{"report_id":"c7c1bd2a-41eb-4b12-b376-27873738ae15","version":6,"status":"done","tags":[],"date":"2026-03-04T11:58:18Z","url":{"schema":"http","addr":"pflegeschonheit.com/","fqdn":"pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.pflegeschonheit.com/","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"title":"Rabatt Natürliche, Organische Hautpflege Und Make-Up","dom":{"size":171119,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8832)","md5":"a8656e644a6e4f16c7fc6bd98035cf87","sha1":"08cd5b0d9a1dfdc96d813f8f40b47a04d5ba5de8","sha256":"f5f505edd85b66a54893a4e744062a4b6912d8ebc9620d826262d2cd57cb4917","sha512":"40fc390892a12c26d888039d69dac6c58c837ff21f4257e4b545efb429b6e1cab077c4931085ce190b1949745a3854c6bde8e7f1f8cad362e114fd6c60bf9453","ssdeep":"3072:XXzc9qNZXZpQuE+jo3TRvLGtPbxJVuLKvktfT:Y9MXnQx","tlshash":"fef3c6a7c1b65c73121a82e5746477cbf9c7de15ea8380b5b3fe869c87c2cd22503646","dom_hash":"domhash323bfdcad729a38bd0c895eaf8aeedc8","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pflegeschonheit.com/","fqdn":"pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T11:58:18Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.pflegeschonheit.com","ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-18","domain_rank":0,"first_seen":"2025-07-16T12:40:57.450577Z","last_seen":"2025-08-04T21:09:00.670086Z","alert_count":80,"request_count":40,"received_data":1257920,"sent_data":20339,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Contact Form 7:5.5.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce:6.3.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":2,"received_data":44354,"sent_data":1084,"comment":"","tags":null,"fingerprints":null},{"fqdn":"pflegeschonheit.com","ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-18","domain_rank":0,"first_seen":"2025-07-16T12:40:57.452857Z","last_seen":"2025-08-04T21:09:00.662372Z","alert_count":2,"request_count":1,"received_data":171460,"sent_data":488,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":4490,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=295a0d1d1e8168b25a51f884bffa7b33","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31e2d9a789756905106a31358d7b48f3","sha1":"4fbad9404fe5e8228202567c6beaca51d31a98d1","sha256":"92c7a2250d9acb8e861340ab23388d0f9a0e92a04dfb6ec0bea7bbb9fa0a6b64","sha512":"c4e3a94d11cc5e530ee8ba9ab9bd60f1ccf240c482f68e048c87377939629cf1bb1ff86676b656f598964c591b5ba92db7d32aadf123428eef9e8bae7be30d7e","ssdeep":"1536:RLzlnUmc6xaLz7xVbKXU9MAvw3Jh2/tikLiAcGdZYrqz9+rS8MgTdbmiRzs1hD3W:V+mOi3JDqrZgNmRN3xSG43Gu","tlshash":"26f3f649f241753a02ebb1a6a13f530e73336428640280acb569e8ea5dbdd8d3177f7d","size":160338,"data":"","first_seen":"2023-03-07T01:24:56Z","last_seen":"2026-04-04T06:26:21.921284Z","times_seen":832,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a49a60e0186f705f693279985371da20","sha1":"3419d4683879d6a48e051e38356602a2f5094511","sha256":"3b55a00b09e9df011435d1f358401cf7153066bbfeafdc3384e5d8cdaf4e3262","sha512":"3089d3ab44c6780d7f4691b482792a84b7d26f23f7d4fc9058dcc71028e4614788177bf3ab55da219b911a96ec21af8b1436c9a52846071a4cab89bbc48a959e","ssdeep":"384:ATSilXwOX4sD/+Nh6bMNE0FnDu4yQGF4yZ+wxmeK8TrYnRWO:Ami6/sqNh6bMNE0FnDu4ydF44+wxm98k","tlshash":"f6523fe5b2335c533a6f61a7448f940cb135e83c6242c6b99c9ae7b3983ce416353b6d","size":13590,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-03T16:22:37.113299Z","times_seen":2089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","size":18905,"data":"","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-04T13:48:50.920709Z","times_seen":89691,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T13:49:26.317021Z","times_seen":131563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-04T13:24:12.401799Z","times_seen":34258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wc-add-to-cart-js-extra","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ce7f9af8deb19afb092a0f3cb3889b3","sha1":"5bc6d00b45e4d1c2bd79a02609b457a29e1c2c32","sha256":"0ad63eb679047ff9d57750ef6fe7747fe71b6abb1522816afa85c1f8c81267f2","sha512":"bf9470e199f153f5ae148d1f5b77747b423645423d2b1534bc94a7128e1e52687e5c3e928539566ec04400d0f69b006be3b609ac7b20069a1cf921907cb0cdc2","ssdeep":"","tlshash":"c5417299c2daad9363e26ef8300135e3b0e21503e59888a99accfc8c1b10d80c90010f","size":1897,"data":"","first_seen":"2026-03-04T11:58:20.923854Z","last_seen":"2026-03-04T11:58:20.923854Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0a6d8547c66b0d7b0172466558d1208","sha1":"ff93916519c7b9483251f609e4d29f38c30a66e3","sha256":"3b1384ff918d4b7f95f9ee5c8fc388203dedff7344d3d96598c9562162788612","sha512":"48bb25b08bfcc9944cd1fc3bd039ea41d1a870f488971839f2891b91710f3ff9eb0b523aa7ab888bf9968bbbca41a48761405abbafc6c6d24927c078049545b8","ssdeep":"","tlshash":"4f31b5c83449388e06af1221523f62cbb03c9a0f5ccd9459a308b2f13431867815bfb3","size":1834,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-04-04T13:20:48.338458Z","times_seen":48998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wc-cart-fragments-js-extra","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8d4f2903698ad0f2fe2f82a9cfdaab5","sha1":"4b7b3277e234c07d4f99412c3dea4b571eba2d97","sha256":"5d3a35b1d593dcfb3946181469b641c3752fa2d5184fd018986c7d825536a731","sha512":"b99a43779ffaf995ee77652515004e6c34934e7c8d11364fb814b807a1203e30ef93e875ff6e17e3bee035b246ba989c5c6e86b78a31de6408e88d0a368600ee","ssdeep":"","tlshash":"e0412657e6e98dd33bc91cb62110a1e7b1e0621ae0748c70618968b80a30f96ca90d5a","size":1947,"data":"","first_seen":"2026-03-04T11:58:20.924766Z","last_seen":"2026-03-04T11:58:20.924766Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T13:49:26.298459Z","times_seen":685383,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=b3c807cf00d38de8d7f31c1197eb135d","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8bc644a6494ea2e3c98842cbbb8a090","sha1":"349ca9551cdb7c87b302e6b834c192f7355f50bd","sha256":"994e2944cd5c4f11b9c9f301666b6ded73ebdde4048c086717b031baec4ba154","sha512":"15d079554684753b9e41f70ac5caa5bd6beda450dfbd99c67537340db2b461361310f4fb6315e10c610b43588b37cbf46c27b157f09329d909a3de2757908e42","ssdeep":"384:l8WgqI1acBqGnJ9pgLnx+U1xEmfnOG1E1QtRA:lwqI1pBqGnJ9wnx+U1imfOG1E1QtRA","tlshash":"33729329f37420ed45ba60b5b83f636472b774787507809cb16aa4d6582dc4d2132bbe","size":16655,"data":"","first_seen":"2023-03-07T01:24:56Z","last_seen":"2026-04-04T06:26:21.917261Z","times_seen":765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"87c54edf7dad7dfdfde015f6eee45ff1","sha1":"96ec1a06ea3093c47e1e2fc4444ada7f4456135d","sha256":"ef22199864042b8ceeee3729f3254c140df7217364045737ca3aadf8434fb3da","sha512":"5c3565bb7c80cbebeffd3a0a413df03fb264ef2d2b2f7caeaaa29b828081f6db95ef6fe5c1d64a988d5885dea699a7e9d112393a745a445990008a99ccd5de9f","ssdeep":"192:x9RHfGTArT7TMcPvRwY7A1uKigDDptgMIOP9+HxlP722DIrNrDc:x9RGTArf4cPqY7YhR9thIOPcRF72YsA","tlshash":"9512d86831f3609790b3b1507cf7e78e73b6257c548399c1d0ece46929aceba1226f19","size":9533,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-04T10:41:13.761032Z","times_seen":33711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8bc2109ef48cabf7a26b73d7c3536c5f","sha1":"0e0dfee3a3975eafc3dd55f190d1deb3c6c55d3b","sha256":"8634aa7a3ac0bc6d359b458c8922e9d3269f64c1355b329bfe215beb12773af8","sha512":"d40afe8509734cb8aa48cd361d68d614b2540a502a9ccffb76e6138de25648f8e1800d2d204111a6026246e1fa5d84e5b17772dda80f215078ae037452b34853","ssdeep":"","tlshash":"8a5172cef126f4ba07e22d81a50bdac45532282bf19665bc2489a1e14f78a461467f3f","size":3037,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-04T13:02:50.057547Z","times_seen":37391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0fd625c3991a4015814cffdc88e2fc82","sha1":"d7c2f53e058210ff3ea773297641008bab71a5f3","sha256":"2d022db650d194d935faea46a40e5512235b43bc3f8b181e32ce6d3dd745f4e1","sha512":"b936b4e596739de1fa708a9f439167d4c2e670228a88a803363aa65f061b29dd9f52fdcd5aab1c1dcbbc634a779e54f767640b2baf30025130b5ea4fc6169631","ssdeep":"","tlshash":"8f51451fb070cda119f2287e717a718522329965f6098b30b025d8e42eece4b1773ece","size":2938,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-04-04T13:20:48.242691Z","times_seen":43047,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-util-js-extra","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"df869733cab67cf9714731da1edb6bc3","sha1":"afa8590b2cbc07ebb587a4e5ed1d78fb4fc89b1b","sha256":"4c513e6ba3a8e01b161e7bfb2bf1c21ab9672e1a5baca1938ce4c1c43a5dcf97","sha512":"5f404ec6b982d2298b65c9fd12af63d93b66d741b298bcbda1920da86f67434a3264ace70fa5bd852c989d8835bee3665da11fe1d14df3f8d06bd52defdca161","ssdeep":"","tlshash":"a9312b88e4d52fc722d91cf66059a37715d0b140c0240c1516cac1510e21840ca84204","size":1758,"data":"","first_seen":"2026-03-04T11:58:20.925692Z","last_seen":"2026-04-03T23:48:59.389554Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T13:49:26.30716Z","times_seen":638763,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.3","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"862c82d8373e4d69aa5af6c994389bda","sha1":"042bb60eee9e7dbffcbd43d529517e562f97f455","sha256":"d0ba7e2275cddbdf3d2473a60565d950efb8474ba7bda393cc64f56ff39d85ce","sha512":"ecd2cd8b53dfe5f1d4cb197e92f13bf0c4ea1bfa2b93226e7a140ae7a102222a0bce67b12bfb00bbd0f42d4e71b0dcb44a8c446d002633dad823d09b8c917291","ssdeep":"192:z80dItGtFooXALzKU7l0fS2fX8mFcJ0PPeOttKDiYCItlw1Dx/SnNw9DKQP14O2T:A2IsHoqyL2fX8m2orIcJNgw0bBwmlBB","tlshash":"5732e994366979720ab622f280ef2383b376345ae447c650d9a0dde45cb8ccb51b2f77","size":11862,"data":"","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-04T11:28:49.111095Z","times_seen":2723,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.14.3","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"28c3a79b698984aeea534457071a9fb2","sha1":"ee62a28760e7263f10307a988b244f1f0237601a","sha256":"e3d3660aee33ed4ad14e6dadf15503bf26d877be610ff8c69db18653cc8b8915","sha512":"f31b9ee0c5ce992f540397ecd3bcd61657635b6ed6fb0592798020a5dffebc16f8b53abae8af1a5a38034d26672f03d3f392e62d75892f27d44f22bd090c7e5c","ssdeep":"384:0HFFhp3CyCEB7T+gyV/W1KB/2ZszFmaT+u:ktFCEA/EK9Uap","tlshash":"5662970477823332962b209ddaab414e69bb6d1778056c50b31ec6c49fa8f1c91eff69","size":15960,"data":"","first_seen":"2023-03-07T01:19:17Z","last_seen":"2026-04-04T07:03:20.972067Z","times_seen":2996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/contact-form-7-js-extra","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"91ee0fc179c34e2169677fda77cc0639","sha1":"20b86f2006a52cf82afa05e446d86ba292c39dbb","sha256":"b1401ee623c2701a2c80d848a5c3046d26a499b41e68576622671ee934f0d163","sha512":"3f5c64debc8ae57ba9f0d58a59559f7d820f7c73301f7f80fcea88d3d8b903ddbbbeb1217fd7a8d58e0b982a1c3f877e0323c622eafd6bedb6473afec3e18ea8","ssdeep":"","tlshash":"0431c00ac0c40e8112b0c7b823fc132371c5d805c45b16aa6bce40840f344948000345","size":1762,"data":"","first_seen":"2026-03-04T11:58:20.926663Z","last_seen":"2026-03-04T11:58:20.926663Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b72c1cbb1530a011a27bd9800f26765a","sha1":"27b825c5d8255f33b8427a059d4545ebd65e1746","sha256":"a256fccecac3b32ab73c91d79a18747519a1a18023be05465c933b03523a82e8","sha512":"63febb24bdb65c39acc8d355dc5b20d3a1ad94afc347ab2936c543d8b7a911c2f6d2c1c0146707cdb29bea85a8f34e7fb6e76aaee4bc0bea212ea58835a58025","ssdeep":"","tlshash":"8941ed07f4312d7321ef97b5289eb9842523063e88114611366acb2c257a9c7763bfbe","size":2139,"data":"","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-04-04T13:20:48.266966Z","times_seen":48088,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/woocommerce-js-extra","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe717ae5aa3a3d8339dd3ee0a3fd2163","sha1":"d54866f1af32f448d4c6da53eb9396c8ade8f71e","sha256":"3d25cdf815a9ffd0b2593f7130cec151790474b4caeef9cb446f48667084ad9d","sha512":"7805bafd82bb63b7cc1e83d1126f97e946816d50757c34a8fb08909010207cb0b7d72a3031af33d9ce156d5400b3d0ddfae52f5df536365e394bc964c9dce921","ssdeep":"","tlshash":"ac311246c0d55dc322e83cf42554256325e1610af5600c111e4de5981965881ee4434b","size":1775,"data":"","first_seen":"2026-03-04T11:58:20.927602Z","last_seen":"2026-03-04T11:58:20.927602Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-04T13:50:48.341482Z","times_seen":63641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/flatsome-js-js-extra","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"20904f1472c171827fba2da05eab12a0","sha1":"55fbbc66c8780380fea5d5e4496bc4e9e5a2b2e4","sha256":"e0468cb2d49faf446ecf70e84577debc595a0d876c6b5986a3b37496a3475408","sha512":"d06da64c84583eb07174578f1b3c98fdd8dc871f38fcc9e5796c8a065649db980e9f0f78d06f1888d4761397293556cee043795eaca3ad93b1ba0c1feac6f907","ssdeep":"","tlshash":"59512168f31de41d50c7c0b6ef34bfae57263131d48471209eff85358291c6831aa20d","size":2844,"data":"","first_seen":"2026-03-04T11:58:20.928526Z","last_seen":"2026-03-04T11:58:20.928526Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wc-add-to-cart-variation-js-extra","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7676f2109848e668192d52a911fe57b","sha1":"d2e11d2871e734153f71e88e497c8726a7d3eabc","sha256":"2f17ce400bebbac09afb88490ac4d1c047c734908a5be13f5390c08a7d12da97","sha512":"6bb3c7583fc1f66f6e91ea3ca5b12d555339f04e9dac2e738d967ecc98c3b01146a444b0e454e892f1afc0c167581679efb1b411f8d45e630bf4babd7a068b72","ssdeep":"","tlshash":"43419ed4c2f67813624f18b710c91a85b9358109e2505065fe4fdbc927238c4d30343f","size":2122,"data":"","first_seen":"2026-03-04T11:58:20.929586Z","last_seen":"2026-03-04T11:58:20.929586Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/wp-util.min.js?ver=6.9.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","size":1426,"data":"","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-04-04T13:41:12.392313Z","times_seen":97033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"80eb606ae631d7760a47050a336e9c98","sha1":"1895e077ab430f3e2c09d04f1a0e15f56354e524","sha256":"59d41b81261f9b0e9cd5f2ea1cc02c32e9f3b548efc7a2534b98e47e517fda35","sha512":"8dbbde53865c63a6db1ef49a02ca6ccb076f92bb0470e418e047a375e64101addf3d9dc3b13e34b6b9a49806e8ee6a8b245cfbdf975411f1ed399d9f0bf7f1ad","ssdeep":"","tlshash":"3ee05b2c06d318204a6bf565176f73503d369013254946833a5cab564f5441543bdf9a","size":339,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-04T10:41:13.782856Z","times_seen":4665,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d5f4f899d5c0d09c56e86be6439246d","sha1":"e92111438cd6fc89876a2df9c2dd0a6adf5a5578","sha256":"023827f1e9b596c8d7c8c90f4c4349b358cb03f2c991fddef5bd33a5992ef7dd","sha512":"1fb9e0c6c2d2b47164a42e1d87a78ba76dc6919d4b4239018af76f5f1167f83c172986ef1fd990b8fcae6c5f644dc7bf8dd6fdebf311696f0fa725568b83c831","ssdeep":"96:svcHtHRA5NTDXnM2E0+1lfYsPHgRhR3S+:JN0LE0+1lfYsvST","tlshash":"9aa1a69ae7763cdbb2f900f2697a0d47eb614435d6c8d438c9aea3141cb5893c274b46","size":4652,"data":"","first_seen":"2026-03-04T11:58:20.931094Z","last_seen":"2026-03-04T11:58:20.931094Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8c40bf7c92768058d743847cccdb147","sha1":"4fbbbcb2dda4d05e2e58bf43330c559b4165fc0b","sha256":"7872ff233c7b2bfa962f491d0575e71f0b0b487bc63899ff4c72c7c9d5197688","sha512":"83bcb73fce5bffd29549aa2521980264568c23c98d508b254127f3bb9c69c9c2fdf3d6d541f2edf24dc73e1414e8a9fab6dafd4cc25d3cbaf6a73b7917c50d26","ssdeep":"","tlshash":"eec08c2b770c08e4120b38c00f9f22d53838e18876513c108caca805d490c8a2c02f8c","size":152,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-04-04T13:41:14.770439Z","times_seen":134438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"291fa442589607e5f12eed1f9d250511","sha1":"a91a40a7ff6730b67274f950ee46b059e1d9af32","sha256":"d857655afd7f378dbe04cdfd64313353b71b932d8d6c7fc3c021c09be779a297","sha512":"ac8eacade68d8ef1f70f47031a6327a467eef738dbf43087ad3a73d866a0222a01700c83f89d8bb06e01e2528757aae5daf75a7ccd9ddf1bb0f07f008bd4dcbe","ssdeep":"384:EwEZwAMfifbeH/uY3dA6ac+VVogo3wI87TnKebmlioAdJTPxXkSYwTo9uX0jcym:Ec/fRsI+3IAf/d984XxB","tlshash":"6be28349b695b4e302e3b4b4409f444ab1b75b45b81acad1f315f6c0bc7d84ea0a7f8d","size":33548,"data":"","first_seen":"2025-10-25T06:58:40.435374Z","last_seen":"2026-04-04T13:47:24.694101Z","times_seen":26618,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/cropped-android-chrome-192x19210-1-192x192.png","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:59.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/cropped-android-chrome-192x19210-1-192x192.png HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 12111\r\nlast-modified: Fri, 02 Jun 2023 03:12:58 GMT\r\netag: \"64795e3a-2f4f\"\r\nexpires: Fri, 03 Apr 2026 11:57:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Wb9B6Od1UNP7hxGqsBlUHxTqwrv%2F%2Fh%2BPAjq3RHG6FUFLSAaS%2FSTXM%2FQwkW4zuDzvCWrD4ZIcwyFaHIZqFZA2HcEtm90zvjiydNyjnYXaTeuUYr4ZniE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d70b4de2a0abe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12111,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"cdd299c9763182bc8a320d2621fbe358","sha1":"391679d105238c6abb63afc517dc164a69ecae4d","sha256":"94ef4ea0bbe63c5111be151dd0a3cc842a04cbd6b9d1b9800f95ad890d707264","sha512":"358343a2153a4a9870a1bae0a3e64263d1e6d79c98d72ab2bc26a4b924feaabb50f3106e3c92ed1bdaf466422c333f9289641b9c0c486f70e4ee9f87f31de109","ssdeep":"192:T1CCwUqTsJdxupQSkCldPs1LD4ls2F3s06uBZF37+EdFha2USdqAckRph:UCwUknFk8dgHCs2Rbd3rd1E8","tlshash":"3a42c0d5d7424cf0d90962047e9833a465bf601bd98333669d283de6818f7ef2b96f06","first_seen":"2025-07-16T12:41:02.494904Z","last_seen":"2026-03-04T11:58:20.887546Z","times_seen":7,"resource_available":false,"data":null}},"time_used":481,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.3","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.3 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Dec 2021 13:28:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61a8c9ea-aab\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FsSoxizwAtoqDVh0kVaOuhcTCvhH6OIjLFxznh%2BJiWrHy%2BPyZoxrgsUGKQEjBcVexRIB1yjwPn2%2BqAN14ZG%2Bk1lLAb8MJDltatGWLQKlOg%2FXe7Hipx9Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d42fe9be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2731,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"e6fae855021a88a0067fcc58121c594f","sha1":"6299ac3987b5e81725781799dad361d19ac3b99d","sha256":"e50f9ccd2d6582a58ba1879fa578e60d25fea4c5eedc07deafd14482b2403181","sha512":"b67d641ad4dd65063621f73420a52bfe914f25c58c42c08b0a558a429744154901e05e363a358b56f922c0059fbc3822df063cac76ab49e02f100666a46d3f36","ssdeep":"","tlshash":"cf51337466002c504bff92d77ea99b04776e3881ce1faf97b0c21a3c5b785851223a9e","first_seen":"2023-04-05T02:37:48Z","last_seen":"2026-04-04T13:06:58.144161Z","times_seen":41978,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.14.3","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.14.3 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Nov 2021 03:08:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"619dacb4-2a4ad\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z0X3Zzvwy%2BCHS0ddbdO63YUrhs4EA72g6fpPybYSPXQbUYUuScGib7Bf%2Bax%2FjY9a2W85rYx5Kd2nR%2Bu4bLJ2%2BEfwZz13M4byBSZacPeT4wZ1DdF6DPo8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d42feabe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":173229,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b946f6b5a8a8634305e4ca58e1aab726","sha1":"27ed45c37f623b68c7cf099088f4db212099369b","sha256":"f760533e83acaa8bf1242efd61cc358f88706ca7ddbe5893144fd7e878af1db8","sha512":"ea6a8d89f94d80c35e607f6636f869daa3d88462bfec513049442468f119d751ed9937b7d94af14557b3f3b04846d0d5e89dbda11c36d2cf053599cd654e563c","ssdeep":"3072:WgkqAnbYHDC8KL1CTXYJmsp48VTLTe8l3SxTadLe3cpJmATXHLcxbN0AgL6opP4C:Jsp48VTLTe8l3SxTadLe3cpJmATXHLc6","tlshash":"3f04c762a28021085017c709e7c9fbac763dd122f7224afff5536a29cbc36de1565b4b","first_seen":"2023-04-07T21:50:02Z","last_seen":"2026-04-04T06:26:21.90239Z","times_seen":926,"resource_available":false,"data":null}},"time_used":598,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":483,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/livvic/v15/rnCp-x1S2hzjrlfXaOM7.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.457Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/livvic/v15/rnCp-x1S2hzjrlfXaOM7.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.pflegeschonheit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21240\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 01 Mar 2026 22:43:53 GMT\r\nexpires: Mon, 01 Mar 2027 22:43:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 220445\r\nlast-modified: Mon, 15 Sep 2025 17:09:53 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21240, version 1.0","md5":"a9c4d25e01ca0a412a29e38a47a389fa","sha1":"e983f63a0f3e18bc7819763f0e1a9ac542a87360","sha256":"3a15a095aeebc9aca2eaa158fbfe8d5afd5a6fc2eda2f242e460c53d4f15a1b6","sha512":"f84e2516a2edd0b8d968c81c394c7b8114ce3bd5ec9de1d43734ed99a80e17c99e05290ea625a85d9e8252af47924900bc030b7179ff7dfcb5d89da343c9f724","ssdeep":"384:kYtw2ft2DYIzcosH1dYYQr+jkobuNWYaqSWnNyZ+ulkfbWf6TvL1/X7e:kYe2oDYIm/rQPUYabegafbWCP1PC","tlshash":"ac92d085e9b0fa21d6454d7000a72b9d54c24dc41f8b82af214d6cdbf21cfa622ba67e","first_seen":"2025-09-21T14:34:01.346451Z","last_seen":"2026-04-03T16:54:34.295589Z","times_seen":161,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":115,"dns":0,"connect":28,"send":0,"wait":29,"receive":10,"ssl":83},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/matarrania-organic-balsamic-body-oil-100-ml-1058426-de-300x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/matarrania-organic-balsamic-body-oil-100-ml-1058426-de-300x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9982\r\nlast-modified: Thu, 01 Jun 2023 08:06:03 GMT\r\netag: \"6478516b-26fe\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=juJwZQvnnf1Oy%2FJsaHXpTwGkeFZZP3PgeSbSLbK1zTZZnLUPT%2FnYmOFOfq2qxJ1%2F45azHSEWFHo%2FTudNkE0KpXpPdGiR9UnUIRtH15GR9typKTv07Ns9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d91900be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9982,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"dab1e8bef958642359545e5d925ddaac","sha1":"31bdb167720a2bc399f98a7ca4e36d0777464d1e","sha256":"529a0e4080615b70b994bf782594246ffb0b3f50937f2d02f4ae98d0895780c7","sha512":"313c6310ef3ba48823a8ff79f2f57aa4f4db9e23a6b90d5d73ee82dbbc9bd4f130d3211921e1a7fbb37af9b297000a81d373b5ce6657f816b6ce7c007d5380e7","ssdeep":"192:/fQVIJmEePK4DZKP8N4hx4Davre0iUTpu/Baeds6LoA7UMen:HwIsj9KP8N4hGq60iMundsioe0","tlshash":"a6227d0bd9a02a47515a9e6c0e064e2f8f9f7e0d96911ad410f2de566e312f08d0ecaf","first_seen":"2026-03-04T11:58:20.890447Z","last_seen":"2026-03-04T11:58:20.890447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/maternatura-haarspuelung-mit-ingwerbluete-250-ml-1482336-de-300x300.png","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/maternatura-haarspuelung-mit-ingwerbluete-250-ml-1482336-de-300x300.png HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 78136\r\nlast-modified: Thu, 01 Jun 2023 08:07:17 GMT\r\netag: \"647851b5-13138\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJGyInKppnlEuMKYYSYwJPt4M4iRjFhDTUfKmsipqMeb%2BMKdMXOZx5KZ%2FM9JFT1lVuTAnL5m%2B%2BYk5TYcl81jNHpFxQsjNnCDAwDE1abpBVnQmpxnhN2Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d91901be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"726aff342cff93bc4bc5c3d5386ec9f8","sha1":"54f8896906cb09065750a71f3d6f25f81f0d0057","sha256":"668e2393ce1a857005b01b745b446ba205e68ef5bc029ab19e6adfa3f8eff594","sha512":"818687274742cf110970052e2898bf5acf79df0f10f9cec19162bc99f7344231e3eef487feee85d216e6e1f002f79d393eacdd6186b0cf590da2678095896bce","ssdeep":"1536:kCgXjqKazKww6JTzhNnGZ156x+/QLScxV2K2OJgCOmoCgSA:RgTqKPeJ6Z1+LSCV2KDCGoCgJ","tlshash":"1a7302df78b2d8bb8535d9544a326a51c869ce5dcf00199e4822ab1333f6f191ae43fc","first_seen":"2026-03-04T11:58:20.891672Z","last_seen":"2026-03-04T11:58:20.891672Z","times_seen":1,"resource_available":false,"data":null}},"time_used":604,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pflegeschonheit.com/","fqdn":"pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T11:57:54.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Wed, 04 Mar 2026 11:57:55 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://www.pflegeschonheit.com/\r\nserver: cloudflare\r\nx-redirect-by: WordPress\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cPm4fdVzNYPF0Aum4zWt4k6dO7TJwKP81pRbp8ytmyh1vozH53IJK4gurqH2J%2FQqfLp%2Fghg2RuhVUxNQ53Rx8XlDRQyhqP637psj8XrRMheudag%3D\"}]}\r\ncf-ray: 9d70b4c0bf69e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":170809,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T13:49:31.916752Z","times_seen":13333799,"resource_available":true,"data":null}},"time_used":1364,"timings":{"blocked":42,"dns":6,"connect":8,"send":0,"wait":1281,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/masmi-periodenslip-1611592-de-300x300.png","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/masmi-periodenslip-1611592-de-300x300.png HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 70788\r\nlast-modified: Thu, 01 Jun 2023 08:03:15 GMT\r\netag: \"647850c3-11484\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yfiljHcFuupW%2Br4XkjQI6%2BO9DSvPu8QUFuO9hhU5%2Ft%2FPOgQncYgZU99rIAOvMTbHoeB4FsIs%2Ft7lrp8NMbkAbjWE6hZ52%2Fg4KiqpUZgHaE9IvG8atexD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d43ff4be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"52886f29448326fc9473616effb545a9","sha1":"452076f3a5b8c45d835554ab5d477da32f8f7039","sha256":"ca3aebd12a1357e443e2bba6aea1cbe7044b15fed7931a606a70529c5be9bb4c","sha512":"ec2f53d714074faa58b433216c133b456c61d694986f1be8145803d2529d820512a3b0ea41ef3e0fb2bb744742bc4e4fe0a64d20f5b71ebd6e293a7dd1cdaed0","ssdeep":"1536:Q5QiVWNhRy8mCvJZHJKZd02v2dOrG9HVWE8uxOiyJXf/X7jAEkj:QpWNhRy8meqZdfEBFcExOzJrTM","tlshash":"3d6301d3021f9a5d5c05b383699a380b769370af42f8e629d740c5a8bce4e489d457ee","first_seen":"2026-03-04T11:58:20.893517Z","last_seen":"2026-03-04T11:58:20.893517Z","times_seen":1,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":230,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/underscore.min.js?ver=1.13.7","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 04:29:02 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68e0a28e-49d9\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8DJTDRdZbMK9CB59xlITQyDMdftSXFbc72TxqOdyMr%2BJCFIKhXBr85olvB7CDovv3RAAOyv5fMS3JtmOm6Yy8VjRoBLL6Ma88gK2w7%2F%2Fr1DxrJfwrxs9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d46804be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18905,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18870)","md5":"dadb3f410026822807858737cbc7b64c","sha1":"477bafdb06d8dc0c22ada8d30067b5a0af2d79b4","sha256":"2f61c0b3d5a147bae06a4f6fd7d90031ddf39cba37e17926999b2645ac746a14","sha512":"1f6cfaf7978f2bd30503abaed49c193625e9a204ce359806449558d0caf09cae7dd10d2156e25f61b8f49efc3b7420b1332a480990da94f5a2ea3d30c262e8bf","ssdeep":"384:u2Rq5yjN1V02mEHrJDzWpl0bMpOt3PPD71ijeE9OWj:LqIbV0sHGl0dD71Uj","tlshash":"288281c83ac2f05aa76330b5406f508bf23a3ea16cada840c265e4f8bd7445d9137d6d","first_seen":"2025-04-01T10:25:57.91067Z","last_seen":"2026-04-04T13:48:50.920709Z","times_seen":89691,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/cropped-android-chrome-192x19210-1-32x32.png","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:59.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/cropped-android-chrome-192x19210-1-32x32.png HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:59 GMT\r\ncontent-type: image/png\r\ncontent-length: 1031\r\nlast-modified: Fri, 02 Jun 2023 03:12:58 GMT\r\netag: \"64795e3a-407\"\r\nexpires: Wed, 01 Apr 2026 03:18:20 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 203978\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yxV0rs3cd6lHcG4dQ5DQIEUyiwdl%2B8Z%2BskJFpDB1I0hPZZWU4mzedZiH7GOq8h2plUEuP6Mg18VgF9083l7TZhd2VjS8xDsmmoT%2Brvtzy4mPbsuzsXkL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d70b4de2a0bbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1031,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"a497550aad7c2bdc3091f40b593c94e2","sha1":"7870d9c8a6c018ebfbc6bc18826d0a405324684c","sha256":"e9fe7572ee3462cb323d5bfa974013e4fe592286da4d6e85438bc64de57958f2","sha512":"829c726727a594fdcfb13cb71499717d30e5074efa93278b88d571b60f103d7b8eadeb121aed8677423ae9995f551d8d8cfbeae7b668e3836014b9a1b8383d0a","ssdeep":"","tlshash":"1c1186af51518451903b51f37807242470966fed52090ac9b116c1fd5b7049e6e2871b","first_seen":"2025-07-16T12:41:02.524996Z","last_seen":"2026-03-04T11:58:20.89525Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome/assets/js/flatsome.js?ver=295a0d1d1e8168b25a51f884bffa7b33","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=295a0d1d1e8168b25a51f884bffa7b33 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Nov 2021 03:08:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"619dacb4-27252\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GB472VgNY3JkYtObUREgcg9vxzWY5FCqDII3pGaabsTgl6wN8%2FEB4e4tTdtLuC3or6pM%2BXgVqI0IvSK3E9EWaF6WycUD%2BdKqrvgyw10PXo7dcBR5ezH%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d45802be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160338,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"31e2d9a789756905106a31358d7b48f3","sha1":"4fbad9404fe5e8228202567c6beaca51d31a98d1","sha256":"92c7a2250d9acb8e861340ab23388d0f9a0e92a04dfb6ec0bea7bbb9fa0a6b64","sha512":"c4e3a94d11cc5e530ee8ba9ab9bd60f1ccf240c482f68e048c87377939629cf1bb1ff86676b656f598964c591b5ba92db7d32aadf123428eef9e8bae7be30d7e","ssdeep":"1536:RLzlnUmc6xaLz7xVbKXU9MAvw3Jh2/tikLiAcGdZYrqz9+rS8MgTdbmiRzs1hD3W:V+mOi3JDqrZgNmRN3xSG43Gu","tlshash":"26f3f649f241753a02ebb1a6a13f530e73336428640280acb569e8ea5dbdd8d3177f7d","first_seen":"2023-03-07T01:24:56Z","last_seen":"2026-04-04T06:26:21.921284Z","times_seen":832,"resource_available":true,"data":null}},"time_used":591,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/miss-trucco-haargummis-aus-seide-gruen-rosa-1468384-de-300x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/miss-trucco-haargummis-aus-seide-gruen-rosa-1468384-de-300x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14109\r\nlast-modified: Thu, 01 Jun 2023 08:13:42 GMT\r\netag: \"64785336-371d\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zqg%2BT%2F%2FQpI6uQMyEbjLtjSnFoqO44sPK9KbjBOxiIF7sWWfu0RzA%2F%2FRsH8HWIcV%2BUJXknL%2FYQPTGVnF3F3hpwj2NV28NHCnxpvAehJNE%2F4fYGLQ7umrI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d92905be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14109,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"5107cc715fc70428353f594c31a55835","sha1":"63e35defa4a1beb4f64ac47aa27e9403d43600b2","sha256":"28b9e307098cf4136e70b31df7180983f050a15cc9b947dda72c1afa649709a1","sha512":"b800ac30b01c844f71a271ca78d800fa6f6d999b48ddc6fcfa62fbbd8dda74346654f434731629a097b0da5c8a985cede9637e7eeb5f3b33c54477dc3210cbc8","ssdeep":"192:/fL0eWH1zq0PikmISdVsSx3AzxJgnlOuIoD4D+EdeN2OW+5CnbfY1bc5XWMQOQJB:HL0Lw05SKxJpVo8gi0CbfYZ7OQ1J7","tlshash":"e652b093c25022c1b8485f765c3c038b23af558f2ea845a42977cac956152cd5dbeaef","first_seen":"2026-03-04T11:58:20.896803Z","last_seen":"2026-03-04T11:58:20.896803Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Nov 2023 21:41:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"654aaef7-15601\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=300Ovzx3%2BZdxIB85YvlAPBM1a%2Bj2cYEyPQjm2%2Bi4Ii4Wt22oxP6%2FUXVSszlHtPsXTvZ5ZxzhFbdhZeXDalLYqA67OpeVJw9WbMTpC4IBu8bTWhH%2FJ38g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d42ff0be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-04T13:49:26.298459Z","times_seen":685383,"resource_available":true,"data":null}},"time_used":492,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":481,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.3","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.5.3 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 02 Dec 2021 13:28:10 GMT\r\nvary: Accept-Encoding\r\netag: W/\"61a8c9ea-2e56\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4uGeLSw29L69fK0POCq4V4bajITcU6HstN%2BRR%2FU6Ly1mTabessDYauV25W0dL9IDHj68wV2AUpTT3V3weMx32Cd5NIhnrfXWjrhFEO1VRvh3ijZLDC7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d43ff7be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11862,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11862), with no line terminators","md5":"862c82d8373e4d69aa5af6c994389bda","sha1":"042bb60eee9e7dbffcbd43d529517e562f97f455","sha256":"d0ba7e2275cddbdf3d2473a60565d950efb8474ba7bda393cc64f56ff39d85ce","sha512":"ecd2cd8b53dfe5f1d4cb197e92f13bf0c4ea1bfa2b93226e7a140ae7a102222a0bce67b12bfb00bbd0f42d4e71b0dcb44a8c446d002633dad823d09b8c917291","ssdeep":"192:z80dItGtFooXALzKU7l0fS2fX8mFcJ0PPeOttKDiYCItlw1Dx/SnNw9DKQP14O2T:A2IsHoqyL2fX8m2orIcJNgw0bBwmlBB","tlshash":"5732e994366979720ab622f280ef2383b376345ae447c650d9a0dde45cb8ccb51b2f77","first_seen":"2023-03-07T01:10:09Z","last_seen":"2026-04-04T11:28:49.111095Z","times_seen":2723,"resource_available":true,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js?ver=6.3.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Apr 2022 09:51:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62554b9c-b7a\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oytaqa78fwT4S1EeANe4cwOkuxeKUyUNS6WeYPxt%2B7Bdu30N7LGpcDIgnRoLhNPK58Lsi5%2BgsmNwkNvKxQneEayX5b1fYxD9MuL9djTlhtkLhr4kveft\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d44fffbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2938), with no line terminators","md5":"0fd625c3991a4015814cffdc88e2fc82","sha1":"d7c2f53e058210ff3ea773297641008bab71a5f3","sha256":"2d022db650d194d935faea46a40e5512235b43bc3f8b181e32ce6d3dd745f4e1","sha512":"b936b4e596739de1fa708a9f439167d4c2e670228a88a803363aa65f061b29dd9f52fdcd5aab1c1dcbbc634a779e54f767640b2baf30025130b5ea4fc6169631","ssdeep":"","tlshash":"8f51451fb070cda119f2287e717a718522329965f6098b30b025d8e42eece4b1773ece","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-04-04T13:20:48.242691Z","times_seen":43047,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.14.3","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.14.3 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 6752\r\nlast-modified: Wed, 24 Nov 2021 03:08:36 GMT\r\netag: \"619dacb4-1a60\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjEsUAgYhYiUcFaAYT2zbu4dhCvvjKVtufmf1XfQhKcf7JQQtO9PHXfpoNOL51t%2FjCrVk0seL8shycnfB9mMp%2BSHTpWzXJp1NTU2BrHMzrgX2QOfp0fT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d868dabe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6752,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 6752, version 1.0","md5":"fea1aeac745dbd246870467857e90f02","sha1":"b9f8ea8bd9d496f5706b306bc0e777b6a9906b27","sha256":"343b461359461daad66cca6ae40315cd78bf58ebe79eca9af84596d3d873c209","sha512":"6029dd69789bb69191ade2db5162ade20be8f9d4083879fbe5b9e2bf911a3bf2a60df0ed7ed0b8c4aa5645c4992bbaa99af88e62b6e6e070a35eb634812c25c8","ssdeep":"192:GjizyhdxNboRlgvYKYzuuYmCSFzWFvxwNAC:GjiAyTblyuYmrzWFpwNAC","tlshash":"bdd18de6ad63087cc056523428802b18a349ec1d9bd94820d64ffd763e13ab3a86c7cc","first_seen":"2023-04-07T21:42:19Z","last_seen":"2026-04-04T11:33:47.43331Z","times_seen":5645,"resource_available":false,"data":null}},"time_used":383,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":368,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/livvic/v15/rnCq-x1S2hzjrlff08YutV3D.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"FD:7B:7B:3F:B0:E9:E6:F2:B2:20:AF:6D:E3:76:AC:43:C9:2B:95:1F","sha256":"05:F7:EC:37:83:98:A5:87:8A:AE:AD:80:95:CC:A6:0A:C4:F9:42:EF:07:B0:C2:6B:6F:1B:27:7A:78:A8:CE:64"}}},"request":{"raw":"GET /s/livvic/v15/rnCq-x1S2hzjrlff08YutV3D.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://www.pflegeschonheit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21444\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 01 Mar 2026 22:43:53 GMT\r\nexpires: Mon, 01 Mar 2027 22:43:53 GMT\r\ncache-control: public, max-age=31536000\r\nage: 220445\r\nlast-modified: Mon, 15 Sep 2025 17:11:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21444,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21444, version 1.0","md5":"66a855124f47b6bc9c99de5b04302f29","sha1":"d565ffb59bff5ce4efd121be86848c4ffd567dfa","sha256":"488be7e3d8d58c9af8ca75128a8f97033257e5356202845d5da6669e394b0118","sha512":"55c32594ed5edf7c85082548b84953e140db3e7b0d4f0d1055fa013837cd682978f4d7ad76841c3880fc4fb5c8c5518b32d0c77ef2d43b6cc22e4761ef78cfb5","ssdeep":"384:5199RkZX4Rq/WkDcdTDE5S6/jd1OX5ld9NkmH8rU5RvWOO2F/T9IK:5vIF0TDkSa/w5lZkdo5RezK","tlshash":"76a2e09218f1f02fa55e8b78e924300221d64074951ebbaf2c8958dd7de5fbcd106895","first_seen":"2025-09-21T14:34:01.305054Z","last_seen":"2026-04-03T00:53:24.427806Z","times_seen":159,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":133,"dns":1,"connect":28,"send":0,"wait":29,"receive":10,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/lavera-selbstbraeunungslotion-150-ml-1265284-de-300x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/lavera-selbstbraeunungslotion-150-ml-1265284-de-300x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15933\r\nlast-modified: Thu, 01 Jun 2023 08:18:02 GMT\r\netag: \"6478543a-3e3d\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TO1a57CnOBUcw9LN36MSl3IIPA%2B9RUpDgn5IZzycPmwG5IV2dasF3FVv99yqu7bMvMrRw11wKYRoAjIqd9vDUjyLZ6zKWcsNg5Rm0JRAELNDc%2FE00Fiv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d92912be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15933,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"842b64fa6dcc37706675b2956c28fa0e","sha1":"64ad934a0253d9f2b0bf6b9f1da4a64f511f9d29","sha256":"e86ec461fe5a8ecf87997a18dc532fffd94b587fe49d757cf817527befcab338","sha512":"467e5dd79acea11f7c79952f13e7105014a38e8c3728a7c3591d794e13ab132b8fb40f68ca6e96f535a04408ff055b37abb664196dc4d3398265708aa3a78e7e","ssdeep":"384:HMb6d4+cGSbrOgqf2dUCq55F0lZc8NNApF:He6d4LGSOfAwSlBNNAT","tlshash":"7062bfbf8a429449b74d4fb8ae3b8b8b128d2605fd51adf023778c49d4ac7c61c0e198","first_seen":"2026-03-04T11:58:20.900925Z","last_seen":"2026-03-04T11:58:20.900925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:59 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Jan 2026 23:58:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69585ba7-58ea\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GbYK%2BuSHW3xGFgDddM4jBfCnJYTrKkEArHLahJrsafvN6ZEjMaQeak4kFzwRb8lZc%2FuLXR6pmaUsdFV4LbmPDfIIKpouUAv5UCXSAL5yHTEGRHGcRJcV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d9c952be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T13:49:26.317021Z","times_seen":131563,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":364,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/?wc-ajax=get_refreshed_fragments","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://www.pflegeschonheit.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"time=1772625478647"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:59 GMT\r\ncontent-type: application/json; charset=UTF-8\r\naccess-control-allow-origin: https://www.pflegeschonheit.com\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=udZ%2FUDbSVWBnjIOsAUTxsZRa9I9bxvGDCBHAZ%2FHjpakOMAci9jbS7oYk6MCkNVmVHRpHpBa3ZeBWW8WaLFu0kWGxeK0hQkL1YrVGCfIW0bDXDOYDLtqy\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d70b4d9c953be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":604,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6589592c62ecb8b4f8886b6cda66f328","sha1":"f8147552393423748224972ace613add0c1585f7","sha256":"3f452f016551a25b2bdec473481cb502b1376547f5e4dba4fa512acb5f5704dd","sha512":"447665ffb27dbafdbd5dfacc4cedfe2bafcea9bd2507cf6047dd7ed333387e8b3759d0a2717d5d1ed08bc197007bd7901ed0440155005b08608a64a781fb2bfc","ssdeep":"","tlshash":"29f0ac71a07f8d335b2b8dc2668e37d9b9de440ced65140614e8236803e4f607132e6d","first_seen":"2025-06-16T14:51:06.275718Z","last_seen":"2026-03-04T11:58:20.902871Z","times_seen":18,"resource_available":false,"data":null}},"time_used":1206,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.14.3","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.14.3 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Nov 2021 03:08:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"619dacb4-5d7e\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tq501SEXLcKvrmfkPFDFZdjqgoJgpYhs0SdUV6sz5jn%2B9IhLlpX3x3Q9vb1PemPXqUKzakh7xclEvnjUAYdMprOIpcirvbBzyuKJrPU0jWAoYrPptMBS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d42fecbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23934,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (23931), with no line terminators","md5":"6dbccbd41131d6a67405dcadc41597e0","sha1":"4778e5276589bc53b63636faa22dab60a3201cad","sha256":"b5a9fa19f05880957922dc092795eefb81810e62aeab3e4f60017adeb10b7e31","sha512":"db10d0f4fd7097988dcc91883ee7bc29a9486ad30ba5cd4fe45faa131b99b961be0bf4412d63e1996827f39f3a5805a4c884b8a6acc5a9d810418ec787739254","ssdeep":"384:EtqdAfOpuc5CDxlCfiMga6v0D6mqibt7lIQjw8RlS1BkP0QSYczXPVC/MAF:EtqOOeDCzgaP6mq27lIQjw8RluBkP0QT","tlshash":"9cb2b732e2b12518903bc721f5d0bbedb568e172f79705fbe8523625cb861eb163264c","first_seen":"2023-04-08T20:58:25Z","last_seen":"2026-04-04T06:26:21.903115Z","times_seen":865,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":369,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/3.png","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/3.png HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/png\r\ncontent-length: 20436\r\nlast-modified: Fri, 02 Jun 2023 03:12:17 GMT\r\netag: \"64795e11-4fd4\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8WoRxjI%2BBHKsMm5HDwfqtH1%2FGQ8zZ5I8JyrCdr7I%2BPHveWwdGzrF%2F2VIz7oRQ6NNs1RA62rV3d8%2F59EvOlNdNtEXgILdvFRLi1X38djtlXwBaIxm54hn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d43ff2be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20436,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 693 x 192, 8-bit/color RGB, non-interlaced","md5":"c678051438abbe4f9831dd1ae09ca175","sha1":"58dc6c8f05195597fd7d8b55d047fcf1adf613d7","sha256":"5e13d83bf429c6828c6f304c7727b6bb809e6cbf5507f29875077b3ca4f48f5f","sha512":"8880d2e78b9076aad13bfc689bc7e6d20eb0cc069c610e1e0f3f5fcfcc40bf83b6d707adc11b1a9a8403a78471445287c1b71c4a74a3b2679c7895016ea300e7","ssdeep":"384:tftOIRdu/neKhuFslrcKNSFHHbQzEOjY87cvkFeF/DpMejYzk0:tfbYLhuCNFYAY8RQFFMvx","tlshash":"5992c0dbbc46847a87a94ac69ff52ddf7010623efd6222484234285a1302f98f5c5774","first_seen":"2025-07-16T12:41:02.516019Z","last_seen":"2026-03-04T11:58:20.904298Z","times_seen":5,"resource_available":false,"data":null}},"time_used":488,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":367,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/martina-gebhardt-rose-cleanser-150-ml-702414-de-300x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/martina-gebhardt-rose-cleanser-150-ml-702414-de-300x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8396\r\nlast-modified: Thu, 01 Jun 2023 08:01:21 GMT\r\netag: \"64785051-20cc\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLyj%2BR%2BDDoswPkf%2BHq3tR4SKtFIMrXEf7UHUfoEGuW3vWkw%2F5xzQo99fIIrsYK4GI6e1hH5QEL8Mh%2BBkJwQzkrJegMCSru9B9MkKk8n2KcPoQlr4EZrz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d43ff3be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8396,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"c6a983fd347f9799ba6f37314ae8874b","sha1":"84a3d6c7ee567429598332398523b1f1079ea3d9","sha256":"53854cf2e17a04d1a026b309d59a611e18cae72076f92ae2bbea3516702c56ce","sha512":"fd807e441c984b3e6c008ca827060c46aabd59b6a5ba7cb3aa976b32104df5128d76e71dfb7b7e8666f56b53ef65f900a044e72cc89ddeed0081008e6e1487ac","ssdeep":"192:/fkK1WgMnnWK3fLSlbIcZ1l7nQ73emHl22CS5PuURKxNw5MOwaeED0Aax:HkKE1z3f2J5nQ73/285Pu52MOwah+x","tlshash":"bf02be0c56502aa376390ca72177361ba7b0a56d74226ee23bf1e3798adc1c7f14898d","first_seen":"2026-03-04T11:58:20.905725Z","last_seen":"2026-03-04T11:58:20.905725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":370,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=6.3.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Apr 2022 09:51:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62554b9c-85b\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=An8C0wxF%2Fic9y3jtcpBBM6bnRZ4VtL7FjtZu2tvjWOsRSb8rW%2Bh0J7YdgT6LxvRty16rwxH2pG3xv9g69FGipaZJPrOWb3acDeXB%2FFLacdV7otRg5zbX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d44ffebe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2139,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2139), with no line terminators","md5":"b72c1cbb1530a011a27bd9800f26765a","sha1":"27b825c5d8255f33b8427a059d4545ebd65e1746","sha256":"a256fccecac3b32ab73c91d79a18747519a1a18023be05465c933b03523a82e8","sha512":"63febb24bdb65c39acc8d355dc5b20d3a1ad94afc347ab2936c543d8b7a911c2f6d2c1c0146707cdb29bea85a8f34e7fb6e76aaee4bc0bea212ea58835a58025","ssdeep":"","tlshash":"8941ed07f4312d7321ef97b5289eb9842523063e88114611366acb2c257a9c7763bfbe","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-04-04T13:20:48.266966Z","times_seen":48088,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=b3c807cf00d38de8d7f31c1197eb135d","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/woocommerce.js?ver=b3c807cf00d38de8d7f31c1197eb135d HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Nov 2021 03:08:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"619dacb4-410f\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6EobdN4opW9bryFKTesa56heNRfx5zHniTOB%2F7ct0GlkUQbjrh29VPaUTxT6CX4lE2mwYDMLT8c%2Bhh%2Bqx0ARwVxP4%2BHJvCir6csoIQVF%2FFHFcoeT9s%2Br\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d46805be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16655,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16655), with no line terminators","md5":"b8bc644a6494ea2e3c98842cbbb8a090","sha1":"349ca9551cdb7c87b302e6b834c192f7355f50bd","sha256":"994e2944cd5c4f11b9c9f301666b6ded73ebdde4048c086717b031baec4ba154","sha512":"15d079554684753b9e41f70ac5caa5bd6beda450dfbd99c67537340db2b461361310f4fb6315e10c610b43588b37cbf46c27b157f09329d909a3de2757908e42","ssdeep":"384:l8WgqI1acBqGnJ9pgLnx+U1xEmfnOG1E1QtRA:lwqI1pBqGnJ9wnx+U1imfOG1E1QtRA","tlshash":"33729329f37420ed45ba60b5b83f636472b774787507809cb16aa4d6582dc4d2132bbe","first_seen":"2023-03-07T01:24:56Z","last_seen":"2026-04-04T06:26:21.917261Z","times_seen":765,"resource_available":true,"data":null}},"time_used":361,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/lavera-solid-sun-bronzer-01-desert-sun-1799950-de-300x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/lavera-solid-sun-bronzer-01-desert-sun-1799950-de-300x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19466\r\nlast-modified: Thu, 01 Jun 2023 08:20:27 GMT\r\netag: \"647854cb-4c0a\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cllGTr45WsFSw3yioW2zIniZgRlzMk3oMBmyvR%2Bbw9nE58HeMFsoO7hLXBHEcOCUtluYtyVCjtMNwTrGUjnD7WTk6wZUkUOHZmL4f6Bz385M7t5cRQ1h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d92915be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19466,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"fec8f83905474c5276e2a172d0d9cc53","sha1":"44f8cc2a8401677cdf95fe2488b8fb01d02d7380","sha256":"06ef1a4886b37e91a5e930e7a6264360d5130f3411217d724c0cd4d2c153b15e","sha512":"529d4b6772ed075c00e304a81c6f087a9171c94f9530ddb01e7e3dcd041323f5ee5cd251c9db19dc0e474e9ac89e830d1d0348679e23a4fe0266d92b9daed862","ssdeep":"384:HAHwcfY7mKIIqadvx6RjvH1c3ocPW4DcEDlwe0eNTmBcHvxbw1kkSMjfUrbanOWF:Hewc85qadv1JPW4ke0ATmea1Jtj8HanB","tlshash":"1492c011cf32481fd3a74efe3f90194483993b440f96fae7bb325cb5529129e8e29459","first_seen":"2026-03-04T11:58:20.907677Z","last_seen":"2026-03-04T11:58:20.907677Z","times_seen":1,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/master-lin-facial-tonic-wu-zhu-yu-bergamot-60-ml-954507-de-300x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/master-lin-facial-tonic-wu-zhu-yu-bergamot-60-ml-954507-de-300x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11106\r\nlast-modified: Thu, 01 Jun 2023 08:05:12 GMT\r\netag: \"64785138-2b62\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IJyBrnxae6%2Bb6Z86%2FG%2FzfUwH8iWZ%2Fu88XWPs1QoC1K2Po%2FfCBBCYTHwehREcX7WpuuAYScOPRoRuob%2FciGnV01WR%2BqWIWDy6E1%2FuL6IURQpY8KKePwHP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d43ff5be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11106,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"d70cd3eee08b962fbcf3d867805a2a19","sha1":"cdd81b7d1ecda455d130b33b03c1b531cb6af9a1","sha256":"fc6ff0b32bfa012b8dd6ccb8845b25726de9ce613354b222fa483686e98bc20c","sha512":"1b3c965a677ae6579ad4e9188899ca6713d8f5c2f068407f1a7888452bf22ba18e0ef3950226dff6cf8b9c9a2d56a54f5287022371bf27988b724ade345a7ddf","ssdeep":"192:/fOu+3RQTUHGWNHOEK2HjvcpQRW3+MwZo2QRDDxzWAvU4eEEpARxn:Ht+qTgzdLK2HjveQw3+TIxzq4eHSV","tlshash":"8d32af67d54647a0c2290ea6de67f468e19f2f193991bb67a334c8d48d001e83c9f62f","first_seen":"2026-03-04T11:58:20.908676Z","last_seen":"2026-03-04T11:58:20.908676Z","times_seen":1,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 02 Jan 2026 23:58:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69585ba7-830c\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ly7cNJfEM6oqVqu%2FST0YrC6eQZ2kHw8suDtMvSrzgO7UQdlpu3LSjrGWxoBf0RfGWnQL5JetC35O7d8xpzlthXdqkYGVxGLiRpJEF3dPj%2B04fOsMtv9A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d43ff6be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33548,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33542), with no line terminators","md5":"291fa442589607e5f12eed1f9d250511","sha1":"a91a40a7ff6730b67274f950ee46b059e1d9af32","sha256":"d857655afd7f378dbe04cdfd64313353b71b932d8d6c7fc3c021c09be779a297","sha512":"ac8eacade68d8ef1f70f47031a6327a467eef738dbf43087ad3a73d866a0222a01700c83f89d8bb06e01e2528757aae5daf75a7ccd9ddf1bb0f07f008bd4dcbe","ssdeep":"384:EwEZwAMfifbeH/uY3dA6ac+VVogo3wI87TnKebmlioAdJTPxXkSYwTo9uX0jcym:Ec/fRsI+3IAf/d984XxB","tlshash":"6be28349b695b4e302e3b4b4409f444ab1b75b45b81acad1f315f6c0bc7d84ea0a7f8d","first_seen":"2025-10-25T06:58:40.435374Z","last_seen":"2026-04-04T13:47:24.694101Z","times_seen":26618,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js?ver=2.7.0-wc.6.3.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Apr 2022 09:51:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62554b9c-253d\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sru1LzvsWI3exJSnSMrkMXpEKUwmxDHlBXT5E9RfsKTdBlxoP8ngWYdMOKp7NNr%2Fd%2BBo1x0pMRcEf3N7sLvu5702Jf5DGqcYwCT%2BryKw3ujPK1ItBUzN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d43ff9be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9533,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9139)","md5":"87c54edf7dad7dfdfde015f6eee45ff1","sha1":"96ec1a06ea3093c47e1e2fc4444ada7f4456135d","sha256":"ef22199864042b8ceeee3729f3254c140df7217364045737ca3aadf8434fb3da","sha512":"5c3565bb7c80cbebeffd3a0a413df03fb264ef2d2b2f7caeaaa29b828081f6db95ef6fe5c1d64a988d5885dea699a7e9d112393a745a445990008a99ccd5de9f","ssdeep":"192:x9RHfGTArT7TMcPvRwY7A1uKigDDptgMIOP9+HxlP722DIrNrDc:x9RGTArf4cPqY7YhR9thIOPcRF72YsA","tlshash":"9512d86831f3609790b3b1507cf7e78e73b6257c548399c1d0ece46929aceba1226f19","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-04T10:41:13.761032Z","times_seen":33711,"resource_available":true,"data":null}},"time_used":366,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=6.3.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Apr 2022 09:51:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62554b9c-bdd\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YJq6T7o1ZdclR%2F%2Bl4vNM4SMG%2BJ75C2xX8N38bOhGiRWyLvIbIrbFrctunWD79W4ixcqoYkeptlJrbCGsbUdpVElqwXPTGp0xudxCWC%2FHEN6UpChiP7Op\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d44ffabe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3037,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3037), with no line terminators","md5":"8bc2109ef48cabf7a26b73d7c3536c5f","sha1":"0e0dfee3a3975eafc3dd55f190d1deb3c6c55d3b","sha256":"8634aa7a3ac0bc6d359b458c8922e9d3269f64c1355b329bfe215beb12773af8","sha512":"d40afe8509734cb8aa48cd361d68d614b2540a502a9ccffb76e6138de25648f8e1800d2d204111a6026246e1fa5d84e5b17772dda80f215078ae037452b34853","ssdeep":"","tlshash":"8a5172cef126f4ba07e22d81a50bdac45532282bf19665bc2489a1e14f78a461467f3f","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-04-04T13:02:50.057547Z","times_seen":37391,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.14.3","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/themes/flatsome/inc/extensions/flatsome-live-search/flatsome-live-search.js?ver=3.14.3 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Nov 2021 03:08:36 GMT\r\nvary: Accept-Encoding\r\netag: W/\"619dacb4-3e58\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FKqILn%2Bi%2B4FcutyQyixksW%2FFXyD6nKpA3avNgERdoyi4CSu5s2CiLHXOAEuOXd5sZje3c3f8qWjJy7HkrXhVinfqFrNCfBxAKKAn4j4PpsbzvT3DR4jN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d45800be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15960,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12801)","md5":"28c3a79b698984aeea534457071a9fb2","sha1":"ee62a28760e7263f10307a988b244f1f0237601a","sha256":"e3d3660aee33ed4ad14e6dadf15503bf26d877be610ff8c69db18653cc8b8915","sha512":"f31b9ee0c5ce992f540397ecd3bcd61657635b6ed6fb0592798020a5dffebc16f8b53abae8af1a5a38034d26672f03d3f392e62d75892f27d44f22bd090c7e5c","ssdeep":"384:0HFFhp3CyCEB7T+gyV/W1KB/2ZszFmaT+u:ktFCEA/EK9Uap","tlshash":"5662970477823332962b209ddaab414e69bb6d1778056c50b31ec6c49fa8f1c91eff69","first_seen":"2023-03-07T01:19:17Z","last_seen":"2026-04-04T07:03:20.972067Z","times_seen":2996,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jun 2023 07:31:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6478495e-5db\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLKuDhW2%2F0K21xthpUf7PpgCPzQJC5qSbWFcPDG%2FVXq0uys1ZvFFO70gJFW3qLIiLliYrqt9MESz09akNUdbgyAw%2Ffm%2BR40Qai2KR4BPAYebOOklW0z3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d45801be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-04T13:50:48.341482Z","times_seen":63641,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart-variation.min.js?ver=6.3.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Apr 2022 09:51:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62554b9c-3516\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RM3tMJWwKnBC8LvstqyLcxTQS8eMvQ0EZg3e7o5E2IBT1xe912dWPuMzAb84OUD%2FO%2FilvQgFFffdu4BTHfrTobpCpCkVL3NQqoAx%2FsEWLkoeG%2BscUOXC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d46807be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13590,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13590), with no line terminators","md5":"a49a60e0186f705f693279985371da20","sha1":"3419d4683879d6a48e051e38356602a2f5094511","sha256":"3b55a00b09e9df011435d1f358401cf7153066bbfeafdc3384e5d8cdaf4e3262","sha512":"3089d3ab44c6780d7f4691b482792a84b7d26f23f7d4fc9058dcc71028e4614788177bf3ab55da219b911a96ec21af8b1436c9a52846071a4cab89bbc48a959e","ssdeep":"384:ATSilXwOX4sD/+Nh6bMNE0FnDu4yQGF4yZ+wxmeK8TrYnRWO:Ami6/sqNh6bMNE0FnDu4ydF44+wxm98k","tlshash":"f6523fe5b2335c533a6f61a7448f940cb135e83c6242c6b99c9ae7b3983ce416353b6d","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-03T16:22:37.113299Z","times_seen":2089,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/3qw.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/3qw.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:59 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 105421\r\nlast-modified: Fri, 02 Jun 2023 03:20:26 GMT\r\netag: \"64795ffa-19bcd\"\r\nexpires: Fri, 03 Apr 2026 11:57:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5GXWfbb3IP8a0CaN7xUcBJB4AJwETxPIqomDHSdhp%2FRSjuZ9mB69jG8Mu90Fpe%2Bp4FGYK5XFr7nSpuevBa8GEaaulD5ALByFRo3zA9A3nSuc3Pdg%2FMFe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4daf988be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5.1 Windows, datetime=2023:06:02 11:20:24], baseline, precision 8, 1920x600, components 3","md5":"63304fcd9740976f8b78336ea4acfa0b","sha1":"b33fad319fc7fa92c641b360d60816deebd553fd","sha256":"99387a9524176eb7c24034b8bc1919def5c2c71edd01ee8f28d6bccb5440aacd","sha512":"38d44487fe6440d227b6b1f7ae172d6f01e52fe92df116d7d841601c594abccd69d57e105374df8e648d619defa762f2a784f1825824dfe2b1821bdcb80b9b14","ssdeep":"1536:3J8J0xy2cOZNlPKCsxIckpc/lnTO/X6vcpmKH+VucUrDe9H3Rgx:3J8JG7culzsxPOCR/V0G4x","tlshash":"05a357315f688b81ace6be238650ce71c370af94431373e2fa2d772d6ba9911587416f","first_seen":"2025-07-16T12:41:02.497966Z","last_seen":"2026-03-04T11:58:20.913169Z","times_seen":5,"resource_available":false,"data":null}},"time_used":715,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":368,"receive":347,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Livvic%3Aregular%2C700%2Cregular%2C700%7CDancing+Script%3Aregular%2C400\u0026display=swap\u0026ver=3.9","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Livvic%3Aregular%2C700%2Cregular%2C700%7CDancing+Script%3Aregular%2C400\u0026display=swap\u0026ver=3.9 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 04 Mar 2026 11:57:57 GMT\r\ndate: Wed, 04 Mar 2026 11:57:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3804,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4e2cea4bf2b1c5f45eaf8a132d4455cb","sha1":"152129bc2c085f00423f45225b45abb024348b44","sha256":"c99363a7a075aa2cc3a44af86eed6794db16de2d9f2e34492c35587e32c6ad4d","sha512":"68a864176befe7d51f861db4f0fc05c01800294a54ceef3029375676b1ad046365270153098dcfc3dc46c241886ba55885622a9dd215a5e2a6006f3180511d9c","ssdeep":"","tlshash":"ed71b9a1042bd500eb974cc223cebe329e9eb0117454e53d6ffe08c8ec9ad256365b1d","first_seen":"2025-10-06T19:49:53.106878Z","last_seen":"2026-03-04T11:58:20.914441Z","times_seen":5,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":86,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 08 Aug 2023 21:29:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"64d2b3cd-3509\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVh1QbFY1AqTHgwBo1eqcsvkxBAvoJxNi9d8g1s%2Fwrmi%2Bp9YBSoeD0wWpOgkkh2vLm3kyK2SC8q2pX%2BNsroTfBvZhJQY1sG3CNZ6o8lQ8SIvqWS5uS29\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d43ff1be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-04T13:49:26.30716Z","times_seen":638763,"resource_available":true,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":368,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.3.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.6.3.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 12 Apr 2022 09:51:24 GMT\r\nvary: Accept-Encoding\r\netag: W/\"62554b9c-72a\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDADgMSfelAxEBxsbJ8pw6D2JkTxrKRg5MJq7ZHVeGLZYBjF%2BPZ%2BI%2F2uxdIWFYcxVhmuC18vZhBcdRdO0cKZXGwgYVTWrrontF9k4b984ACKbOh18CMU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d44ffcbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1834,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1668)","md5":"d0a6d8547c66b0d7b0172466558d1208","sha1":"ff93916519c7b9483251f609e4d29f38c30a66e3","sha256":"3b1384ff918d4b7f95f9ee5c8fc388203dedff7344d3d96598c9562162788612","sha512":"48bb25b08bfcc9944cd1fc3bd039ea41d1a870f488971839f2891b91710f3ff9eb0b523aa7ab888bf9968bbbca41a48761405abbafc6c6d24927c078049545b8","ssdeep":"","tlshash":"4f31b5c83449388e06af1221523f62cbb03c9a0f5ccd9459a308b2f13431867815bfb3","first_seen":"2023-03-07T01:02:35Z","last_seen":"2026-04-04T13:20:48.338458Z","times_seen":48998,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-includes/js/wp-util.min.js?ver=6.9.1","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-includes/js/wp-util.min.js?ver=6.9.1 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 01 Jun 2023 07:31:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6478495e-592\"\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1h16x3L9WrsQ4LVdcsiSDNZ9URxejcVSjw8D0TSc7m%2F4dc0oM5fYgQFEpV6TxhAv8jvLGxqD%2BhQoNA0%2BSXGjAmstRAZyzK22J54FIJD0PQBXxFpM2BV%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9d70b4d46806be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1426,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1391)","md5":"19d386c9004e54941c1cc61d357efa5d","sha1":"0a77594006c8d86fdcc0adbc2b9aecaef3869586","sha256":"3bc6467a95cec8fa516c6f5f69e1301e37e16f9bb1046fe7756729249f901b95","sha512":"7811cf6babb4df41707f97d1bd65337b5ad7aaedff301fcedb90fb7773fa9876f52458aa03a576910f6126384599ef25f8de76ee309c22e1914d9cf444aefb6f","ssdeep":"","tlshash":"ed21795a7175a9f311333479c23f0207f332e4145a168951e489c4f19d70d8be5b7a19","first_seen":"2023-03-08T14:26:29Z","last_seen":"2026-04-04T13:41:12.392313Z","times_seen":97033,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":363,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/melvita-hydra-aufpolsterndes-fluid-40-ml-1736836-de-211x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/melvita-hydra-aufpolsterndes-fluid-40-ml-1736836-de-211x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13917\r\nlast-modified: Thu, 01 Jun 2023 08:10:36 GMT\r\netag: \"6478527c-365d\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVJHR4jDs1k1GuBSzpZv80wruKMsWbji8EESqtdLLW9lLVn78K3eNrZ%2B3X8huyjSUPbr6%2BS0ffD5WvGidG1SpCYtqdTscA31%2BWECcgmjHnBWpYkm4zIj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d918ffbe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13917,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 211x300, components 3","md5":"ca0b94b2663d5d32e4d761718ec19e70","sha1":"83bf7a82db885fe87e17d14f9f9af3d814776a43","sha256":"2e82dd3880d7eba9564ebaffbe4cf680f5dc7ee8253fdba9593adcbdd35e3107","sha512":"3e112ef0beb7cd21a5ad5202865ca91db9576777729745c0a095fac2b00523b34a11fbfbc660cf816a15ad682c3c58880e4efd0f946a8df8f1af38e6d8275773","ssdeep":"384:XCMQ+OzA7U9uirRnAZyXfRYljPrRbi6qfJgpSBC:XCMQ+OzAdOnAyYzb/q60C","tlshash":"2c52cf3bc5469238de379efa7fd74b2128273a6a98a637c13436d6a3dc344d524490c3","first_seen":"2026-03-04T11:58:20.917564Z","last_seen":"2026-03-04T11:58:20.917564Z","times_seen":1,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/lavera-basis-sensitiv-natural-sensitive-deo-cream-50-ml-1712586-de-300x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/lavera-basis-sensitiv-natural-sensitive-deo-cream-50-ml-1712586-de-300x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 18722\r\nlast-modified: Thu, 01 Jun 2023 08:15:41 GMT\r\netag: \"647853ad-4922\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xLSYEmjb6i5tDv1UiiyOhv06gBtCiiDrUfw%2F%2BFwwqRVRymixjpv79rJUJK62%2FtcrjNJgvFz9QVK6%2F1zSw927cfo0%2BIf3Hi1J51PFMWGvg3tUHGQMcAJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d92906be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18722,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"74fbbef0e56f51060572300e5fcea914","sha1":"022cff9325506a4ddd91c27258e476800749f7b2","sha256":"3f3b3b586771ca70ab7a075136228500321ee84be9503f377fcb2286ced3ea8e","sha512":"81297f2e6a9ac93fd0c42be22306d057780d0cb268b27c480ab7bb6b0d49ab17b3a806809894e1c8fc8202b64aae67f2ac913c1cb477b6bed22c924b015f671a","ssdeep":"384:HwGkpYWsnmcFdWSxzreH9HApXJfwWK4MWQIWv8yrC91ko2:HwGFWq1PfxP3pX358bin2","tlshash":"3582ce26d809e562b83cdd80c956a24b734aa312f1802f7647f2efc7bf15cc2689446f","first_seen":"2026-03-04T11:58:20.918491Z","last_seen":"2026-03-04T11:58:20.918491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":364,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T11:57:55.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Mar 2026 11:57:57 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlink: \u003chttps://www.pflegeschonheit.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.pflegeschonheit.com/wp-json/wp/v2/pages/37\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.pflegeschonheit.com/\u003e; rel=shortlink\r\nstrict-transport-security: max-age=31536000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2FERqGpaTz0VbDOBchuaxWgbIug76mGYah5i6%2Bg6njm6RgCLMM%2FgQDUgTaDyMQY2WbTO2gHp0dc8o6wtdbfJRo3hFvKA3YEhvm5TjJCHWJCSFnE9F4F2\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d70b4c8ec97e0de-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Contact Form 7:5.5.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WooCommerce:6.3.1","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Underscore.js:1.13.7","description":"Underscore.js is a JavaScript library which provides utility functions for common programming tasks. It is comparable to features provided by Prototype.js and the Ruby language, but opts for a functional programming design instead of extending object prototypes.","website":"https://underscorejs.org","common_platform_enumeration":"","icon":"Underscore.js.png","categories":["JavaScript libraries"]}],"data":{"size":170809,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832), with CRLF, LF line terminators","md5":"deaadbde3bcca6e58cb30f5950f2752a","sha1":"8fdb1193377edc24e10129cabb2ce7ba18935284","sha256":"4b5870d7919b1e32904d24766f256002edcf118e0bb972713c2be8b73fcfe5f5","sha512":"2963062f06b4b7df31237cc068f4f9fbf4d921ace7e5622ba55bc194e62acbfb6857751b02930bc79fc5dbe988a60451c1f67d7e19a12c68dda31baf69ec6919","ssdeep":"3072:Sjw4A5rk9KOl0yE+jo3TRvLGtPbxJVuLKvktf3:/5OK+0B","tlshash":"eaf3d6a7c1b55d73121a82e5746477cff9c7da05ea8380b4b3fe869c87c2dd2260364a","first_seen":"2026-03-04T11:58:20.919449Z","last_seen":"2026-03-04T11:58:20.919449Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1642,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":1626,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/themes/flatsome-child/style.css?ver=3.0","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:57.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/themes/flatsome-child/style.css?ver=3.0 HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 24 Nov 2021 03:10:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Wed, 04 Mar 2026 23:57:58 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"619dad20-12f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=goEc%2B3YR2Jl20XJJDXiLkE2XR0WEdG8Dwqij2biqRMYbBMKgskbLw845GxXh%2Fabh4yqgwX9LNGF2UTcvsteWZz06X%2FJ8Ao457H%2BPrfbB5aqFkfEWF1hR\"}]}\r\ncf-ray: 9d70b4d42feebe94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"97ea2d751f6f88abaa4144804c209088","sha1":"fe7deabd8c4a06e58816fd9424e17ad884cf778f","sha256":"61971a06f7ba6959fa232b1137d1de182bf156368ca45164f90dfb1a48941ab3","sha512":"014371a55720b72dc47ac433d2a6da81713918c9d44bf4c00d13160b361b57eeadcc378d9228693e0ee8cd423183a0e5e648c9374d725ae317c4a62068cb1379","ssdeep":"","tlshash":"f0e02bd064d19d0c5136530b047602c893b07b106776056ca08c3568c19ebc508f8ec1","first_seen":"2023-04-06T15:55:49Z","last_seen":"2026-04-04T13:07:18.025746Z","times_seen":5347,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/maternatura-sunshine-schuetzendes-shampoo-granatapfelbluete-250-ml-1729930-de-300x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/maternatura-sunshine-schuetzendes-shampoo-granatapfelbluete-250-ml-1729930-de-300x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 20264\r\nlast-modified: Thu, 01 Jun 2023 08:09:09 GMT\r\netag: \"64785225-4f28\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vyDFWtU7pK4KmgJliQsHdmPrv%2BLJL1T9oE%2FBtc55l8eMx9s1RrUiTpXH6H4Ii6nTSF0EP6TfpyYfAY7oivmR6D2yqDzl0TwbBrmyX1mnNevbmmQ4JhWX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d91902be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20264,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"66b749030d6dae9f73fb99c8dc8daa88","sha1":"7b8cc7da94d249afd4585db2a4d16d9b877b8207","sha256":"f7a48f43559210cadbfccea30c5bf52f4af37f086f2624f65eb0ebce353c66ef","sha512":"e7c95b0766b5d040bac5a37633f988e923d04684f1e50916d5dab6e3a978a4019a059bb1e1c5ff70d0caf7797e6e1ded0dae7297a864102ee3005edaaae37dc4","ssdeep":"384:HL9MzdCmSoSb+8RaRrglSzDkAT9UpCH15M4l6BXivacGTW7CJz8:HOdCp6888lSzDkM+pS1j6BSvacGWGJI","tlshash":"7392d01807e824a78ff6cda86759a402b4cdc8c77fa0b0e736f2c267e5559c84889e71","first_seen":"2026-03-04T11:58:20.920927Z","last_seen":"2026-03-04T11:58:20.920927Z","times_seen":1,"resource_available":false,"data":null}},"time_used":489,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":373,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pflegeschonheit.com/wp-content/uploads/2023/06/miss-trucco-turban-aus-seidensatin-1-st-1103296-de-300x300.jpg","fqdn":"www.pflegeschonheit.com","domain":"pflegeschonheit.com","tld":"com"},"ip":{"addr":"172.67.147.201","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://www.pflegeschonheit.com/","date":"2026-03-04T11:57:58.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pflegeschonheit.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 27 Feb 2026 18:05:38 GMT","end":"Thu, 28 May 2026 19:04:19 GMT"},"fingerprint":{"sha1":"C3:47:7E:5E:0A:8A:F3:0D:14:B1:8A:7B:E1:2B:E2:2C:84:48:C7:6C","sha256":"A9:E0:0A:7B:E2:B2:32:56:7D:2A:06:B7:0D:7C:20:1E:49:29:C6:27:30:14:05:2B:E2:E8:1C:DC:64:94:E4:D6"}}},"request":{"raw":"GET /wp-content/uploads/2023/06/miss-trucco-turban-aus-seidensatin-1-st-1103296-de-300x300.jpg HTTP/1.1\r\nHost: www.pflegeschonheit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pflegeschonheit.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 04 Mar 2026 11:57:58 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11570\r\nlast-modified: Thu, 01 Jun 2023 08:11:55 GMT\r\netag: \"647852cb-2d32\"\r\nexpires: Fri, 03 Apr 2026 11:57:58 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r%2FI71h%2B%2FQw8Hy78xtLAnSaC8Y6rBiA4QQJSoeq2FDxa5z%2FqrFf%2BVblgyJq3rSJX4de960pbdIwTmm4hXDX8LxhbObIhjUCS%2FHnwpotY35d035X4Ar%2BcX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d70b4d91903be94-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11570,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 300x300, components 3","md5":"1e6d965744b118de7ca97b9d188631a6","sha1":"d5d9574d2c88440d783c76de37033afacebc0c98","sha256":"34c93f1eb9645dd7fc476a796b8328959d47e2762fc8a42f4cd9a89dd84f9f1d","sha512":"bb2979b34ca7456619908cb3c3b2876c03f2f85a58a45a00eef4b46981acd827b44ba467acadac09940c3c7b55858b5e70b60afeaac99bc9b97295c876010ef8","ssdeep":"192:/fcI73Iiblju6j1hk/HNKJZnyASKdIQRZfeDPjhe5BljKA0ZaHJCrpAk2P:HcC3/1u6JhccrnyASKdIO8k5TqaHKpAJ","tlshash":"3d32ad2ee412030ac9536c8d9c0ab44cac6aede2255061b9ffb7c154dc7ade8595ca89","first_seen":"2026-03-04T11:58:20.922061Z","last_seen":"2026-03-04T11:58:20.922061Z","times_seen":1,"resource_available":false,"data":null}},"time_used":483,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"www.pflegeschonheit.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}