der-kerzenmacher-2021-neue-preise.vitoweb.de/
301 Moved Permanently 20 B URL HTTP/1.1 der-kerzenmacher-2021-neue-preise.vitoweb.de/
IP
Hash 4a4dd3598707603b3f76a2378a4504aa
a0fddd5458378c1bf3c10dd2f5c060d1347741ed
f61f27bd17de546264aa58f40f3aafaac7021e0ef69c17f6b1b4cd7664a037ec
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 05 Sep 2022 03:32:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
Set-Cookie: XTCsid=1prq3po5uae4fvvu4mtkdu0hlq; path=/; domain=.der-kerzenmacher-2021-neue-preise.vitoweb.de; HttpOnly
Location: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
X-Content-Type-Options: nosniff
X-Powered-By: PHP/7.2.34, PleskLin
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 05 Sep 2022 02:44:41 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: qXUiFpAutPmMhb6dDlxMreqh3IvJGL8jsxTsG3RuJm-3IYXkrTdQ0Q==
Age: 2877
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d931e0142ef5ffe9cdb4c4c6bfcb9bc9
d9c4caf525e8926b042a14f38d374cc4033ed768
f610984fb0a75b3a31424faa860cbc8172c7f21804df1dc14fbb685b7c456f29
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14073
Expires: Mon, 05 Sep 2022 07:27:11 GMT
Date: Mon, 05 Sep 2022 03:32:38 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 05 Sep 2022 01:15:19 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PDsS9fsXgjDBP9e1wABFBeGprGezrzyeLOeMkZqHNG3wuCx4tK9tBQ==
age: 8241
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:38 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bd23ac3439f916ccafece6715b408595
d9f0dd922518f46b0f056aa2e872269fe32a1606
0295a965da9f329b806c02cf3a6459767af3f1a255b848f725b1edfb87736b64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0295A965DA9F329B806C02CF3A6459767AF3F1A255B848F725B1EDFB87736B64"
Last-Modified: Sat, 03 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 05 Sep 2022 09:32:38 GMT
Date: Mon, 05 Sep 2022 03:32:38 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Mon, 05 Sep 2022 02:38:16 GMT
Cache-Control: max-age=3600
Expires: Mon, 05 Sep 2022 03:07:41 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VKpCwtPzUOwCC-itaea-zKyzB1y-hzu62D5UfQd-r00Cef7mVaEu6Q==
Age: 3263
ocsp.digicert.com/
200 OK 471 B IP
Hash 77d035f38a45e8a1ec30d5fe9611880b
01cf34de95257da64dac90edf5a86203f1160271
7dc687d6bb1679ba5567e58b4f8c1e78766e7ee36273ba7f62068c595d57f7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1604
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 05 Sep 2022 03:32:39 GMT
Last-Modified: Mon, 05 Sep 2022 03:05:55 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: m1DIvB1b7gXRUCaRREIflQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: PVG4fjtCEH19A6/eVX6VfamZARY=
cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
200 OK 27 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/3.3.1/jquery.min.js
IP
File type ASCII text, with very long lines (65451)
Hash 77bd61b98f7b67af56639229724f8dd4
f04f07dd8ff53e58c32b738f81b71a014bca441d
8ce54c3b77bf31899b27b29188ff4936b580f2bd2b3222d43dda2851ba272e24
GET /ajax/libs/jquery/3.3.1/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: application/javascript; charset=utf-8
content-length: 27433
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-1538f"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 980949
expires: Sat, 26 Aug 2023 03:32:39 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J9dD54Yh8p2dEdjM5bPe5d6%2FIJcnhccTB1cF1KOM%2FrfDV5OITB4irSGPDFXYLak%2BGhipXNxpEigAnahoWSLwrRXa071A1MqLJ0P%2FVaf1B34sMcsIemlu%2BDzflwS35DN8MIkd%2BVlU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 745be6256d1db4f9-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/logos/der-kerzenmacher-logo_logo.png
200 OK 24 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/logos/der-kerzenmacher-logo_logo.png
IP
File type PNG image data, 470 x 120, 8-bit/color RGBA, non-interlaced\012- data
Hash 93482a5359767c4d6661767befb3ea66
96915d33aa601d6c9342841f35fc8a22bc5a8616
fe55bef19931c225279c18b3e3b973e55c05cd67f78655cc1e42546da49ba6d6
GET /images/logos/der-kerzenmacher-logo_logo.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: image/png
content-length: 24113
last-modified: Wed, 02 May 2018 08:50:54 GMT
etag: "5ae97bee-5e31"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Icon-Kirche.png
200 OK 3.7 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Icon-Kirche.png
IP
File type PNG image data, 195 x 184, 8-bit/color RGBA, non-interlaced\012- data
Hash 0df1d86b15dd25ed764e5b212affea1c
4ad291532c29575602533c2feb807a4aea421d63
e5faa3323683306693d82f28210be940ddfdce5909c1928c7b7c20e58a385d5e
GET /images/content/startseite/Icon-Kirche.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: image/png
content-length: 3690
last-modified: Mon, 30 Apr 2018 12:46:36 GMT
etag: "5ae7102c-e6a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Icon-Kuchen.png
200 OK 3.1 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Icon-Kuchen.png
IP
File type PNG image data, 195 x 184, 8-bit/color RGBA, non-interlaced\012- data
Hash 296158975352438962f6474f944d22b5
8e34c813773f44215d0987ef26a050d958343c74
0b7b5b36eab4443171b7144635327bc1e8c7540002153c072a685144e250dae5
GET /images/content/startseite/Icon-Kuchen.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: image/png
content-length: 3138
last-modified: Mon, 30 Apr 2018 12:46:38 GMT
etag: "5ae7102e-c42"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Icon-zur-Kerzengalerie.png
200 OK 12 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Icon-zur-Kerzengalerie.png
IP
File type PNG image data, 187 x 131, 8-bit/color RGBA, non-interlaced\012- data
Hash 8551b6275c825846fae2cb9b5e24b1cb
95d58c06e78e9a5120e4685139ea4fda3780b6d0
9ebd356fa42e4bb920eef08e8d9ab5bd7eade74f99dd2d5550424701264faa51
GET /images/content/startseite/Icon-zur-Kerzengalerie.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: image/png
content-length: 11811
last-modified: Wed, 23 Jun 2021 13:03:48 GMT
etag: "60d33134-2e23"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Icon-Haus.png
200 OK 3.4 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Icon-Haus.png
IP
File type PNG image data, 195 x 184, 8-bit/color RGBA, non-interlaced\012- data
Hash 208eda2802e6577909e2ebb741638ef2
af36aa2ee9dd074ace9669c1542495e35a47df6e
aa46f5a2057cfac09108ebf8254bcc955bb14fee854d3316f461832cbcbfe1b5
GET /images/content/startseite/Icon-Haus.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: image/png
content-length: 3351
last-modified: Mon, 30 Apr 2018 12:46:36 GMT
etag: "5ae7102c-d17"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Unterschrift-Mentzer.gif
200 OK 10 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Unterschrift-Mentzer.gif
IP
File type GIF image data, version 89a, 630 x 269\012- data
Hash 2b8d6b9417a5bca68e7866bc4f31bf1a
839441c2250e6057a0e15ec1cf93b0116e3e6d15
83d785c7d1332e6bab1f68ffcf4ab217da529585ce11d46255061d10dbbd8b76
GET /images/content/startseite/Unterschrift-Mentzer.gif HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: image/gif
content-length: 10060
last-modified: Thu, 29 Nov 2018 11:52:00 GMT
etag: "5bffd2e0-274c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Emblem-Mitglied-Kerzeninnung.png
200 OK 9.0 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Emblem-Mitglied-Kerzeninnung.png
IP
File type PNG image data, 350 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash fb50581c0d989ad54eebf15bf6cf21fd
7b004035bf10cf3101553abb67ee73c31b11eca5
5d4e0aff00656d97cc44503ea39c2defa00bf204f3a20354d9b0b6f7a0fafec6
GET /images/content/startseite/Emblem-Mitglied-Kerzeninnung.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: image/png
content-length: 8962
last-modified: Mon, 30 Apr 2018 15:34:18 GMT
etag: "5ae7377a-2302"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Emblem-Kirchenkerzen-qualitaet.png
200 OK 8.4 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/content/startseite/Emblem-Kirchenkerzen-qualitaet.png
IP
File type PNG image data, 360 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 363e26bed6cd25e66efb7b3da63a3ace
9ecbe8dcbdd1647ae6f7a94e70affb20f66dc82d
621c9c9121c033dff78794226ca506a8ce4c82096f25ed0446611bfea1ac9b27
GET /images/content/startseite/Emblem-Kirchenkerzen-qualitaet.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: image/png
content-length: 8395
last-modified: Mon, 30 Apr 2018 15:41:06 GMT
etag: "5ae73912-20cb"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/Cover-Der-Kerzenmacher-Jahreskatalog-2021.jpg
200 OK 78 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/Cover-Der-Kerzenmacher-Jahreskatalog-2021.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 567x595, components 3\012- data
Hash 1a48f158a29ede574e9a612d2704d4ea
1e08db226006b2e40fe5192bd4e61b444b1f57d4
a2bf5694bee4ffb9a5bb83aa05bd0862fbfec56a9051ad507f0d2459a7297550
GET /templates/Honeygrid/assets/images/kerzenmacher/Cover-Der-Kerzenmacher-Jahreskatalog-2021.jpg HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: image/jpeg
content-length: 77734
last-modified: Thu, 24 Sep 2020 09:28:20 GMT
etag: "5f6c66b4-12fa6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/header-footer-background-gradient.png
200 OK 1.8 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/header-footer-background-gradient.png
IP
File type PNG image data, 6667 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash a50d1226dd9962ced32a500976a1611a
f81085e0f62d7899447e963f9d5e85633dbe1117
dbf6a7830b3634d6ed287ab8946d01a68f56a6f7f9e36f5b522e1e7eaa838575
GET /templates/Honeygrid/assets/images/kerzenmacher/header-footer-background-gradient.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: image/png
content-length: 1780
last-modified: Thu, 26 Apr 2018 08:32:16 GMT
etag: "5ae18e90-6f4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/topbar-icon-merkzettel.png
200 OK 1.5 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/topbar-icon-merkzettel.png
IP
File type PNG image data, 40 x 38, 8-bit/color RGBA, non-interlaced\012- data
Hash b78146eaed6534869363a59e182ddc1e
bf415e88be7f1ad73c496ac3e87da3ac18ce3451
37b6d93f35563bb0244674afea4ea1f1232ddd0242c64f8c3a964bd9751dca45
GET /templates/Honeygrid/assets/images/kerzenmacher/topbar-icon-merkzettel.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: image/png
content-length: 1481
last-modified: Wed, 02 May 2018 14:26:26 GMT
etag: "5ae9ca92-5c9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/gm/javascript/GMCounter.js
403 Forbidden 859 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/gm/javascript/GMCounter.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 3be0a717ef8d7e266fb4345915fd59c2
6b9538113b49de09df13439b10e3257b40221308
b4d8ed7ebb036505c4c67fb33530d04689f66c2244042c6998ed47d273783e6f
Analyzer Verdict Alert fortinet Phishing
GET /gm/javascript/GMCounter.js HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: text/html
last-modified: Tue, 11 Sep 2018 15:44:29 GMT
etag: W/"31b-5759a596ffbf2"
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/lupe.png
200 OK 502 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/lupe.png
IP
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 32b5372a80f290153842bbe1b59a03f6
2e19f644167dc73afb5cd28836441a98f0612937
2e6a0668a2405c1779fd58fa3df21b2fdc85a09050f349349e271ef4884489c2
GET /templates/Honeygrid/assets/images/kerzenmacher/lupe.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: image/png
content-length: 502
x-accel-version: 0.01
last-modified: Mon, 30 Apr 2018 15:08:14 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/pfeil-navigation-rechts.png
200 OK 307 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/pfeil-navigation-rechts.png
IP
File type PNG image data, 17 x 28, 8-bit/color RGBA, non-interlaced\012- data
Hash b7c4e900958c6db8241f49d9816d2435
446a7b2deb163a46a8d0bc1812dea5a2294b620e
1583bc713486bc42668948f6d4b5749540e3680c2951c07d8edf5a467b8f52b7
GET /templates/Honeygrid/assets/images/kerzenmacher/pfeil-navigation-rechts.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: image/png
content-length: 307
x-accel-version: 0.01
last-modified: Mon, 30 Apr 2018 15:03:38 GMT
accept-ranges: bytes
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/styles/fontello/font/gm.woff?51482360
200 OK 3.7 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/styles/fontello/font/gm.woff?51482360
IP
File type Web Open Font Format, TrueType, length 3708, version 1.0\012- data
Hash 879d16d10b45a4a5684cf7629df07e5e
3d02b1cb623ed236220d906e6a288185b0eb90dd
321b912826aeee7df4abcd02df436ca3be0d036be254335254942a9d4fa40302
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/styles/fontello/font/gm.woff?51482360 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/font-woff
content-length: 3708
last-modified: Thu, 19 Apr 2018 18:44:00 GMT
etag: "5ad8e370-e7c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/init-de.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 210 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/init-de.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type HTML document, ASCII text, with very long lines (36066)
Size 210 kB (210455 bytes)
Hash a1329a53e08e9ac0bf5a67b3856c5700
a64951c0a754320c24466592483ce4e07f61ef67
30be2135791158802a2dede7bc736446ff6a421ccc4e2cbfa2283fd01d7da397
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/init-de.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: application/javascript
last-modified: Mon, 04 Oct 2021 08:10:10 GMT
etag: W/"615ab6e2-85d13"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/fonts/pt-sans-v9-latin-700.woff2
200 OK 47 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/fonts/pt-sans-v9-latin-700.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46620, version 1.0\012- data
Hash f6d5807c5cbc7ff22671d30fbf09ae1a
f6573b244a01641be40c01ea0fe7a404b766ff86
080d87ea98497809417441c5267bcc92f38883b7023d125e7766b1f4ca8658df
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/fonts/pt-sans-v9-latin-700.woff2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/font-woff2
content-length: 46620
last-modified: Mon, 30 Apr 2018 10:17:28 GMT
etag: "5ae6ed38-b61c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/slider_images/Headergrafik-Desktop-1600x450px-2021.jpg
200 OK 323 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/slider_images/Headergrafik-Desktop-1600x450px-2021.jpg
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1600x450, components 3\012- data
Size 323 kB (323366 bytes)
Hash 03c70b2f009d3d46edad72d60a856fa5
68cc6df5e00e117e3b642822a06ac8818399c938
ff92349a472e263f429551ee5ae7e31bce0eea3e911059e2037b37966f79eec3
GET /images/slider_images/Headergrafik-Desktop-1600x450px-2021.jpg HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: image/jpeg
content-length: 323366
last-modified: Thu, 24 Sep 2020 09:15:04 GMT
etag: "5f6c6398-4ef26"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/button-to-the-shop.png
200 OK 6.3 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/button-to-the-shop.png
IP
File type PNG image data, 240 x 244, 8-bit/color RGBA, non-interlaced\012- data
Hash 20d468ebb729751947eccc71dd33b3e4
2e8832a439bf2ffc1186540d2d62522e0ce99cc9
ffae76b0d0accf5a6c3ef593d30616001d9b9fa5c8862769b691ef0f04d908a7
GET /templates/Honeygrid/assets/images/kerzenmacher/button-to-the-shop.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: image/png
content-length: 6270
last-modified: Mon, 07 May 2018 13:04:30 GMT
etag: "5af04ede-187e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/trenner-schatten-oval.png
200 OK 5.6 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/images/kerzenmacher/trenner-schatten-oval.png
IP
File type PNG image data, 3200 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 812fe0429f9db4953a45d2a7b81e569f
4b96432fcb9cf786327ecbfa3372e49d26683411
36649e81c757e109765b2ca0ad9d8c768a49fa24630bd4aa659a8889d8131c68
GET /templates/Honeygrid/assets/images/kerzenmacher/trenner-schatten-oval.png HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: image/png
content-length: 5564
last-modified: Mon, 30 Apr 2018 13:10:58 GMT
etag: "5ae715e2-15bc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/fonts/pt-sans-v9-latin-italic.woff2
200 OK 42 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/fonts/pt-sans-v9-latin-italic.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 42136, version 1.0\012- data
Hash 57d98c19d7c99ec67ffdf8a265dd2144
54044a62f82565f02058d2deb67beafa4c576c8e
b0c71d14ae42fed217357c70691810c8b9d61fb997a78e9602d6772fb6887b11
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/fonts/pt-sans-v9-latin-italic.woff2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/font-woff2
content-length: 42136
last-modified: Mon, 30 Apr 2018 10:17:28 GMT
etag: "5ae6ed38-a498"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/fonts/pt-sans-v9-latin-700italic.woff2
200 OK 32 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/fonts/pt-sans-v9-latin-700italic.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 32512, version 1.0\012- data
Hash 83aaeeeca467b3c673dd42800227b438
a3351eebea901d4190af7096a0c61b5255b9f76c
9ca370312feb280f7829d8e2cb879d286b36e4bca35f5dbc2926dd83d7c15b02
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/fonts/pt-sans-v9-latin-700italic.woff2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/font-woff2
content-length: 32512
last-modified: Mon, 30 Apr 2018 10:17:26 GMT
etag: "5ae6ed36-7f00"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/controllers/initialize.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 112 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/controllers/initialize.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with no line terminators
Hash 470d2d00fb6bd54ed6bea65cc37ba500
1205ffb5dff1b0fea89af9dac9f6005159fd8099
c22dcd6e156611568f4168f213ee5013ab3c0cf3be485da06cb282e1c14e63c7
GET /templates/Honeygrid/assets/javascript/engine/controllers/initialize.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 112
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:52 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/header.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 512 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/header.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (982), with no line terminators
Hash 98312159ce0080f68b01d7df2a1bac48
a05aa5fba0e55d14496bc6f785f403b01c9ae0e7
42e48ba538ae4b0344817a5f9bb0f0934bf86895a37dc1aca88a69c0d0a819ae
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/header.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 512
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/image_maps.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 178 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/image_maps.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with no line terminators
Hash 88c035b5cac4a434bf9215e3bc4f0b1d
b840ab77f11202a5888be8c32f87f1c95225f4d5
4f93d72a0e1e326ccc385848fdbdb7ce1546d0a9164b7ece48692ac0525ac559
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/image_maps.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 178
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/modal.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 364 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/modal.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (583), with no line terminators
Hash e0befdc08a1388de633d77ac2bc84934
c1c02662378d1bca5c8e75742b7443433f035912
855c6d61041b58c01ecfac7248515e18b869ff4d91d2152f67de3a98a5b2bae3
GET /templates/Honeygrid/assets/javascript/engine/widgets/modal.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 364
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/history.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 228 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/history.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (368), with no line terminators
Hash cae124380091d030160beb4e6f6d8458
72f9455655d0df0df72bdaa3d714a8a024642efc
b0e12a7ff77c3c751d83c165087287c29941e4f514b5c4872c9e390327d4c517
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/history.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 228
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/core_workarounds.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 328 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/core_workarounds.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (665), with no line terminators
Hash 2a8a4da201018c551c45971c2448443c
74e5712e3b16a97ff975a299617af382526b4f8a
9b7c4c9633af6e2a8b31a3904f5d941d30a81b773fe96f1b32f19aa6e28d84ee
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/core_workarounds.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 328
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/anchor.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 303 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/anchor.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (421), with no line terminators
Hash bbe641f4e6dbec59595d6c793d34bdc1
6068b5148516e7d0560797a4ae9baa27fed4936f
b305cb1a8e9b7295c3c5a0c884a2e3543a486cbb8853d5870aaa7f7e2d8c9ba8
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/anchor.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 303
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/link_crypter.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 304 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/link_crypter.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (461), with no line terminators
Hash 6feb593e0f19610943fcea5e30c14a53
09206eeaf9bb3ee740f5d39dd9fd626130e2e853
7b23263ca15c5e7549d4c2e95fc98477ec9f64d009493be9a761d18f6886688e
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/link_crypter.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 304
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/cookie_bar.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 328 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/cookie_bar.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (500), with no line terminators
Hash 81ef020540040934cdf5eba74a0ccd51
cd627c0e7224801d96253ec91f2477ac5eaaf589
e4d93e2a1a791a452be21c5eaa39297ff0d9a9300ba52b2c734d9ebfd6db0a4a
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/cookie_bar.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 328
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/slider_flyover.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 139 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/slider_flyover.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with no line terminators
Hash 69c442a85688d019f0903ea105fd26f7
a1e57ff19369cde0927178854f5c9617e1587cd3
bb83330d884fdf87f576327a45487e7a36a647ebd0ece72051e7747d1867619b
GET /templates/Honeygrid/assets/javascript/engine/widgets/slider_flyover.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 139
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/pageup.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 360 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/pageup.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (566), with no line terminators
Hash a7ef88f3fb72965142c6cb7fbf47db86
befc7e660fb7f780065891ae2321d7e5e9371906
5679c494a7f2d163c29a5cc38228ed435932189e58ad362a351866e14a71863c
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/pageup.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 360
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/gm/javascript/GMCounter.js
403 Forbidden 22 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/gm/javascript/GMCounter.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 705617ce19c01b12bd31a4fd93c184a2
ce379e448df75c22cced295f2c45f5080fd7d265
e54670bcf16e3db483066d278451d1101bbfec11bd835eb4590ab8372f34b96a
Analyzer Verdict Alert fortinet Phishing
GET /gm/javascript/GMCounter.js HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: text/html
last-modified: Tue, 11 Sep 2018 15:44:29 GMT
etag: W/"31b-5759a596ffbf2"
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/images/logos/favicon.ico
200 OK 1.2 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/images/logos/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash d5ec88b8d8d5741668067419ac192696
36126d285a0a32af94dd7a34c5b886e4093e695f
89a2252bed87dce4359cb6c49cb2c383a0423c3bf1c4169b72bc5abae0cca54d
GET /images/logos/favicon.ico HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Fri, 27 Apr 2018 11:12:34 GMT
etag: "5ae305a2-47e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/JSEngine/build/libs/hooks.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 546 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/JSEngine/build/libs/hooks.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (900), with no line terminators
Hash 9d85f21b199ae817bd413e466a96d233
aa497ab52a344be28592a6af4514dca42b51ec97
80f0f5c18a1b3a6f6a86bada3f9519034ad5c2848d94961a9a4ebce4855e3100
GET /JSEngine/build/libs/hooks.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 546
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:25:08 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/JSEngine/build/vendor/jQuery-rwdImageMaps/jquery.rwdImageMaps.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 433 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/JSEngine/build/vendor/jQuery-rwdImageMaps/jquery.rwdImageMaps.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (743), with no line terminators
Hash 6a643a05193e7a92bab3b8a71adf4464
db43381d483198e7cc0cdb92e08e468425221207
c75c5c4dee18c8f80e1077ec3b9b8cbd59d40e840bf72208cdefc4c0d721d3f4
GET /JSEngine/build/vendor/jQuery-rwdImageMaps/jquery.rwdImageMaps.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 433
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:25:10 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/libs/responsive.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 465 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/libs/responsive.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (869), with no line terminators
Hash 91e071e8e305632e85bd0becc5ce6256
59b7c5a9b1a91f8f5a333cad5201234b2fb60510
3288598f9d8887b3712ef52b63848a53e743e606a8f0c223353cfdae953746d5
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/libs/responsive.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 465
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/menu.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 3.2 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/menu.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with very long lines (9165), with no line terminators
Hash 37b780b1d523e9228a2435cfc7f3d180
f5b77bd499cd0210c920ce3564bec55cfba54179
28365415371ab3024f824498a9f63bc9128fb5d300917c74cf151fb29da0add5
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/menu.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-23cd"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/libs/interaction.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 170 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/libs/interaction.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
File type ASCII text, with no line terminators
Hash 532488e0e6f5ca9903e8593295fa29ee
25deacf255247bae9e90e47b9b6501427344dccc
5dcc838b362d27e49a81a675792176bceb56fde2bfc4f15fabad0a09072d7622
GET /templates/Honeygrid/assets/javascript/engine/libs/interaction.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
content-length: 170
x-accel-version: 0.01
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
x-powered-by: PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/fonts/fontawesome-free/fa-solid-900.woff2
200 OK 74 kB URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/fonts/fontawesome-free/fa-solid-900.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 73852, version 1.0\012- data
Hash fb493903265cad425ccdf8e04fc2de61
fef2f08d60e907750df0bc41ce64a7139642ddf0
7798165ee5a3c6809310d8261dcbe7c8d0c12d795b7b09a71af3eb86ec8f33f2
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/fonts/fontawesome-free/fa-solid-900.woff2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/main.min.css?bust=1633012520
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/font-woff2
content-length: 73852
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: "5c0e3ef2-1207c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10542
Expires: Mon, 05 Sep 2022 06:28:22 GMT
Date: Mon, 05 Sep 2022 03:32:40 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10542
Expires: Mon, 05 Sep 2022 06:28:22 GMT
Date: Mon, 05 Sep 2022 03:32:40 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca4ce97d-6ffc-4b05-bad2-5c1a4358c1dc.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca4ce97d-6ffc-4b05-bad2-5c1a4358c1dc.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f231416a9629ddd9d4bc86c2a8c21e1
05815550329d38fcd02ac12f197fc2ec0d271830
1703f0782b7d1724b2313c25ee084d872d3602f883f9a7260ab19568e726ffde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca4ce97d-6ffc-4b05-bad2-5c1a4358c1dc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6928
x-amzn-requestid: 4334dae0-e303-4de5-ba80-2b3986f56e0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0fmFFv8oAMFseA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311ac8d-606e9fe5320e5c4370be53df;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:11:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: iWQxM5komFWuJ6ZyTyPVr7u3PBk4s0ihrcHgus71C7SBV8uUk2uicg==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 05:53:01 GMT
age: 77979
etag: "05815550329d38fcd02ac12f197fc2ec0d271830"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30bf854fd3e27e2313a3d26fc43b9990
032acf1bfb0c8e2cbce8f2ff4d2964424b044951
7641be64dd25487edf4f845d1fbb0b07daa80fa8fb58863dd09081d9d169bd13
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13d7f0db-89d6-4166-b182-85e35e518df9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: de0e8998-4a52-4651-bcd6-3068c50193b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2Eq4oAMFZlQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-15da44d87bf486cb1738fe18;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nqxzicnkQPrjStpPaMIZAukyjtUBQaXfuxWzIs77YGDyJmnirlMsxw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:54:51 GMT
age: 20269
etag: "032acf1bfb0c8e2cbce8f2ff4d2964424b044951"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F875b1350-d6cb-484b-b34d-981135d4edad.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F875b1350-d6cb-484b-b34d-981135d4edad.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1935776a22a3379977b4e2a3a6ad9079
2ee2724614ed7b510724651a68f54de6f29c3315
c123ea12ec946994c78755d0ad73f566c2c38ea43f2962456a25d671015a6e9e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F875b1350-d6cb-484b-b34d-981135d4edad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8450
x-amzn-requestid: 09422049-cf88-4c04-b58c-c8924d460cbf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz_PSESnIAMFXtA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631178c8-14eee8873bb8f57805ff906b;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:30:16 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ro0_HGtYHJJuUueDwK-5QnyYqR8CYocfc497m84QVbEBDSAQAPTEMw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:45:50 GMT
age: 20810
etag: "2ee2724614ed7b510724651a68f54de6f29c3315"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bd909ca-6c46-4b8b-a2f5-4d5470335397.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bd909ca-6c46-4b8b-a2f5-4d5470335397.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e4d6973685c96423469bad0cdf87aef3
9c00f2f5c3677908c2bdd8c1272d50d113672a88
f0fccb7a9c7bd00777e74b67ef248b1d9596ccaeb40b24c3451f4a65d0079968
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4bd909ca-6c46-4b8b-a2f5-4d5470335397.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7358
x-amzn-requestid: d925ec69-0baa-4dc0-912c-ab4d0e86ffac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey3GRfIAMFmyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-041f82c20184278e2bfaad12;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: FjgrWe3PbQeEjqtBdrv4qZYxS-dsxh3ia9K5cxPxLq8pImfznoXFpQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:56:00 GMT
age: 20200
etag: "9c00f2f5c3677908c2bdd8c1272d50d113672a88"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0c070a1-cfda-4086-99d7-f4d72a7f9d8f.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0c070a1-cfda-4086-99d7-f4d72a7f9d8f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9d19ae40ba0a61c69d0bbc87ed8da454
064232b77c890404a294500597e562b3945453be
a2d2bfe5d44394511949665e36492706dd655a46198bf7ae555033eedfa46d83
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe0c070a1-cfda-4086-99d7-f4d72a7f9d8f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6486
x-amzn-requestid: 94ff7301-4895-4fad-81db-a2774c8db061
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3OeaFDYIAMFQBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312c45c-450abb734f447a2c2db18aae;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 03:05:00 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: pcrrGlk4FtCV3t2iaTy4yKa2mo3qdWbnLPEz0fu8VpfLdZMgjL3aIw==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:43:50 GMT
age: 85730
etag: "064232b77c890404a294500597e562b3945453be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f31081f-706c-4ba5-8026-d80f418f0e9a.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f31081f-706c-4ba5-8026-d80f418f0e9a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4d1d7d95258e80e549a36826ffd55d8b
2f3d6053c4014cbdabf2187474997eb2156f168a
7a8c4fa0f58191a0830de1921a128d1a49b9627f5e87bb153645b7687b3f8f5c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f31081f-706c-4ba5-8026-d80f418f0e9a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11538
x-amzn-requestid: d429060b-9a2e-4bdc-8fd8-ade90fa26566
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X9Ey2EwCIAMFnAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63151b45-6733538a2958d9581b1d51e6;Sampled=0
x-amzn-remapped-date: Sun, 04 Sep 2022 21:40:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: up3TApAXcKRFo1QkxPJv97sP83ctt0T7teydhU18gX-ZS8CtJk4SOQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 2ab6211e66998c8b58132661a7e3cade.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 21:48:17 GMT
age: 20663
etag: "2f3d6053c4014cbdabf2187474997eb2156f168a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/dropdown.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/dropdown.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
GET /templates/Honeygrid/assets/javascript/engine/widgets/dropdown.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-cf7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/mobile_menu.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/mobile_menu.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
GET /templates/Honeygrid/assets/javascript/engine/widgets/mobile_menu.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-6db"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/slider_responsive.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/slider_responsive.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
GET /templates/Honeygrid/assets/javascript/engine/widgets/slider_responsive.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-83d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/
IP
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:39 GMT
content-type: text/html; charset=utf-8
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
x-robots-tag: index,follow
content-encoding: gzip
vary: Accept-Encoding
set-cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc; path=/; domain=.der-kerzenmacher-2021-neue-preise.vitoweb.de; HttpOnly
x-content-type-options: nosniff
x-powered-by: PHP/7.2.34, PleskLin
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/input_number.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/input_number.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/input_number.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-7ae"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/responsive_image_loader.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/responsive_image_loader.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
GET /templates/Honeygrid/assets/javascript/engine/widgets/responsive_image_loader.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-60f"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/transitions.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/transitions.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
GET /templates/Honeygrid/assets/javascript/engine/widgets/transitions.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-7c3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/swiper.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/widgets/swiper.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/widgets/swiper.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-12e3"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/libs/modal.ext-magnific.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/libs/modal.ext-magnific.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
Analyzer Verdict Alert fortinet Phishing
GET /templates/Honeygrid/assets/javascript/engine/libs/modal.ext-magnific.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-809"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/libs/modal.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/templates/Honeygrid/assets/javascript/engine/libs/modal.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2
IP
GET /templates/Honeygrid/assets/javascript/engine/libs/modal.min.js?bust=57b20b5474a362e607aba1fc7dcc8bc2 HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: application/javascript
last-modified: Mon, 10 Dec 2018 10:24:50 GMT
etag: W/"5c0e3ef2-111b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
der-kerzenmacher-2021-neue-preise.vitoweb.de/gm_javascript.js.php?page=Index¤t_template=Honeygrid
200 OK 0 B URL HTTP/2 der-kerzenmacher-2021-neue-preise.vitoweb.de/gm_javascript.js.php?page=Index¤t_template=Honeygrid
IP
GET /gm_javascript.js.php?page=Index¤t_template=Honeygrid HTTP/1.1
Host: der-kerzenmacher-2021-neue-preise.vitoweb.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://der-kerzenmacher-2021-neue-preise.vitoweb.de/
Cookie: XTCsid=i3jb459tq3u2kceo829drvhfvc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 05 Sep 2022 03:32:40 GMT
content-type: text/javascript; charset=utf-8
cache-control: public
expires: Thu, 06 Oct 2022 03:32:40 GMT
pragma:
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-powered-by: PHP/7.2.34, PleskLin
X-Firefox-Spdy: h2
85.214.212.150
23.36.76.226
143.204.55.110
93.184.220.29
104.17.25.14