, 29 Mar 2023 10:35:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8819ddc-015a-4da7-bf88-9a5f6fac4462.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8819ddc-015a-4da7-bf88-9a5f6fac4462.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab378a6531b886829e1762f72866500
9509f3e388d0f2627468b5ff8afd408eb19297a4
9535702379130bbc5e3439b2c226d3d8c51c6ee07690e64cbccf71e49085615c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8819ddc-015a-4da7-bf88-9a5f6fac4462.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9886
x-amzn-requestid: efa3e368-7941-467c-a4d7-f303b50a32a6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CK848FbOoAMFnXg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641aa838-5357cad3565e7b230505442f;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 07:03:20 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: KciHakKKPgHXxmKWMdBw144wMpqO1d3B9h-APM0Vf8z1bNlxSHDrJw==
via: 1.1 b6cdb2111444305bd4957a473b711ad6.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Mar 2023 22:04:54 GMT
age: 45064
etag: "9509f3e388d0f2627468b5ff8afd408eb19297a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da174e6ccc9451c5071ba10eeb97f6f6
c38827a9ac1218768839877263e1f2984fbdc454
76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9859
x-amzn-requestid: 7571f483-0d57-4f3f-9d86-2f18175cc0b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CRP5DG2BoAMFrdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641d2d06-400180d700df598366b8b16f;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 04:54:30 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 8LzPrLvhUnXntYPNCg_QN2LFUvQ-4FL4SMyYBxPOwlGd1sgL3j-Znw==
via: 1.1 8f251d23da31b683c3c9d6fad6ca944c.cloudfront.net (CloudFront), 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Mar 2023 11:39:23 GMT
age: 82595
etag: "c38827a9ac1218768839877263e1f2984fbdc454"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85885238-8732-476a-b37c-1eac5dbc3e90.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85885238-8732-476a-b37c-1eac5dbc3e90.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 253f48aa7cbf667d52cb37fda10cdb1f
e29478b866f90402b48d2b516d01d60a863c9cf9
b4a73ab71250b9e4a3f95e28dbf50dd000e1f338c7c3ac9f3351c1f6d6d3bfff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F85885238-8732-476a-b37c-1eac5dbc3e90.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6049
x-amzn-requestid: 2d1a2a66-8b63-44f0-83ec-10628a5fcac6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CgvBFFMGIAMFhCg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64235ed3-2a90bf0365925acb3b348489;Sampled=0
x-amzn-remapped-date: Tue, 28 Mar 2023 21:40:35 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: -XwoHom5AT8j5yHNvfnYQ-9xIqVpsyDffwFM0d_ESJicJvL8pTcABg==
via: 1.1 c28e01aa413e9ea602538ccda1511062.cloudfront.net (CloudFront), 1.1 536063cb28bfc05fcb7a78183dd89b72.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Mar 2023 21:50:28 GMT
age: 45930
etag: "e29478b866f90402b48d2b516d01d60a863c9cf9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82837d54-f5fc-402a-a4a6-33ec7bb5de07.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82837d54-f5fc-402a-a4a6-33ec7bb5de07.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 40b2b7066a48c83f06376dd31dd7f036
272e4db73b7bf0942a5a2099dc7a6a57568057d2
c27377b1dab6aec710e380cec289f91d49a88dd9b74a88be667965d69ae2f2ca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F82837d54-f5fc-402a-a4a6-33ec7bb5de07.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7395
x-amzn-requestid: 3bce8238-6474-4879-ac01-57d6df3e7dfc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CguJkF4hIAMF1lA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64235d70-7d6d9bc41abbea0b4ac8bc31;Sampled=0
x-amzn-remapped-date: Tue, 28 Mar 2023 21:34:40 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: FJvLC-mFLl9UgPL7FlVNucjv-Xe26yj81LrExEhFu9j1BnqE3vk6Lg==
via: 1.1 b6cdb2111444305bd4957a473b711ad6.cloudfront.net (CloudFront), 1.1 6ca7826fb0f4c565b1af9c7737725c48.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Mar 2023 22:01:52 GMT
etag: "272e4db73b7bf0942a5a2099dc7a6a57568057d2"
content-type: image/jpeg
age: 45246
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ef54a1ed997cc09495edb102ccdf6803
f5637efb37b5eecff77e60e6bcf5f599991f334f
fa76d7a82dc15baf02b207cea874d1332c20a0ebe1eea99929a6f2746608412c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0794d5a0-7014-425b-9ea0-5dca44ddb4dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8745
x-amzn-requestid: e1d8dab6-4c15-4752-b528-21854c93a11c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CguJ5Hy5oAMFyAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64235d72-4bd62c8472f7257a155b2a80;Sampled=0
x-amzn-remapped-date: Tue, 28 Mar 2023 21:34:42 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: FHONNj6M7I5oVTKAKYspq0ZAJMYohURXs5ufSL-r--zCSdjuSvrpSA==
via: 1.1 8f251d23da31b683c3c9d6fad6ca944c.cloudfront.net (CloudFront), 1.1 49cdeca097624936e070b73619df7da8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Mar 2023 21:51:37 GMT
age: 45861
etag: "f5637efb37b5eecff77e60e6bcf5f599991f334f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d713593-a582-498a-b202-20cddce4f8c4.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d713593-a582-498a-b202-20cddce4f8c4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fd1bc71c7e9eed7c086d752ea8b4b992
02a74cf88501d65b3dfcceb5adc79fd93ce785ed
a9a423d347533322d4d3ba90ee5fca5ca32f8d540f744ea2621deeda46df89f3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d713593-a582-498a-b202-20cddce4f8c4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7605
x-amzn-requestid: b7628073-4eb3-4ef6-b7d0-0224e0a75601
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CguY8GFPoAMFebQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64235dd2-445041c74356c54053f772a1;Sampled=0
x-amzn-remapped-date: Tue, 28 Mar 2023 21:36:18 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 2LLHDcPZsSP1XPxH7agC7FhVwQQXfrWq3CEOSz0mBTjGykXxNQIq9Q==
via: 1.1 ffc1e24c06bfbb135c0a4d240b382048.cloudfront.net (CloudFront), 1.1 536063cb28bfc05fcb7a78183dd89b72.cloudfront.net (CloudFront), 1.1 google
date: Tue, 28 Mar 2023 21:56:00 GMT
age: 45598
etag: "02a74cf88501d65b3dfcceb5adc79fd93ce785ed"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sandrahalbe.com/home/
200 OK 36 kB IP
ASN #34788 Neue Medien Muennich GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26341)
Hash 22148c609eb91e3a6db0401cbabac3b2
b9e7939b282ba20fbfe0ab3367556058bcf29f9e
8e470e5813f335f6d1c0e75c749c44d80068ea08e6dbc7ff561c6d662a307737
Analyzer Verdict Alert fortinet Malware
GET /home/ HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: pll_language=de
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
link: <https://sandrahalbe.com/wp-json/>; rel="https://api.w.org/", <https://sandrahalbe.com/wp-json/wp/v2/pages/102>; rel="alternate"; type="application/json", <https://sandrahalbe.com/>; rel=shortlink
vary: Accept-Encoding,User-Agent
content-encoding: br
content-type: text/html; charset=UTF-8
date: Wed, 29 Mar 2023 10:35:58 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/better-click-to-tweet/assets/css/styles.css?ver=3.0
200 OK 507 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/better-click-to-tweet/assets/css/styles.css?ver=3.0
IP
ASN #34788 Neue Medien Muennich GmbH
Hash 4be300781c971e445e944917b6e6069d
5996d9f780035108e23dfa98e3c1a39f0428c695
f95dbb11db021888d9303f0b36a3b06bd5e344a6a8a0d32b08eaa40ccc85885b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/better-click-to-tweet/assets/css/styles.css?ver=3.0 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Feb 2023 11:34:07 GMT
etag: "809-5f46afded204a-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 507
content-type: text/css
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/dsgvo-vimeo/css/jquery.fancybox.min.css?ver=6.1.1
200 OK 3.2 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/dsgvo-vimeo/css/jquery.fancybox.min.css?ver=6.1.1
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (14065), with no line terminators
Hash f0a657e5dd0ebe513dc9fd937cfadd42
ab1fc82aacba8c159e1dddb48cc915c5e6031a20
e5f06c1fe9e9a2875a40a075f87b36244ca66ddb91f85e1a9b2bc10a1074d60b
GET /wp-content/plugins/dsgvo-vimeo/css/jquery.fancybox.min.css?ver=6.1.1 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 06 Jun 2021 14:32:48 GMT
etag: "36f1-5c419cc8dbebd-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3198
content-type: text/css
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/fb-pixel-dsgvo/public//assets/css/pixelmate.css?ver=6.1.1
200 OK 24 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/fb-pixel-dsgvo/public//assets/css/pixelmate.css?ver=6.1.1
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (27327)
Hash 4a7f144949f11055ac112a81d15a8105
0a7302349c847fa1b04b15a54211f87920b34665
40827969aee33696f3701ed33d372bbaa32a6cd2e9079b5ccdab796f829b56cf
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fb-pixel-dsgvo/public//assets/css/pixelmate.css?ver=6.1.1 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 15:00:16 GMT
etag: "b12f-5f043b1999806-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 23862
content-type: text/css
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-leads/editor-layouts/css/frontend.css?ver=3.16
200 OK 5.0 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-leads/editor-layouts/css/frontend.css?ver=3.16
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (47129)
Hash 519c06775446ee6f8fa7f520aae3c7dd
395ef3e18ea260ff3eb0d5da045f22a27130b539
a552b279f87603b5979e06627e08c4f591e00086d9d2099a351fdb7df49486a7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/thrive-leads/editor-layouts/css/frontend.css?ver=3.16 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:17 GMT
etag: "b81a-5f68dc2838cdf-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 5029
content-type: text/css
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b
200 OK 628 B URL HTTP/2 sandrahalbe.com/wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (1626)
Hash 5b31f9f2f4e068d0932e615b4c1430d7
a84aad0dae77532f66a7777d67facca9a2e6ab6f
af3fdfe4f024a9ae6bad6e550e63a4636396208b9554a2eb5aa4f8a4de716d0e
GET /wp-includes/js/jquery/jquery.masonry.min.js?ver=3.1.2b HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 26 Aug 2017 10:37:01 GMT
etag: "71b-557a5a44ad7b7-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 628
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
200 OK 1.7 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/imagesloaded.min.js?ver=4.1.4
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (5477)
Hash b1ead9e078b8c6a5044a583ef6fbbd5e
577658f92d2657f1131a97b6f128dfdb50d21d1a
b337360f9345d0763a9394d9a2b032459e0fe6199bee2a4b76f2b8ca24d8b867
GET /wp-includes/js/imagesloaded.min.js?ver=4.1.4 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 21 Aug 2020 18:16:32 GMT
etag: "15fd-5ad673c8e681a-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1733
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/et-cache/102/et-divi-dynamic-102.css?ver=1678572418
200 OK 3.0 kB URL HTTP/2 sandrahalbe.com/wp-content/et-cache/102/et-divi-dynamic-102.css?ver=1678572418
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (7167)
Hash 0bd38c078dca592fce687433a71a044b
350e502dd4a17f2e6abcfd2e1c23573ebaf60242
3905f8f354b7877116ea92b90175f954e5ef84b71b586cbe80c3a6187f06d3d1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/et-cache/102/et-divi-dynamic-102.css?ver=1678572418 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Mar 2023 22:06:58 GMT
etag: "5591-5f6a718c386f5-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3014
content-type: text/css
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/fb-pixel-dsgvo/public//assets/js/dist/bundle.js?ver=1.0.0
200 OK 12 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/fb-pixel-dsgvo/public//assets/js/dist/bundle.js?ver=1.0.0
IP
ASN #34788 Neue Medien Muennich GmbH
File type HTML document, Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Hash 4dd26aabc1255c7dbc34a1f481cbae51
721ae64e5fbf34071d5e9a4f994aafa6bd703cdf
eb673f6481276a530ce0dd67b9cbe6098e5eb3b7f69afdeb87a8116b88aabea1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fb-pixel-dsgvo/public//assets/js/dist/bundle.js?ver=1.0.0 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 20 Dec 2022 15:00:16 GMT
etag: "16909-5f043b1991b06-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 11468
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 4.0 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (11126)
Hash 1fbb59519536e28eeb7ae7173973c39f
f6542c5d0f96f621eea4f3cb442021dfe33863fa
b1b54befd52c3605721bf8b5a6c0290c572929138358738826873751256b191c
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 19 Dec 2020 15:03:16 GMT
etag: "2bd8-5b6d286539769-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3998
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/masonry.min.js?ver=4.2.2
200 OK 7.1 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/masonry.min.js?ver=4.2.2
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (23966)
Hash b15709b26cbed268be463aeb7221d12d
8ece754f196cdbace087ee39d77784626f1bac9a
381c481a826838b8eadc28c8290f1928bea7edb660da92dfc08dd6bdf2d37122
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/masonry.min.js?ver=4.2.2 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 21 Aug 2020 18:16:32 GMT
etag: "5e4a-5ad673c8e681a-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 7130
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1678463805
200 OK 1.7 kB URL HTTP/2 sandrahalbe.com/wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1678463805
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (7838), with no line terminators
Hash b70c4b93855449edbf95afbb5832bfb6
1e7c53db5706fae93bfe85e2ad76f35330491979
dad6b0f55b92e819bfec66ae0f70ed1ef04a908a360db9325c7a5526d5d44368
Analyzer Verdict Alert fortinet Malware
GET /wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1678463805 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:56:45 GMT
etag: "1e9e-5f68dcee3ccc4-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1731
content-type: text/css
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/omgf/et-gf-open-sans/et-gf-open-sans.css?ver=1661438533
200 OK 374 B URL HTTP/2 sandrahalbe.com/wp-content/uploads/omgf/et-gf-open-sans/et-gf-open-sans.css?ver=1661438533
IP
ASN #34788 Neue Medien Muennich GmbH
Hash c06b6de2e236acff51b09c6794c5e063
b54136ca1a8b6808f3c31f44faac6f3a2df8b976
7b2d5c3a4f7bf838cb43ac8cb7612e435b9e1141f497c4fc7223f865adbf5076
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/omgf/et-gf-open-sans/et-gf-open-sans.css?ver=1661438533 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Sep 2022 16:18:53 GMT
etag: "688-5e9bf1de49fb2-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 374
content-type: text/css
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 30 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (65447)
Hash fb1aea2f7ce09f9d2e290d73d57defdf
62d40e64c8aeff20834868816d20d6a645fd2565
367cc15d582c7056695a307c1ef9b32a9e4810c16e33f27eac05909a1f57d4b4
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 10:51:58 GMT
etag: "15e54-5ecb6fac2afb9-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 30350
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/general.min.js?ver=3.18
200 OK 22 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/general.min.js?ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
Hash e68d0829ddd84932c53704b66c23869b
42a7771577f946c913c2cf76e779e991a413baf3
7813b8b370340b3f101eb104e27c2ba3e8fadafc0343eb5de071d938efe36b90
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/general.min.js?ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "1146c-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 22361
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/plupload/moxie.min.js?ver=1.3.5
200 OK 26 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/plupload/moxie.min.js?ver=1.3.5
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash e1e4cf1128636115aefc782b6dc7d6c1
0733b376565f9922d7051a295085c9af543638d7
aa94da9fa6e9f257ad81a8b95fd294028eab9eb4b6e1500124edb4c36b19b93e
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/plupload/moxie.min.js?ver=1.3.5 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 10:51:58 GMT
etag: "1555f-5ecb6fac0ea98-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 26471
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/fill-counter.min.js?v=3.18&ver=3.18
200 OK 341 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/fill-counter.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (666), with no line terminators
Hash 8fe543e34e5b1863fd1fbab0dbff9ef9
2b2dfed9085b6a203e3d5662c628620c59743c74
3f905b18578b1a54566c6b06cc0ad0d9eb47046879ee001b14c9ba73997576ba
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/fill-counter.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "29a-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 341
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/divider.min.js?v=3.18&ver=3.18
200 OK 395 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/divider.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (905), with no line terminators
Hash b7e79e912e3397757ceb8e46c827e0da
c08a54fe107b6bb32d1b28598c4e29fcd273ea3b
56821a497ab7cc8b6355645f84f209e55950ed9176454be106b800e684018337
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/divider.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "389-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 395
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/pricing-table.min.js?v=3.18&ver=3.18
200 OK 449 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/pricing-table.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (1087), with no line terminators
Hash b3c2da85cc2d7e01b4dff1ed74d83ffa
357cca17b67670e6a2cae0cc85b2d702931f26ed
064a643c96c8d3acaba69bc87b20fa5fb5f5c3948a0be4feac43aa5de5aef0cd
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/pricing-table.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "43f-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 449
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/omgf/inline-font-face-raleway/raleway-normal-latin-ext.woff2
200 OK 30 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/omgf/inline-font-face-raleway/raleway-normal-latin-ext.woff2
IP
ASN #34788 Neue Medien Muennich GmbH
File type Web Open Font Format (Version 2), TrueType, length 30448, version 1.0\012- data
Hash f6a5275600e3447cfa07e0ee749c765b
c5b0110362478148228002baf85595775cf53fd1
ab47b8f50fe4195819b4af2ac0fffb2b3543502e11282d492d6cd73c124845cf
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/omgf/inline-font-face-raleway/raleway-normal-latin-ext.woff2 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/2 200 OK
last-modified: Wed, 28 Sep 2022 16:18:55 GMT
etag: "76f0-5e9bf1e0e5f4f"
accept-ranges: bytes
content-length: 30448
content-type: font/woff2
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/content-reveal.min.js?v=3.18&ver=3.18
200 OK 970 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/content-reveal.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
Hash d1a932c716a61d7094d48a513d676aa8
1ace0715d443ac81c875b7c9cceacbf6072166a8
4440dade44acf64baad447676de3f0c3f0be0b87634558891a302b6d8f29e27a
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/content-reveal.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "5e7-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 683
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/conditional-display.min.js?v=3.18&ver=3.18
200 OK 988 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/conditional-display.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (881)
Hash eb593d502a320e24fbab95aa189d6157
6ac8a7a20b99e81148c35aa226e075291b84896c
12ede92e0b711c0423c1d504b46e39f9156ffeabbf52a37ed999d42f9ab695e9
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/conditional-display.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "2280-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2539
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/contact-form-compat.min.js?v=3.18&ver=3.18
200 OK 1.4 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/contact-form-compat.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
Hash f536bd3f676f1bf3f96741b39b0d969a
83e41da090b72b76c6318e9e7a59b9f8c672c5fb
ee26d08222f9151b45840938469f4db3c83049336bdc022a6323f7c01b3f3074
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/contact-form-compat.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "188f-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2160
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/styles/feed.css?ver=1.4.4
200 OK 4.9 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/styles/feed.css?ver=1.4.4
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (3985)
Hash dbd1da209add5983b3e742a12eab49fa
3cd956c2e49c2939a6167688d67fb0283e18a634
a7891dcd0ff1d1bb4d0d386612ef2fb3e0a754809bdcdeed78f90b9eb5a5738a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/spotlight-social-photo-feeds/ui/dist/styles/feed.css?ver=1.4.4 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Feb 2023 11:34:11 GMT
etag: "6777-5f46afe251895-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 4875
content-type: text/css
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/dsgvo-vimeo/js/jquery.fancybox.min.js?ver=6.1.1
200 OK 16 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/dsgvo-vimeo/js/jquery.fancybox.min.js?ver=6.1.1
IP
ASN #34788 Neue Medien Muennich GmbH
Hash e9d08ad8715f36338d9654412087de03
a7a8ef45835eadb9e83b8bb8a1a2410ab274a072
aa9ccdfa0451328bbe368c5d435e2349aefd7bb8ff40032f9801d466f7d8db1d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/dsgvo-vimeo/js/jquery.fancybox.min.js?ver=6.1.1 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 06 Jun 2021 14:32:48 GMT
etag: "f02e-5c419cc8daf1d-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 19110
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/activecampaign-subscription-forms/site_tracking.js?ver=6.1.1
200 OK 525 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/activecampaign-subscription-forms/site_tracking.js?ver=6.1.1
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (467)
Hash b38aec29207f0cbb13316cb8b9d870a4
c01e9c0abae09db20426fdd664257a61641c05db
4ef06105e6e36815a544091cec77bddacdeea25d18addfae60ed41e4f5d9bdca
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/activecampaign-subscription-forms/site_tracking.js?ver=6.1.1 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 14 Jun 2022 07:48:26 GMT
etag: "57b-5e163a13bc42c-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 525
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/omgf/inline-font-face-cormorant-sc/cormorant-sc-normal-latin-ext-500.woff2
200 OK 17 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/omgf/inline-font-face-cormorant-sc/cormorant-sc-normal-latin-ext-500.woff2
IP
ASN #34788 Neue Medien Muennich GmbH
File type Web Open Font Format (Version 2), TrueType, length 16992, version 1.0\012- data
Hash 1238a1e8c7eb7e202891a44135096b5c
556b160b4be9f1736ae09c252edf7d5196745c46
9d6e8f817d3f500e37993c97d0ea96ac2f0869044e064bd0d74840e98c53c793
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/omgf/inline-font-face-cormorant-sc/cormorant-sc-normal-latin-ext-500.woff2 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 28 Sep 2022 16:18:54 GMT
etag: "4260-5e9bf1dfc0fc2"
accept-ranges: bytes
content-length: 16992
content-type: font/woff2
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 12 kB URL HTTP/2 sandrahalbe.com/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (47826)
Hash 5e3752655a7a33c049db06c0edf386e6
573c51b0de413f30a220c9261506635f9daf2b81
d6571c641370e9bb83b25b5a493fca6ae3109ae384f7a8a9507ccdfb9067627d
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Nov 2022 00:03:23 GMT
etag: "172a9-5ed8b337ffb9c-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 11590
content-type: text/css
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2021/06/BE-unstoppable-Logo-3.png
206 Partial Content 29 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2021/06/BE-unstoppable-Logo-3.png
IP
ASN #34788 Neue Medien Muennich GmbH
Hash 5a033ec215e2ab48a5ff10738b341459
51e86560caa01219d14916096b1b1a12360f273f
1e929a7708891c62b1441ee7ef1ae3a0fd3211bf55a41548896a60ab245bf3a4
GET /wp-content/uploads/2021/06/BE-unstoppable-Logo-3.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Range: bytes=1291-
If-Range: "7680-5c41954f85a9c"
TE: trailers
HTTP/2 206 Partial Content
last-modified: Sun, 06 Jun 2021 13:59:22 GMT
etag: "7680-5c41954f85a9c"
accept-ranges: bytes
content-length: 29045
content-range: bytes 1291-30335/30336
content-type: image/png
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2016/11/Christinae-Sohn.jpg
200 OK 24 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2016/11/Christinae-Sohn.jpg
IP
ASN #34788 Neue Medien Muennich GmbH
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 530x530, components 3\012- data
Hash 32b96a07c594f75ca50af4f2dfce500f
c9a56907d1bbb7121761dc4fd1a63c0b4c9deeeb
bf9619579bd6dcad16ed93670747cd4c56b9a4cf23e0db0f8ed7f1afa45f8c16
GET /wp-content/uploads/2016/11/Christinae-Sohn.jpg HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 26 Aug 2017 20:50:45 GMT
etag: "5e4f-557ae372e5bcc"
accept-ranges: bytes
content-length: 24143
content-type: image/jpeg
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff
200 OK 92 kB URL HTTP/2 sandrahalbe.com/wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff
IP
ASN #34788 Neue Medien Muennich GmbH
File type Web Open Font Format, TrueType, length 92476, version 2.4\012- data
Hash 7d04c782e3ec7b655cb15e50245c4c49
6ac6c03ebcebc29f36f09525ae9564f12240776d
88795f28bb66a45f9c32245dd21d6319ed5d26a45bf5afa31d91a0f83ee855f7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Divi/core/admin/fonts/modules/all/modules.woff HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:57 GMT
etag: "1693c-5f68dc4db9806"
accept-ranges: bytes
content-length: 92476
content-type: font/woff
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-leads/js/frontend.min.js?ver=3.16
200 OK 7.1 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-leads/js/frontend.min.js?ver=3.16
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (30203), with no line terminators
Hash 288365759a763f268cf95eeed477a3fe
1b835f0257b2c04864ef00f9117267a7bf46d4b0
3a32d88cfe1e31c3dcce14f9c2b0be595b253872656b35f2f7316c165f9846fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/thrive-leads/js/frontend.min.js?ver=3.16 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:17 GMT
etag: "75fb-5f68dc2839c80-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 7104
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2020/07/Symbole.png
200 OK 103 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2020/07/Symbole.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 940 x 788, 8-bit/color RGBA, non-interlaced\012- data
Size 103 kB (102571 bytes)
Hash 26fcd9b91e7d1ffd710a87ef7b477447
f55f1f6a8122ba776e412da72df27eafdcbbd11a
d19505efbb2835352d67911832b7fb7f808b8452ee187fc7b0727d5437fae629
GET /wp-content/uploads/2020/07/Symbole.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 09 Jul 2020 19:42:07 GMT
etag: "190ab-5aa076b76126c"
accept-ranges: bytes
content-length: 102571
content-type: image/png
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2021/08/Mockup-7.png
200 OK 194 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2021/08/Mockup-7.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 810 x 450, 8-bit/color RGBA, non-interlaced\012- data
Size 194 kB (193512 bytes)
Hash 1d2f3d24b288a6242650874a4f80ed99
c936f12747996d0bfb933fb35d1be518fb741a0c
47581653335ca8f6e42261aed9adf0f85e6ed990f5ec6d08cb9a6f56e2376c63
GET /wp-content/uploads/2021/08/Mockup-7.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Aug 2021 20:15:08 GMT
etag: "2f3e8-5c8c17570e7e8"
accept-ranges: bytes
content-length: 193512
content-type: image/png
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/acf-dynamic-elements.min.js?v=3.18&ver=3.18
200 OK 8.3 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/acf-dynamic-elements.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (32130), with no line terminators
Hash 53070df82044c6db61c13de80c775874
47b0a9c51496813de9b73827ec0018c44ebd95cb
cf47a39e5a54de82040c9cefe0255b67345502e674c1a08269438dddfcfc9c02
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/acf-dynamic-elements.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "7d82-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 8300
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2023/02/Conscious-Business-Life-Creation-1280x607.png
200 OK 856 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2023/02/Conscious-Business-Life-Creation-1280x607.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 1280 x 607, 8-bit/color RGBA, non-interlaced\012- data
Size 856 kB (855840 bytes)
Hash 892ea6067bc785f0fcd3dac41431145b
69cf72f22647b54030e317a5a5df8045993dc695
e1f7d7f7b754dcaa2b8e1403188931f4a769144496f398cccf0e994b0c03f601
GET /wp-content/uploads/2023/02/Conscious-Business-Life-Creation-1280x607.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 13 Feb 2023 18:50:35 GMT
etag: "d0f20-5f4995284f6e6"
accept-ranges: bytes
content-length: 855840
content-type: image/png
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/css/thrive_flat.css?ver=3.18
200 OK 787 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/css/thrive_flat.css?ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
Size 787 kB (786739 bytes)
Hash 2bbb431851d669d8df00e6a374171013
6e1cc59a254896262a1d17f82a953f60ab1abf6f
66004ba9af72909ba954f2ef339a8e2e1eb9da74c0d70dad16d5125facfba73b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/css/thrive_flat.css?ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "ed444-5f68dc2b88788-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-type: text/css
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2023/02/Goldklecks.png
200 OK 663 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2023/02/Goldklecks.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 1080 x 1080, 8-bit/color RGBA, non-interlaced\012- data
Size 663 kB (663308 bytes)
Hash 218492ebd3c7eba6b8f925fa3db9f9d1
ff4069ac863d631a9ff0bc7376aaaee176594ae4
8479a8bfd72c52f14ffc9fd2960756c3c2512bea476641961fbe2660e18935a1
GET /wp-content/uploads/2023/02/Goldklecks.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 13 Feb 2023 20:44:43 GMT
etag: "a1f0c-5f49aeab56f47"
accept-ranges: bytes
content-length: 663308
content-type: image/png
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/audio.min.js?v=3.18&ver=3.18
200 OK 513 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/audio.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (1212), with no line terminators
Hash ee997931d8da2776d59560f5251529a9
e2021d7a10e0af9437482ca3f250d13d9278baa5
17fe18174a49de4a9fbc917c0019b8eac86ed49fe5d92b76eb059d9bd9ffacb6
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/audio.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "4bc-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 513
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2021/10/Steffi.jpeg
200 OK 866 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2021/10/Steffi.jpeg
IP
ASN #34788 Neue Medien Muennich GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2048x2048, components 3\012- data
Size 866 kB (865457 bytes)
Hash c9e0b5ae7046dd2bdc3ee916a4592848
96db679534abe1e616874825bbf228cb3a9767c7
fe4031f4ac36187d44ba1a3f4206bd587aad15af4016b66e44cb5448d25b9747
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/2021/10/Steffi.jpeg HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 27 Oct 2021 19:54:42 GMT
etag: "d34b1-5cf5af7148c2c"
accept-ranges: bytes
content-length: 865457
content-type: image/jpeg
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2023/02/Conscious-Business-and-Life-Creation.png
200 OK 2.4 MB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2023/02/Conscious-Business-and-Life-Creation.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 1080 x 1920, 8-bit/color RGBA, non-interlaced\012- data
Size 2.4 MB (2404744 bytes)
Hash 07b26eaee103ba99a0e1b17afdd1b180
9a398804d8768ee50e378a5ac3eab68ecce3623a
48b0a83792d22a7f19ca9d1b95eaf5f92a0206f611cb73614c6e0fefca284133
GET /wp-content/uploads/2023/02/Conscious-Business-and-Life-Creation.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Feb 2023 13:57:38 GMT
etag: "24b188-5f4bd7689a16f"
accept-ranges: bytes
content-length: 2404744
content-type: image/png
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/carousel-libs.min.js?ver=3.18
200 OK 10 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/carousel-libs.min.js?ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (43610), with no line terminators
Hash 02fe0f5984ff90541219d6e44dd1e2d5
8c5ce922490dbd0127ccf87899b4e112c1c2b0b1
1ffdba85fd4a7553610bcb85a7732a2511dd4543c63e95983fe6208995da044c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/carousel-libs.min.js?ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "aa5a-5f68dc2b77de7-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 10383
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:00 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/image-gallery.min.js?v=3.18&ver=3.18
200 OK 2.7 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/image-gallery.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
Hash 507e29f7c9fd9a2f34d78413642e03c2
9e2b0e65c70b72d3e39ac81dbc5caa5e731254b8
76d512a328c9d34ce3afddd4bcc4f440fc20663e951629b9129e8a683f577760
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/image-gallery.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "3033-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3638
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/contact-form-compat.min.js?v=3.18&ver=3.18
200 OK 2.2 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/contact-form-compat.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (6287), with no line terminators
Hash 59f4748a365ecc33095d975920092354
3a736f359990075777cbeb98c6e1813f6fbfbaca
d7ba260768d05c1571bf8d2947ca0190a19e6d12b65b9db06cb2a461c65506e0
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/contact-form-compat.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "188f-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2160
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/content-reveal.min.js?v=3.18&ver=3.18
200 OK 683 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/content-reveal.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (1511), with no line terminators
Hash 8b487ac8a5ba7e0c3c451f4ee3f4861a
4fca23ca31067614f29f674442afaf2591271297
9bfdbb18ba7d048051a0b4a37b20ba766cb20d0b5c796e0ca410b28c571e716b
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/content-reveal.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "5e7-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 683
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/countdown.min.js?v=3.18&ver=3.18
200 OK 2.8 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/countdown.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (8793), with no line terminators
Hash 323d8bda5d4bbfd475a64097707135e7
c180c44f98ba2e7ae00abcbac041b8269ce5a094
071bb1daa9a0abac92fabf21e75fabff7a002bf997f6767ed6412c04fbbcaef3
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/countdown.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "2259-5f68dc2b77de7-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2842
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/conditional-display.min.js?v=3.18&ver=3.18
200 OK 2.5 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/conditional-display.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (8832), with no line terminators
Hash 42e85106a04667b646dc8c973bcd17aa
e7c3063dccf9276073a7aebf147955fb9b34cac1
f7aa33918e45fe41107fee9e98cbe651e60f8bab05f49b95bcf67c66d42410d0
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/conditional-display.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "2280-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2539
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/search-form.min.js?v=3.18&ver=3.18
200 OK 2.6 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/search-form.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (10236), with no line terminators
Hash 8056bf26925859842bbaa3a0c187eaca
d06e049a0eb18426c49d716b8218527a9c104faf
226f1d339ca7337a200d62d7dd57ff8f3cbb908dfc0300b7d5375be9eab9bbd3
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/search-form.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "27fc-5f68dc2b77de7-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2589
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/dropdown.min.js?v=3.18&ver=3.18
200 OK 950 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/dropdown.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (3129), with no line terminators
Hash d43323c172da75cba048e7170162169b
7e6975a09ca1ce8ef050c15df451af0d9f5cdd12
41e09e8c296558e3dd4156cb6b3a5c9e785ce2e1b6aff8b92a91a1ba274b67c6
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/dropdown.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "c39-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 950
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/plupload/plupload.min.js?ver=2.1.9
200 OK 5.4 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/plupload/plupload.min.js?ver=2.1.9
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (15605), with no line terminators
Hash bad075cdce1a20a1f5ca99180e36364f
1df3d164dd49b49d7e44f6926373da36c1c7ce85
bbfc9bf8c6d512393f43436f59d33806c33debe070e5d1c038f8a77a031c171c
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/plupload/plupload.min.js?ver=2.1.9 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 10:51:58 GMT
etag: "3cf5-5ecb6fac0ea98-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 5376
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/file-upload.min.js?v=3.18&ver=3.18
200 OK 3.5 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/file-upload.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (9513), with no line terminators
Hash ca6af45d29b22b82d8cadc7349ac8ed4
f2f4dde2833c91eafa48f4f92aaa6e0297c5f5c7
35cf5b0a38df08b34e7c562327907e5229a22c8bb8e179d244dc6b2a1864940f
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/file-upload.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "2529-5f68dc2b77de7-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3508
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter.min.js?v=3.18&ver=3.18
200 OK 1.6 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (3876), with no line terminators
Hash e9b1ca3f58c49bd109f96e64e282314c
851749269c65a3c90282667f682bde77ffa54735
2d1d0bb29d935fcf5feafd3b08fa4a9c692e2710a6c993636b342e4689849d04
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "f24-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1578
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/image-gallery-libs.min.js?ver=3.18
200 OK 9.8 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/image-gallery-libs.min.js?ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (20000)
Hash b54d4629444e421b6d806d4866204c56
b0f94e81bf9aee68f597fd81500f96a9e1bafc8c
e1a4f81295b80aae1f9f80b961df1d02073923ac5362b06e5f5ef7a4a1483db7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/image-gallery-libs.min.js?ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "9bbc-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 9840
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/image-gallery.min.js?v=3.18&ver=3.18
200 OK 3.6 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/image-gallery.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (12339), with no line terminators
Hash 317cdc320564e1603b3dd1a6ff6a0eb9
f02c3048d3b8d3f3d0131cccf68a66820c08c945
064db51eb99822fc1f2b4b14ac5dc8098eeb73b9f200bb10073320aeca7f17bb
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/image-gallery.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "3033-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3638
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/lead-generation.min.js?v=3.18&ver=3.18
200 OK 5.8 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/lead-generation.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (18616), with no line terminators
Hash ab8aaa23cbef5a4eee017a978dd1ae91
8f6790347dc449e76315cb35bca2073c76c8a4d6
a027d40ce83f5a9465a01b4840fb7144cfa612c9c06efb38178e6504667e14c1
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/lead-generation.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "48b8-5f68dc2b77de7-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 5782
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/login.min.js?v=3.18&ver=3.18
200 OK 3.9 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/login.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (13744), with no line terminators
Hash 9e51a1c582a77632ce33d88de9617df2
958354f83226c35d012a3250654a9c3b06e7b44f
1b6cd580f96b698ea80deaf7c357bbe21c33efcdb37dc3d672e19812e032c668
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/login.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "35b0-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3911
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/menu.min.js?v=3.18&ver=3.18
200 OK 4.3 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/menu.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (14492), with no line terminators
Hash 00b83f3508022163c741836304098786
379f6f6d2d070f04fb2698d6756437679f8d33f7
4b10dd532dac00a3b4528d5927085c42e953c678a2d1f9ab3842a8a516020a9d
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/menu.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "389c-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 4261
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter-compat.min.js?v=3.18&ver=3.18
200 OK 390 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter-compat.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (871), with no line terminators
Hash 59e8f399d1a53e506328a35558289ec4
4a9f5780eca950b140b22f0be77f74d8aea85923
781cd2472ba86deaec4fb1aeedeab71a61f2db97c095e2d08c18e9381f348e15
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter-compat.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "367-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 390
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/post-grid-compat.min.js?v=3.18&ver=3.18
200 OK 565 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/post-grid-compat.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (1404), with no line terminators
Hash 6fb7efc7679ea89cab23f938bc4bb4e5
2feae56ebadecfa1b68d27240c4d47e93784f4fd
24426a02cae3af19c36fd55f5535fce55b048aa1779e8236475e5744ada558e9
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/post-grid-compat.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "57c-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 565
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/pagination.min.js?v=3.18&ver=3.18
200 OK 2.1 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/pagination.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (6411), with no line terminators
Hash 6999b4e7db91d27ca550b07fd4d4ae43
e4699f0aaf62c578e577870c2d7847dffd028ada
88cee91c6a792f7a583be692f044786a50a2cf2fa379cfab6039baad63e6beab
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/pagination.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "190b-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2056
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/post-list.min.js?v=3.18&ver=3.18
200 OK 1.4 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/post-list.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (4128), with no line terminators
Hash 9b82682f316b35401920cb486e587dbc
fef4d7761b3228296d76cde8c88a86b7acda95ef
ae8b686c26cf255bcc94f141a76cb08a5a97870dbe6ba0ac4c2e66fc9f303fe1
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/post-list.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "1020-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1417
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/post-list-filter.min.js?v=3.18&ver=3.18
200 OK 1.9 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/post-list-filter.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (6642), with no line terminators
Hash 84ff968370d83d4dadecbc50305c2e09
8ffee19188802a26ef36c5473d893e4a43339fe3
8fa7ee6864289bf62699c2b07c296567a11769457f2c7042bb92ffd0dcceec89
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/post-list-filter.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "19f2-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1946
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/progress-bar.min.js?v=3.18&ver=3.18
200 OK 1.6 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/progress-bar.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (5187), with no line terminators
Hash 1484d2cbf8256e8642deb3fadeda8223
daa932e4af109f2971815eb9cd9ce1281a73d52a
56e5da4bab4e656f558873993111ad1d46fddc21aaa9e6f837f46f3cc008183e
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/progress-bar.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "1443-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1591
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/social-share.min.js?v=3.18&ver=3.18
200 OK 2.1 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/social-share.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (6032), with no line terminators
Hash c3b910aa011b32edcfc71767a79a2bd1
879aefdd8a2dbf2edd425b24d0c9c5e1641dddd9
c597c277db9aa3f5e2f3c4f10c299dd89a6f50f21a197f774ca869651da4053f
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/social-share.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "1790-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2131
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/table.min.js?v=3.18&ver=3.18
200 OK 646 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/table.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type Unicode text, UTF-8 text, with very long lines (1500), with no line terminators
Hash c22f91bf21bdc339a03f96fc153c3110
cd2379009a8772c625c55395771f4887ec924396
d0ea0b643e1d1601056a4f4b97f48132d766902ff57b8fffc1320a2bb82c40e5
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/table.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "5df-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 646
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/tabs.min.js?v=3.18&ver=3.18
200 OK 1.4 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/tabs.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (4653), with no line terminators
Hash 706fb31dd865e64f8921908b3d3c4974
f896be40cc09601bfe6123f33c51cf88129613af
76c9e67f1c388df51b9f31a76dfca8f033efa03270620983f49fbbb688147ae0
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/tabs.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "122d-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1365
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/timer.min.js?v=3.18&ver=3.18
200 OK 1.4 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/timer.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (3739), with no line terminators
Hash 37456c27333e0c054429fc16c57e8534
dad6a1a75c36878891885a0912b1aa1f0c0068b2
7fca140aecd0821021574ce268483f4d7a3e1ae761434ae0b40ff5a86662b86e
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/timer.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "e9b-5f68dc2b77de7-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1402
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/toc.min.js?v=3.18&ver=3.18
200 OK 3.6 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/toc.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (11195), with no line terminators
Hash 1cebd12f4b454b1381d0b50fc1280524
83673473b63fc2a40da579023c0b835019b08da1
54b24417cba60209cdd409d6b9bebec3dca7e5ec9b11dbe544ff3f08fb0d3191
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/toc.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "2bbb-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3621
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:01 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/toggle.min.js?v=3.18&ver=3.18
200 OK 1.5 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/toggle.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (5322), with no line terminators
Hash 7d50f77edb53fa03d766fdb64204860c
81ee83586e9e8417fe52812d537d6dc6d655c620
2db52fbfdd763317913c7a2456518e9abd3960f77144e7ac657bd5468f0330f0
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/toggle.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "14ca-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1450
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/twitter.min.js?v=3.18&ver=3.18
200 OK 389 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/twitter.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (769), with no line terminators
Hash a02bd0a33ba315df1d8aade93e8a1496
72d7fbd00a6cd2622e3bbd600708e9cd6b8b62ba
fee2953357f6816f26e2e1d1f76350592bf12d711ed184360847eaf8a8126087
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/twitter.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "301-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 389
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/user-profile.min.js?v=3.18&ver=3.18
200 OK 2.3 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/user-profile.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (6360), with no line terminators
Hash ed44503ece2a1435aaf5c51ecda37b21
3e786097e03b2f36e9962ada3aed4de742a92381
a842b50071510dbb369629ba466241f61128cea5dab5f1c6661e8c41857ae929
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/user-profile.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "18d8-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2257
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/video.min.js?v=3.18&ver=3.18
200 OK 4.7 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/video.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (15627), with no line terminators
Hash 181478d24f4597ae1d2a451d31cef5c5
967b8fb5002295dd480040fc3188a93aceaa762a
4594d48c4d2a32a1c7873366218c4ed0e0f71ee36c6ddb293a6cce8f41e03116
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/video.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "3d0b-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 4740
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.20.2
200 OK 57 kB URL HTTP/2 sandrahalbe.com/wp-content/themes/Divi/js/scripts.min.js?ver=4.20.2
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (65467)
Hash dd226d11df6cde29ff6e41aa77829bb9
8b659337d714ed5c2598fa27f998a50cf020e837
d40e0eb590e69574937103385b8d81f685447fcc5284b3902ca6db280825ea31
GET /wp-content/themes/Divi/js/scripts.min.js?ver=4.20.2 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:56 GMT
etag: "42f5a-5f68dc4d907c4-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 57305
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/thrive-dashboard/js/dist/frontend.min.js?ver=3.31
200 OK 856 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/thrive-dashboard/js/dist/frontend.min.js?ver=3.31
IP
ASN #34788 Neue Medien Muennich GmbH
File type HTML document, ASCII text, with very long lines (2034), with no line terminators
Hash 5b5bfeed2fef133a927ad14e5d43b42e
02fd2d056ef9ea6ebdd3c5218b5a1f65a8b5cb88
28f060726f2a0d49d6439fa2a174f5817feb31ab9403287146e039c0dabd3a49
GET /wp-content/plugins/thrive-quiz-builder/thrive-dashboard/js/dist/frontend.min.js?ver=3.31 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "7f2-5f68dc2bb94ca-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 856
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.20.2
200 OK 1.2 kB URL HTTP/2 sandrahalbe.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.20.2
IP
ASN #34788 Neue Medien Muennich GmbH
File type HTML document, ASCII text
Hash 0b48bc45be29612b20f8ab79fb740971
66cb055d6791b64a61ae9732ce3f2ababb4d3bec
f786f9ce9a99056dbf4816efae8bfea927a4e4aa20b7aceffb2da75f538adc69
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/jquery.fitvids.js?ver=4.20.2 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:56 GMT
etag: "d15-5f68dc4da01c5-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1158
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.20.2
200 OK 490 B URL HTTP/2 sandrahalbe.com/wp-content/themes/Divi/core/admin/js/common.js?ver=4.20.2
IP
ASN #34788 Neue Medien Muennich GmbH
Hash ee17d99496ac4821e1587463b0a885ef
517237695d013cfd58c436443b1e3c4279cbb3e5
609ad33eeffca0d77419ac5f83bc391a27db80b25f57512886d4a46b96271b70
GET /wp-content/themes/Divi/core/admin/js/common.js?ver=4.20.2 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:57 GMT
etag: "53f-5f68dc4db8866-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 490
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/runtime.js?ver=1.4.4
200 OK 693 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/runtime.js?ver=1.4.4
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (1515), with no line terminators
Hash 10823db5bcacfff5cc211767e9334257
cd093a51d856463ea97a2690557031eb73f9b944
69ee1bc1bd8f6bdb178300c101aa0c6081b31453a69ff77e3d0834725f1ea508
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/spotlight-social-photo-feeds/ui/dist/runtime.js?ver=1.4.4 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Feb 2023 11:34:11 GMT
etag: "5eb-5f46afe251895-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 693
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
200 OK 2.4 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (6475), with no line terminators
Hash fd9569e5d4d99499e7712f61cd673089
96c465e0479831743968bdd243bd3bcbfaaa6e44
ea064fac3384ce935085b6a08a0b5379be3b747b3ce9ea87b6c9d41d1cd93f02
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.13.9 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 30 May 2022 09:51:58 GMT
etag: "194b-5e0379b64977f-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2362
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200 OK 6.4 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
IP
ASN #34788 Neue Medien Muennich GmbH
File type Unicode text, UTF-8 text, with very long lines (17819), with no line terminators
Hash 68ac7f65718f620d2a08c8dd44990aee
51864b639a094231cd78cde224b119cb920d7d11
cfb9e332da756003e32aaf8503cd187ac0307b74742742e38348fe783a655b14
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 10:51:58 GMT
etag: "459f-5ecb6fac17738-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 6352
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/dist/vendor/react.min.js?ver=17.0.1
200 OK 4.3 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/dist/vendor/react.min.js?ver=17.0.1
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (11082)
Hash 3c82b1031c942bff41a591c3f2d71729
1c6de183dbec0cb91927ce792db8805ee55214a4
cf872e5a28736346719da8d73e91c873afec0c13e3e4fa3cd22ae18df89de57d
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/dist/vendor/react.min.js?ver=17.0.1 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 30 May 2022 09:51:58 GMT
etag: "2c3c-5e0379b64977f-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 4287
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/dist/vendor/react-dom.min.js?ver=17.0.1
200 OK 37 kB URL HTTP/2 sandrahalbe.com/wp-includes/js/dist/vendor/react-dom.min.js?ver=17.0.1
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (65290)
Hash 908078c8c662602bd630382c63c224ce
feeee7bc9e0e267c45e05a5541ca6175927d8676
6cee5c27c65c0f6cac762f1a5ae45acbcc061f435e801bbaa35e1a9f5c342d02
GET /wp-includes/js/dist/vendor/react-dom.min.js?ver=17.0.1 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 30 May 2022 09:51:58 GMT
etag: "1ce9e-5e0379b64977f-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 36924
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/common-vendors.js?ver=1.4.4
200 OK 40 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/common-vendors.js?ver=1.4.4
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (65464)
Hash 53b418d8c5fe78e3e324a7ba8ef8e1f3
ea2b269bb546c7c32edbe114459ed3cbe88c024e
0f1ab25445a8554c139aafe77e36864c8cb4af14fc35adf9a14f3c81e821d8ef
GET /wp-content/plugins/spotlight-social-photo-feeds/ui/dist/common-vendors.js?ver=1.4.4 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Feb 2023 11:34:11 GMT
etag: "25372-5f46afe2508f5-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 40549
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/common.js?ver=1.4.4
200 OK 15 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/common.js?ver=1.4.4
IP
ASN #34788 Neue Medien Muennich GmbH
File type Unicode text, UTF-8 text, with very long lines (50117), with no line terminators
Hash 21e2853997efb43163308a37ad98544b
36dd1c845044ba144fa5fe60e17204537ff0c4dc
3a3cba13b25def26c3b56e11774f2b22eddc3bfe00a9ced7b31296abf84f65e5
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/spotlight-social-photo-feeds/ui/dist/common.js?ver=1.4.4 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Feb 2023 11:34:11 GMT
etag: "c3c7-5f46afe251895-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 14777
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/feed.js?ver=1.4.4
200 OK 17 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/feed.js?ver=1.4.4
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash 65911e2ca09c9faa54e1634db9505548
3829cc101b710af7f220ed0d9c185a4403636b19
601a9d037f25e1e7b5cd3704685ab6c4e7f12ec9b5ad45e5027d1d189d727b15
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/spotlight-social-photo-feeds/ui/dist/feed.js?ver=1.4.4 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Feb 2023 11:34:11 GMT
etag: "112b9-5f46afe251895-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 17433
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/front-app.js?ver=1.4.4
200 OK 1.5 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/spotlight-social-photo-feeds/ui/dist/front-app.js?ver=1.4.4
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (3337), with no line terminators
Hash 84a0dca0eb335bbb4f8eda7a781dbbd5
8b9fa8511ec75b2f73ba0537350ff995e99ffb1d
086c11a85ce64fa7198981fb54161c2370ed121cba3dcb8b35a7132b515a8c89
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/spotlight-social-photo-feeds/ui/dist/front-app.js?ver=1.4.4 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 11 Feb 2023 11:34:11 GMT
etag: "d09-5f46afe251895-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1455
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.20.2
200 OK 36 kB URL HTTP/2 sandrahalbe.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.20.2
IP
ASN #34788 Neue Medien Muennich GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash 896be44f500fc2ffddb95f7fe04a6ae4
e0ad9ae53593cb5da02e6057b41a8a7effa17212
37aa8e1953027b1594fde3caded45334af7439cb9d12cf4c939122846f75f6e3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/js/motion-effects.js?ver=4.20.2 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:56 GMT
etag: "26901-5f68dc4da01c5-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 35869
content-type: application/javascript
date: Wed, 29 Mar 2023 10:36:02 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2020/07/cropped-5-1-32x32.png
200 OK 1.2 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2020/07/cropped-5-1-32x32.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 63bf38516678f1c68a033c93e06ade4b
867907c6ea77333eace91e47a8a165d598a9a938
200c4264950949b7576c8a0cf2d8ea0dff3fc55fbe25d84a0e5378178f86f787
GET /wp-content/uploads/2020/07/cropped-5-1-32x32.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 09 Jul 2020 20:24:07 GMT
etag: "48e-5aa0801a1f153"
accept-ranges: bytes
content-length: 1166
content-type: image/png
date: Wed, 29 Mar 2023 10:36:03 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2020/07/cropped-5-1-192x192.png
200 OK 14 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2020/07/cropped-5-1-192x192.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash f96642bb4784d0fd9db889f631c261b4
2572a7fe3fe0132aabdf34a40ab331d13dbcb047
4e3a84c4e25c7020aa11472fae51968821a6d6d9bbb1570c935d8a9c3d0978da
GET /wp-content/uploads/2020/07/cropped-5-1-192x192.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 09 Jul 2020 20:24:07 GMT
etag: "363f-5aa0801a135d3"
accept-ranges: bytes
content-length: 13887
content-type: image/png
date: Wed, 29 Mar 2023 10:36:03 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/et-fonts/Sebastian-Bobby.otf
200 OK 112 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/et-fonts/Sebastian-Bobby.otf
IP
ASN #34788 Neue Medien Muennich GmbH
File type OpenType font data\012- data
Size 112 kB (111520 bytes)
Hash 378252178f47663562537d4d7c5e21f6
a5588e2ffce00dfddfb8b61fe03176178d499487
a4758734e3caa3b45aa0dd972b5da32f01620f490acd81538bc44e3824622132
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/et-fonts/Sebastian-Bobby.otf HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 05 Jul 2021 14:22:59 GMT
etag: "1b3a0-5c6610ad7c7a6"
accept-ranges: bytes
content-length: 111520
vary: User-Agent
content-type: font/otf
date: Wed, 29 Mar 2023 10:36:03 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2021/05/wedding_engagement_37-3.png
200 OK 120 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2021/05/wedding_engagement_37-3.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 1920 x 935, 8-bit colormap, non-interlaced\012- data
Size 120 kB (119924 bytes)
Hash 7b22b195adae1b87c95276471d33888d
bef4c2156140b8d31543b33628e67caf01b3c1e3
c7279e91eafce0cb7ca796b66c90ae2f1f9def7a5a857b83d22f786d966403f8
GET /wp-content/uploads/2021/05/wedding_engagement_37-3.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 02 May 2021 13:08:41 GMT
etag: "1d474-5c1588b480af3"
accept-ranges: bytes
content-length: 119924
content-type: image/png
date: Wed, 29 Mar 2023 10:36:03 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2021/08/9.png
200 OK 650 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2021/08/9.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 650 kB (649780 bytes)
Hash acb7c82bce1f5c5ed4636f3c4f8214d8
5d62ce929557f10588b52bb21b26ec4858f18ade
208b27234fd7d6014a9267ce0475849d9fd0379c75677027be7b2f7af9cca912
GET /wp-content/uploads/2021/08/9.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Aug 2021 19:40:50 GMT
etag: "9ea34-5c8c0fac71cc0"
accept-ranges: bytes
content-length: 649780
content-type: image/png
date: Wed, 29 Mar 2023 10:36:03 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2022/02/13.png
200 OK 969 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2022/02/13.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 969 kB (969426 bytes)
Hash 8acafd324c6622bd5a58764387a162db
62fb3f799ef19e5554f9a4c92566a89d43c15367
309eda6f8966113eb8d674ea0c9d94e73a38f4c6121e338ab0e62286e15919ec
GET /wp-content/uploads/2022/02/13.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 01 Feb 2022 12:06:21 GMT
etag: "ecad2-5d6f3bab695ae"
accept-ranges: bytes
content-length: 969426
content-type: image/png
date: Wed, 29 Mar 2023 10:36:03 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2020/06/22.png
200 OK 895 kB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2020/06/22.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 1200 x 700, 8-bit/color RGBA, non-interlaced\012- data
Size 895 kB (894589 bytes)
Hash c3562e4932ad4b152ab753a3e0e6a49f
3f4b0e9b6d922eb48f7d3c0ed8b4fc24dca3c3ff
07e9ca999bab9454406a1cfd6c9e10a2489f6080dcd2e606cf685b16008bbc0b
GET /wp-content/uploads/2020/06/22.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 11 Jun 2020 12:11:15 GMT
etag: "da67d-5a7cddb6d624b"
accept-ranges: bytes
content-length: 894589
content-type: image/png
date: Wed, 29 Mar 2023 10:36:03 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2023/01/Header-1899-%C3%97-800-px-9.png
200 OK 1.1 MB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2023/01/Header-1899-%C3%97-800-px-9.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 1899 x 750, 8-bit/color RGBA, non-interlaced\012- data
Size 1.1 MB (1086001 bytes)
Hash 62f56478264c9ff4f54d30075e85af51
92a4d12dd2c3b32ce6aec8e583f4faf4227c82de
3bbf89e7aaac327e0f5d904c022a83aaa3840091df3bd12a7fb7f4b12503c39e
GET /wp-content/uploads/2023/01/Header-1899-%C3%97-800-px-9.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 20 Jan 2023 14:52:52 GMT
etag: "109231-5f2b33434348a"
accept-ranges: bytes
content-length: 1086001
content-type: image/png
date: Wed, 29 Mar 2023 10:36:03 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2021/08/Header-2.png
200 OK 1.6 MB URL HTTP/2 sandrahalbe.com/wp-content/uploads/2021/08/Header-2.png
IP
ASN #34788 Neue Medien Muennich GmbH
File type PNG image data, 1200 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 1.6 MB (1629890 bytes)
Hash b7ec638bf4671cb73c5a714440a8178c
30827c41e359166643f585e4545c344d6fe3be8f
608cda0cb2a7011df720dbd121752f85e7df33b79d947d1d179f4f8f8ceaab39
GET /wp-content/uploads/2021/08/Header-2.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 05 Aug 2021 08:57:53 GMT
etag: "18dec2-5c8cc1d481092"
accept-ranges: bytes
content-length: 1629890
content-type: image/png
date: Wed, 29 Mar 2023 10:36:03 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/search-form.min.js?v=3.18&ver=3.18
200 OK 16 kB URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/search-form.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
Hash 3bdfeeee5d893071f072c3a1ab2480d0
e299cc9e042adf3b914678667863db139093e756
d86ff50ad84aa78ee1413523acecef3bd0df8d39d8dbb7a3b2ae6eb663d0b258
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/search-form.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "27fc-5f68dc2b77de7-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2589
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter.min.js?v=3.18&ver=3.18
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "f24-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1578
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter-compat.min.js?v=3.18&ver=3.18
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter-compat.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/number-counter-compat.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "367-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 390
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2022/03/11.png
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/uploads/2022/03/11.png
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/uploads/2022/03/11.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 31 Mar 2022 12:28:27 GMT
etag: "a12fd-5db82cc888123"
accept-ranges: bytes
content-length: 660221
content-type: image/png
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2021/06/BE-unstoppable-Logo-3.png
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/uploads/2021/06/BE-unstoppable-Logo-3.png
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/uploads/2021/06/BE-unstoppable-Logo-3.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sun, 06 Jun 2021 13:59:22 GMT
etag: "7680-5c41954f85a9c"
accept-ranges: bytes
content-length: 30336
content-type: image/png
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2020/07/Symbole.png
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/uploads/2020/07/Symbole.png
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/uploads/2020/07/Symbole.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 09 Jul 2020 19:42:07 GMT
etag: "190ab-5aa076b76126c"
accept-ranges: bytes
content-length: 102571
content-type: image/png
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2023/02/Conscious-Business-and-Life-Creation.png
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/uploads/2023/02/Conscious-Business-and-Life-Creation.png
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/uploads/2023/02/Conscious-Business-and-Life-Creation.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 15 Feb 2023 13:57:38 GMT
etag: "24b188-5f4bd7689a16f"
accept-ranges: bytes
content-length: 2404744
content-type: image/png
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2021/08/Mockup-7.png
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/uploads/2021/08/Mockup-7.png
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/uploads/2021/08/Mockup-7.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 04 Aug 2021 20:15:08 GMT
etag: "2f3e8-5c8c17570e7e8"
accept-ranges: bytes
content-length: 193512
content-type: image/png
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2023/02/Goldklecks.png
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/uploads/2023/02/Goldklecks.png
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/uploads/2023/02/Goldklecks.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 13 Feb 2023 20:44:43 GMT
etag: "a1f0c-5f49aeab56f47"
accept-ranges: bytes
content-length: 663308
content-type: image/png
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/toc.min.js?v=3.18&ver=3.18
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/toc.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/toc.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "2bbb-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3621
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/carousel.min.js?v=3.18&ver=3.18
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/carousel.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/carousel.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "fe3-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 1446
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/uploads/2023/02/Conscious-Business-Life-Creation-1280x607.png
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/uploads/2023/02/Conscious-Business-Life-Creation-1280x607.png
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/uploads/2023/02/Conscious-Business-Life-Creation-1280x607.png HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Mon, 13 Feb 2023 18:50:35 GMT
etag: "d0f20-5f4995284f6e6"
accept-ranges: bytes
content-length: 855840
content-type: image/png
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-leads/js/frontend.min.js?ver=3.16
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-leads/js/frontend.min.js?ver=3.16
IP
ASN #34788 Neue Medien Muennich GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/thrive-leads/js/frontend.min.js?ver=3.16 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:17 GMT
etag: "75fb-5f68dc2839c80-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 7104
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/menu.min.js?v=3.18&ver=3.18
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/menu.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/menu.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "389c-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 4261
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-includes/js/plupload/plupload.min.js?ver=2.1.9
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-includes/js/plupload/plupload.min.js?ver=2.1.9
IP
ASN #34788 Neue Medien Muennich GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/js/plupload/plupload.min.js?ver=2.1.9 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 05 Nov 2022 10:51:58 GMT
etag: "3cf5-5ecb6fac0ea98-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 5376
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/file-upload.min.js?v=3.18&ver=3.18
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/file-upload.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/file-upload.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "2529-5f68dc2b77de7-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 3508
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/audio.min.js?v=3.18&ver=3.18
200 OK 0 B URL HTTP/2 sandrahalbe.com/wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/audio.min.js?v=3.18&ver=3.18
IP
ASN #34788 Neue Medien Muennich GmbH
GET /wp-content/plugins/thrive-quiz-builder/tcb/editor/js/dist/modules/audio.min.js?v=3.18&ver=3.18 HTTP/1.1
Host: sandrahalbe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://sandrahalbe.com/home/
Cookie: pll_language=de
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Fri, 10 Mar 2023 15:53:21 GMT
etag: "4bc-5f68dc2b76e47-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 513
content-type: application/javascript
date: Wed, 29 Mar 2023 10:35:59 GMT
server: Apache
X-Firefox-Spdy: h2
85.13.153.233
23.36.77.32
35.241.9.150