caretower.de/
301 Moved Permanently 162 B IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Fri, 27 Jan 2023 01:32:50 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://caretower.de/
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2405562765b49b2782ebd2e2994851d5
be7ac8e558f7875bb1fb86ab5ec674424a5ff269
422cfa907461cb7b93b9089d600052f9e94951e5e0c93d97651905002e48ad3e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "422CFA907461CB7B93B9089D600052F9E94951E5E0C93D97651905002E48AD3E"
Last-Modified: Thu, 26 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7414
Expires: Fri, 27 Jan 2023 03:36:24 GMT
Date: Fri, 27 Jan 2023 01:32:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9fbe85f42e8ae8ae41cc12df5f98b141
949fa36ff0f22f72565fd584bef094dd4de23037
184d3e4df4bce559b4d7c4836372f5fd2de9782a96b04d364230b7d695d737d8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "184D3E4DF4BCE559B4D7C4836372F5FD2DE9782A96B04D364230B7D695D737D8"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5517
Expires: Fri, 27 Jan 2023 03:04:47 GMT
Date: Fri, 27 Jan 2023 01:32:50 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 00:42:57 GMT
content-type: application/json
age: 2993
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9677
Expires: Fri, 27 Jan 2023 04:14:07 GMT
Date: Fri, 27 Jan 2023 01:32:50 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: vw7WeJD5MGxbsQjDinop5NJgJNAnFl1AK0Xjr3ziVB9R3IyMqQfuHDmUwC2ZA6MffrNA+qurl/zNaUojzHuqZA==
x-amz-request-id: PRPH8CJRHMN54MVR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 01:20:20 GMT
age: 750
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:50 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8d9d9cc488f7efdecf27a19b01aecddc
42edd9402efe49f274c50d94b441e54aa0358055
86d7b68efd182ab3577c170153d08345190ff778b9cc05f66271c1125172854c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "86D7B68EFD182AB3577C170153D08345190FF778B9CC05F66271C1125172854C"
Last-Modified: Thu, 26 Jan 2023 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 27 Jan 2023 07:32:51 GMT
Date: Fri, 27 Jan 2023 01:32:51 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 00:49:01 GMT
age: 2630
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e2970e1480a4759282d63bb213051e4
ed5194d4d25dfc199821129be5d74be0ce49197d
18e19ea4c9c262cb9a94f89172eef2604222e779346589d470bf2e95ea295563
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "18E19EA4C9C262CB9A94F89172EEF2604222E779346589D470BF2E95EA295563"
Last-Modified: Tue, 24 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6397
Expires: Fri, 27 Jan 2023 03:19:28 GMT
Date: Fri, 27 Jan 2023 01:32:51 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BUWUWFIdQFvP9NUdwTgmfQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Hhk6orz4K+ufLcf4HGkfSQgN7FA=
caretower.de/
200 OK 28 kB IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9493), with CRLF, LF line terminators
Hash 45d885f00824570e0e32bd4a691bdecb
ea68889b1867dcfc8ff0878cc9dc2896692578a7
086510b3e91d5a9927ec1111f5b673fcc66a5812446a76a06694194cfc1ffe8a
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/html; charset=UTF-8
content-length: 27637
link: <https://caretower.de/wp-json/>; rel="https://api.w.org/", <https://caretower.de/wp-json/wp/v2/pages/301>; rel="alternate"; type="application/json", <https://caretower.de/>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PHP/7.4.16, PleskLin
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/revslider/public/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 caretower.de/wp-content/plugins/revslider/public/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/fonts/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: font/woff2
content-length: 77160
last-modified: Fri, 16 Dec 2022 14:16:06 GMT
etag: "639c7da6-12d68"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/Caretower-Weblogo_200.png
200 OK 6.5 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/Caretower-Weblogo_200.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 200 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 7322504234947368641419bb76476875
65ad86b4087005d2b94011c5a26936f9e3f4a28f
865b0b08359d153171c7578fd54ea01ce93d9e1e9887f14ecb774ac405e367ef
GET /wp-content/uploads/2018/04/Caretower-Weblogo_200.png HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/png
content-length: 6500
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-1964"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/sitepress-multilingual-cms/res/flags/de.png
200 OK 250 B URL HTTP/2 caretower.de/wp-content/plugins/sitepress-multilingual-cms/res/flags/de.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 18 x 12, 8-bit/color RGB, non-interlaced\012- data
Hash 9106b58cd67a757d34013ad61e826fcb
5f01f848404a402ed52a377b718236d444d3205b
fb8abf4975a70816d1ecb0e3dff7ed44ff73201795790a55b4abfb0d1b6d162f
GET /wp-content/plugins/sitepress-multilingual-cms/res/flags/de.png HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/png
content-length: 250
last-modified: Mon, 21 Nov 2022 15:03:19 GMT
etag: "637b9337-fa"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/revslider/public/assets/assets/dummy.png
200 OK 68 B URL HTTP/2 caretower.de/wp-content/plugins/revslider/public/assets/assets/dummy.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced\012- data
Hash 2a637d3d825673c0e3462fa4ed9a1c5c
81668d396da22832d75a986407ff10035e0d5899
69539b5b3777cffda28a66d7f2aa9b17c91ee1ec8fd50c00c442af91753a60f7
GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/png
content-length: 68
last-modified: Fri, 16 Dec 2022 14:16:06 GMT
etag: "639c7da6-44"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/mini-shutterstock_409250209-500x300.jpg
200 OK 21 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/mini-shutterstock_409250209-500x300.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x300, components 3\012- data
Hash f6f81adf5535ab66817bd5e8dd989297
a81528aa56f65fb836ee665157304e30a58b5828
0e88028fafba36ea3777ac15f1cc02228cadf92c8bf9fe021f8aa02d4f1d5af7
GET /wp-content/uploads/2018/04/mini-shutterstock_409250209-500x300.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 21141
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-5295"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/mini-shutterstock_488641672-500x300.jpg
200 OK 21 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/mini-shutterstock_488641672-500x300.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x300, components 3\012- data
Hash 7385526d405b14e51e13978d7ccbac22
94c7940d814ed33cc322c6b9070b40468000b141
fbb165eb93a40a4fb48b5b64d77f31036a121d6def412836c128ba0ae6da56a5
GET /wp-content/uploads/2018/04/mini-shutterstock_488641672-500x300.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 21218
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-52e2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/shutterstock_756231364-e1523891192503-500x300.jpg
200 OK 27 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/shutterstock_756231364-e1523891192503-500x300.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x300, components 3\012- data
Hash ae1d71379fb341f31a9b9a1c1c13188e
6867799362c9e41f3522c44d0bf534da070b98ab
8c91e83e9c7852636f3dac2f0d9fdd58e69173e4b2b10ce89f09eb08b874e849
GET /wp-content/uploads/2018/04/shutterstock_756231364-e1523891192503-500x300.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 26931
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-6933"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/shutterstock_574470019-e1523891247560-500x300.jpg
200 OK 20 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/shutterstock_574470019-e1523891247560-500x300.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 500x300, components 3\012- data
Hash 7c418adbd7c9b4c658c5efac746b0722
df7426635f2bb169c7f68ae5686d6a2930dc3014
9876e0c77d06f2be83a3f6ab7d8f969e2503412cf57a6a7b093f36372784c4d8
GET /wp-content/uploads/2018/04/shutterstock_574470019-e1523891247560-500x300.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 19864
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-4d98"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/shutterstock_1041594268-e1523891344667-500x300.jpg
200 OK 18 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/shutterstock_1041594268-e1523891344667-500x300.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 500x300, components 3\012- data
Hash 1e15b291280b37ef489959b358bcfc59
a5077c6ae1a51e864d3c2c7ad359c8c2ea4991a6
152b56f81cdfdddf3b713bee286f641018a16b65268a748856785217ce47620c
GET /wp-content/uploads/2018/04/shutterstock_1041594268-e1523891344667-500x300.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 17838
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-45ae"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/mini-shutterstock_528854752-500x300.jpg
200 OK 16 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/mini-shutterstock_528854752-500x300.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 500x300, components 3\012- data
Hash ca54e91943b913e8611534e3c9911671
be4c302f39a2d63fc67152c9f2de441beab8cc21
c696638de316042a6c3d88d477cd4197ef4da7d4259f36a128d73754e738dec7
GET /wp-content/uploads/2018/04/mini-shutterstock_528854752-500x300.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 15703
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-3d57"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/js/main.min.js?ver=11.4.1
200 OK 82 kB URL HTTP/2 caretower.de/wp-content/themes/dt-the7/js/main.min.js?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (47009)
Hash 7e75247bf83e8d61ef25896d01b4b6e8
8aa98e7dc5e10a8c83f4457ae4b218a38378b8f9
0229207e14e41e1a79657687095dee8214ec0db7fcffc2e087701b59a54dabc4
GET /wp-content/themes/dt-the7/js/main.min.js?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-52179"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/fonts/roboto-v20-latin-regular.woff2
200 OK 16 kB URL HTTP/2 caretower.de/wp-content/fonts/roboto-v20-latin-regular.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 15736, version 1.0\012- data
Hash 479970ffb74f2117317f9d24d9e317fe
81c796737cbe44d4a719777f0aff14b73a3efb1e
48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/fonts/roboto-v20-latin-regular.woff2 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: font/woff2
content-length: 15736
last-modified: Mon, 18 Jan 2021 15:14:07 GMT
etag: "6005a5bf-3d78"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/fonts/roboto-v20-latin-700.woff2
200 OK 16 kB URL HTTP/2 caretower.de/wp-content/fonts/roboto-v20-latin-700.woff2
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 15816, version 1.0\012- data
Hash 2735a3a69b509faf3577afd25bdf552e
8621aff863b67040010ccc183da5b9079ce6fd1d
b4d07892cde715d50bb69c1982df496385d1dfd8f9d1867c31f19a3c8634cfae
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/fonts/roboto-v20-latin-700.woff2 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: font/woff2
content-length: 15816
last-modified: Mon, 18 Jan 2021 15:14:07 GMT
etag: "6005a5bf-3dc8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/borlabs-cookie/assets/images/borlabs-cookie-icon-dynamic.svg
200 OK 4.3 kB URL HTTP/2 caretower.de/wp-content/plugins/borlabs-cookie/assets/images/borlabs-cookie-icon-dynamic.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document, ASCII text, with very long lines (4264)
Hash 9589c90c4b14a74a7d6067935e347cf2
844e42dacc1ecdf47e92bb3dfda07ad8601fe25e
48e369556efd61eaa0d94641e250a9e4cf287d1fd67af1be760aa79c80b2c342
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/borlabs-cookie/assets/images/borlabs-cookie-icon-dynamic.svg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/svg+xml
content-length: 4265
last-modified: Fri, 16 Dec 2022 14:15:00 GMT
etag: "639c7d64-10a9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/js/legacy.min.js?ver=11.4.1
200 OK 24 kB URL HTTP/2 caretower.de/wp-content/themes/dt-the7/js/legacy.min.js?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (1368), with no line terminators
Hash d26c8821268a4440ebfab9f839e7c7a5
c868d439bd15c17259c50ad69dd9f3609d8293da
5e9c45be4c17311b54f4e382eac34eb62b4d3afbb73db5d6087d824bfd608625
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/js/legacy.min.js?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-558"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/shutterstock_130099715-e1523891115278-500x300.jpg
200 OK 23 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/shutterstock_130099715-e1523891115278-500x300.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, baseline, precision 8, 1600x500, components 3\012- data
Hash 7f3b25152f91aaab39d3df45936d1770
f5792147b441daa68e761a8e415f7c80613c19a3
50cd2f4a13478d69e8a5a6535ced325fe02501dcdfc64f59875e5f11ff5b2c95
GET /wp-content/uploads/2018/04/shutterstock_130099715-e1523891115278-500x300.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 24088
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-5e18"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/shutterstock_568479931-e1523890554941-500x300.jpg
200 OK 20 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/shutterstock_568479931-e1523890554941-500x300.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, baseline, precision 8, 1600x500, components 3\012- data
Hash 42a666ab3e79e9a2afc299f90cb255d0
3e86867d6b3f8b4fe328382231b0f32571c9e9bd
a0e4dc2c5b38347f0993c4b16aaac4aca9ecd817a415935e45b71751cde86942
GET /wp-content/uploads/2018/04/shutterstock_568479931-e1523890554941-500x300.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 13065
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-3309"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/ct-header-home.jpg?id=902
200 OK 33 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/ct-header-home.jpg?id=902
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, baseline, precision 8, 1600x500, components 3\012- data
Hash cb3e999bc9e533ca381fa82c7488b701
be10b470019bcb24cc70f79162c39fb32e457c40
b9d8c60193286e93511fd09df804a4c0f0aae790cecc622a182539fb8e116ddc
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2018/04/ct-header-home.jpg?id=902 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 32936
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-80a8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/lib/jquery-mousewheel/jquery-mousewheel.min.js?ver=11.4.1
200 OK 145 kB URL HTTP/2 caretower.de/wp-content/themes/dt-the7/lib/jquery-mousewheel/jquery-mousewheel.min.js?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (2615)
Size 145 kB (145313 bytes)
Hash 83eec51fead22abd511a097341556537
9b4c655df1e6b3274fc801ed5d9f6e0be7b21629
64a477721c89447be98706052e3fabce655b0c4d8aacdef152ebd84210af20c9
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/lib/jquery-mousewheel/jquery-mousewheel.min.js?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-a91"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17236
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 01:32:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17236
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 01:32:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17236
Expires: Fri, 27 Jan 2023 06:20:08 GMT
Date: Fri, 27 Jan 2023 01:32:52 GMT
Connection: keep-alive
caretower.de/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 20 kB URL HTTP/2 caretower.de/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (47826)
Hash 47852fcec15299d5d76a2caf2f55cbb2
13765afecddc6b3f305353a953cbff0abd9e384e
79082e1469a273fbd3f3b33982861d6c01a34bcb0ea25d1638f83b556c8237ca
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Fri, 16 Dec 2022 14:13:55 GMT
etag: W/"639c7d23-172a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 113924cc-a196-4dbd-91d9-68c213265afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fobF-ZoAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61302-6b24941a642b22cf21e47dc0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2P09wOtKPDHjxxAuzcLFMQJwmGN1zNJcH9LA6IJpeaGiaPVRF4y-TA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:59:56 GMT
age: 12776
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5623b111-3a93-4843-8a40-550089a3d3eb.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5623b111-3a93-4843-8a40-550089a3d3eb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a5de6b54196befa95e9291a051c645d0
e3100707a4e9b1d5c30223d31f58cd6ee8ad010b
5bcc3dd7011df4e17d7ef86d892fedeca14b0d0eabbe782fecf35c9a82b25e40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5623b111-3a93-4843-8a40-550089a3d3eb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7804
x-amzn-requestid: 4cd6ed50-202c-4e57-94db-cc6585dca5b1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLQWuH20oAMFxzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cdfa91-05441777646d154650c97512;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 03:10:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: D6nD7sD6FQavjUir9rxJlh9U2reSno5qNQ0qQdG4iS6hscVfSHdBCQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 22:01:13 GMT
age: 12699
etag: "e3100707a4e9b1d5c30223d31f58cd6ee8ad010b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1695371c247eedad65b4cac82f01215d
50510052f0e22e23f747c761d57cdf72910ac533
aadde426229f04f6a489b87d6949a485b19d4fd035cb244b6094549efc08013f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F52a1f3b3-38ab-4f58-ad1a-ca4c9f82503e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6394
x-amzn-requestid: 859587bc-081f-4092-8fed-40e3f2bc8ee4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOjE6FJNIAMFz6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf4bb8-28848a07545a0e557f1250b1;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 03:08:40 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KIQ-V8uU0HwYAPEfXMUw7T2IYlStHuZ0mwWdVFUNf46i6ugVGZm-Bw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 11:50:55 GMT
age: 49317
etag: "50510052f0e22e23f747c761d57cdf72910ac533"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e7158416f60576804ccff03307319fe
a342f94625e913fa6b8d862a59979f1e3ad80dd1
5c525df7d169cc7e033d920c11f4a0163a781c025a22b70530882b56964a9a52
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16430244-f45f-4aea-a8a8-2b1f37fa80ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5737
x-amzn-requestid: cc977ea9-c418-4a5a-a13b-c86e16bbe6ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRGPFGL5oAMFiSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d050c6-2d540cac5ca7d4e64cfdb8bc;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 21:42:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uZnA5gkRlZyqamh_n3992G9PlMJa4gJ-mjSOQEysII73dDKLXmeXsg==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 12:26:22 GMT
age: 47190
etag: "a342f94625e913fa6b8d862a59979f1e3ad80dd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 869cdfba2637cc932ce387317a3c485e
51d87a5223d87c959bf27b2a825dce0a28f52ada
6dc4247dd3110836195f9962463bd8265be89633e9e589bf19955991751c26fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cc9d867-fc35-4a62-9934-4cb307d6146d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5669
x-amzn-requestid: 17f6235c-d495-4813-9453-407331e0dcad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1ZSH4fIAMFxeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c3b-67ff5c7f416727670e7c3b21;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zH3wYMLXCFCcoop-xy3r_wXiY2g684Ei-o6BVntyzqjNeX1UuvQsxA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 04:25:48 GMT
age: 76024
etag: "51d87a5223d87c959bf27b2a825dce0a28f52ada"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2021/11/favicon16.png
200 OK 1.2 kB URL HTTP/2 caretower.de/wp-content/uploads/2021/11/favicon16.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 16 x 16, 8-bit/color RGB, non-interlaced\012- data
Hash d81eab2ead23c222f45dafd66e484a4c
c6fe91ebd235764c2f4af7224dec281320ea6f73
9afc0d4e55820b38bd5beb2d6e53e42881fe91a08c86b91de768dc5fad86a12e
GET /wp-content/uploads/2021/11/favicon16.png HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/png
content-length: 1199
last-modified: Tue, 23 Nov 2021 21:00:48 GMT
etag: "619d5680-4af"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2021/05/CAREtower_Logo_RGB_2.jpg
200 OK 11 kB URL HTTP/2 caretower.de/wp-content/uploads/2021/05/CAREtower_Logo_RGB_2.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x83, components 3\012- data
Hash 2f415d42e9f6440c35522927892967ff
808b4fc0a0519d39980e5894695b370457d2c7cf
183637039db5e917376fa3a17f47498c669d882ce4ffd338cff21728739c0761
GET /wp-content/uploads/2021/05/CAREtower_Logo_RGB_2.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/jpeg
content-length: 11136
last-modified: Thu, 27 May 2021 13:51:23 GMT
etag: "60afa3db-2b80"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/revslider/public/assets/assets/loader.gif
200 OK 2.5 kB URL HTTP/2 caretower.de/wp-content/plugins/revslider/public/assets/assets/loader.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 24 x 24\012- data
Hash 4b3afb84b2b71ef56df09997a350bd04
accdac8a7abeab0e21c49539aad0a973addb28ef
9034d5d34015e4b05d2c1d1a8dc9f6ec9d59bd96d305eb9e24e24e65c591a645
GET /wp-content/plugins/revslider/public/assets/assets/loader.gif HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.5
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: image/gif
content-length: 2545
last-modified: Fri, 16 Dec 2022 14:16:06 GMT
etag: "639c7da6-9f1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5
200 OK 48 kB URL HTTP/2 caretower.de/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5
IP
ASN #24940 Hetzner Online GmbH
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, the7-default-font\012- data
Hash 71f9dfd69c5a3adbbb31a994bffb7b36
97fbd02448d6db534ddfe4bcdc3df7ec5d92af9a
e0394e418d7858c3f9fabb6897f4e9364cf86a23a809127690f467ad111f190d
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=11.4.1
Cookie: wp-wpml_current_language=de
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:53 GMT
content-type: application/octet-stream
content-length: 48020
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: "63d2a859-bb94"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888
200 OK 7.5 kB URL HTTP/2 caretower.de/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format, TrueType, length 7536, version 1.0\012- data
Hash 04eb8fc57f27498e5ae37523e3bfb2c7
d942ae11706c3f7e511e3c49b0e4574d7ad199c4
f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://caretower.de/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.5
Cookie: wp-wpml_current_language=de
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:53 GMT
content-type: font/woff
content-length: 7536
last-modified: Fri, 16 Dec 2022 14:16:06 GMT
etag: "639c7da6-1d70"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2018/04/preview.jpg
200 OK 103 kB URL HTTP/2 caretower.de/wp-content/uploads/2018/04/preview.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, datetime=2018:04:25 11:25:38], baseline, precision 8, 1280x720, components 3\012- data
Size 103 kB (103306 bytes)
Hash 1263bfc19f0a505bc814aaeb2ee267e9
5dbb7b97928f05dbf5d0a745e1ec4faf6807805b
50eac688b57fdf05d42b00f4dfa89ed2b9e4a26b64e20d491daee7e7e03832fb
GET /wp-content/uploads/2018/04/preview.jpg HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Cookie: wp-wpml_current_language=de
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:53 GMT
content-type: image/jpeg
content-length: 103306
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: "6005a5c0-1938a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/smile_fonts/icomoon-brankic-32x32/icomoon-brankic-32x32.css?ver=6.1.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/smile_fonts/icomoon-brankic-32x32/icomoon-brankic-32x32.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/smile_fonts/icomoon-brankic-32x32/icomoon-brankic-32x32.css?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 15:14:09 GMT
etag: W/"6005a5c1-5008"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
200 OK 0 B URL HTTP/2 caretower.de/wp-includes/js/wp-emoji-release.min.js?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 14:13:55 GMT
etag: W/"639c7d23-48b9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/vc-elegant-tabs/js/eTabs.js?ver=6.1.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/vc-elegant-tabs/js/eTabs.js?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/vc-elegant-tabs/js/eTabs.js?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: W/"6005a5c0-4312"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
200 OK 0 B URL HTTP/2 caretower.de/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
IP
ASN #24940 Hetzner Online GmbH
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Mon, 18 Jan 2021 16:19:45 GMT
etag: W/"6005b521-2bd8"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/background-style.min.css?ver=3.19.12
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/background-style.min.css?ver=3.19.12
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/background-style.min.css?ver=3.19.12 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Fri, 21 Oct 2022 10:01:55 GMT
etag: W/"63526e13-240c"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/borlabs-cookie/assets/javascript/borlabs-cookie.min.js?ver=2.2.60
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/borlabs-cookie/assets/javascript/borlabs-cookie.min.js?ver=2.2.60
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/borlabs-cookie/assets/javascript/borlabs-cookie.min.js?ver=2.2.60 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 14:15:00 GMT
etag: W/"639c7d64-618b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/smile_fonts/icomoon-free-social-contact-16x16/icomoon-free-social-contact-16x16.css?ver=6.1.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/smile_fonts/icomoon-free-social-contact-16x16/icomoon-free-social-contact-16x16.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/smile_fonts/icomoon-free-social-contact-16x16/icomoon-free-social-contact-16x16.css?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 15:14:09 GMT
etag: W/"6005a5c1-214b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/vc-elegant-tabs/css/tabs.css?ver=6.1.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/vc-elegant-tabs/css/tabs.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/vc-elegant-tabs/css/tabs.css?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: W/"6005a5c0-17ab"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/the7-css/custom.css?ver=a926a1bfe843
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/the7-css/custom.css?ver=a926a1bfe843
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/custom.css?ver=a926a1bfe843 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:31:56 GMT
etag: W/"63d2aafc-3f900"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/the7-css/post-type-dynamic.css?ver=a926a1bfe843
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/the7-css/post-type-dynamic.css?ver=a926a1bfe843
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/uploads/the7-css/post-type-dynamic.css?ver=a926a1bfe843 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:31:56 GMT
etag: W/"63d2aafc-2742"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/style.min.css?ver=3.19.12
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/style.min.css?ver=3.19.12
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/style.min.css?ver=3.19.12 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Fri, 21 Oct 2022 10:01:55 GMT
etag: W/"63526e13-3432"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 0 B URL HTTP/2 caretower.de/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 14:13:54 GMT
etag: W/"639c7d22-15e54"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/custom.min.js?ver=3.19.12
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/custom.min.js?ver=3.19.12
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/custom.min.js?ver=3.19.12 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 21 Oct 2022 10:01:55 GMT
etag: W/"63526e13-5286"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/revslider/public/assets/fonts/font-awesome/css/font-awesome.css
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/revslider/public/assets/fonts/font-awesome/css/font-awesome.css
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/revslider/public/assets/fonts/font-awesome/css/font-awesome.css HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Fri, 16 Dec 2022 14:16:06 GMT
etag: W/"639c7da6-903d"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/2020/05/headervideo.mp4
206 Partial Content 0 B URL HTTP/2 caretower.de/wp-content/uploads/2020/05/headervideo.mp4
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/2020/05/headervideo.mp4 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://caretower.de/
Cookie: wp-wpml_current_language=de
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 206 Partial Content
server: nginx
date: Fri, 27 Jan 2023 01:32:53 GMT
content-type: video/mp4
content-length: 2818169
last-modified: Mon, 18 Jan 2021 15:14:09 GMT
etag: "6005a5c1-2b0079"
x-powered-by: PleskLin
content-range: bytes 0-2818168/2818169
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/vc-elegant-tabs/css/tabstyles.css?ver=6.1.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/vc-elegant-tabs/css/tabstyles.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/vc-elegant-tabs/css/tabstyles.css?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: W/"6005a5c0-644e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.5
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.5
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.6.5 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 14:16:06 GMT
etag: W/"639c7da6-285db"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/sitepress-multilingual-cms/templates/language-switchers/menu-item/style.min.css?ver=1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 21 Nov 2022 15:03:18 GMT
etag: W/"637b9336-ca"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.1.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/uploads/smile_fonts/Defaults/Defaults.css?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 15:14:09 GMT
etag: W/"6005a5c1-6bf7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/css/wpbakery.min.css?ver=11.4.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/themes/dt-the7/css/wpbakery.min.css?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/themes/dt-the7/css/wpbakery.min.css?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-6498"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/the7-css/the7-elements-albums-portfolio.css?ver=a926a1bfe843
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/the7-css/the7-elements-albums-portfolio.css?ver=a926a1bfe843
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/the7-elements-albums-portfolio.css?ver=a926a1bfe843 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:31:56 GMT
etag: W/"63d2aafc-5af4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-includes/css/classic-themes.min.css?ver=1
200 OK 0 B URL HTTP/2 caretower.de/wp-includes/css/classic-themes.min.css?ver=1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Fri, 16 Dec 2022 14:13:55 GMT
etag: W/"639c7d23-d9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/vc-elegant-tabs/css/animate.min.css?ver=6.1.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/vc-elegant-tabs/css/animate.min.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/vc-elegant-tabs/css/animate.min.css?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: W/"6005a5c0-8836"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.css?ver=11.4.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.css?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.css?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-2a03"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/animate.min.css?ver=3.19.12
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/animate.min.css?ver=3.19.12
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/animate.min.css?ver=3.19.12 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Fri, 21 Oct 2022 10:01:55 GMT
etag: W/"63526e13-11230"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/info-box.min.css?ver=3.19.12
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-css/info-box.min.css?ver=3.19.12
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-css/info-box.min.css?ver=3.19.12 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Fri, 21 Oct 2022 10:01:55 GMT
etag: W/"63526e13-1082"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.10.0
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.10.0
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.10.0 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 14:15:18 GMT
etag: W/"639c7d76-4e52"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/formcraft3/dist/form.css?ver=3.5.3
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/formcraft3/dist/form.css?ver=3.5.3
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/formcraft3/dist/form.css?ver=3.5.3 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 15:14:07 GMT
etag: W/"6005a5bf-ef07"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/the7-css/css-vars.css?ver=a926a1bfe843
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/the7-css/css-vars.css?ver=a926a1bfe843
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/uploads/the7-css/css-vars.css?ver=a926a1bfe843 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:31:55 GMT
etag: W/"63d2aafb-7b2e"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/fonts/FontAwesome/back-compat.min.css?ver=11.4.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/themes/dt-the7/fonts/FontAwesome/back-compat.min.css?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/fonts/FontAwesome/back-compat.min.css?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:20:40 GMT
etag: W/"63d2a858-4ab4"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/cache/borlabs-cookie/borlabs-cookie_1_de.css?ver=2.2.60-5
200 OK 0 B URL HTTP/2 caretower.de/wp-content/cache/borlabs-cookie/borlabs-cookie_1_de.css?ver=2.2.60-5
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/cache/borlabs-cookie/borlabs-cookie_1_de.css?ver=2.2.60-5 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Fri, 21 Oct 2022 13:33:00 GMT
etag: W/"63529f8c-9de7"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=2.7.2
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=2.7.2
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/dt-the7-core/assets/css/post-type.min.css?ver=2.7.2 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Tue, 17 Jan 2023 16:27:48 GMT
etag: W/"63c6cc84-a763"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/the7-css/media.css?ver=a926a1bfe843
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/the7-css/media.css?ver=a926a1bfe843
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/uploads/the7-css/media.css?ver=a926a1bfe843 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:31:56 GMT
etag: W/"63d2aafc-12dd0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/style.css?ver=11.4.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/themes/dt-the7/style.css?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/style.css?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:20:40 GMT
etag: W/"63d2a858-590"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.5.14
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.5.14
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/sitepress-multilingual-cms/res/js/cookies/language-cookie.js?ver=4.5.14 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Mon, 21 Nov 2022 15:03:19 GMT
etag: W/"637b9337-e2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.5
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.5
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.6.5 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 16 Dec 2022 14:16:06 GMT
etag: W/"639c7da6-63723"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.5
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.5
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/revslider/public/assets/css/rs6.css?ver=6.6.5 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Fri, 16 Dec 2022 14:16:06 GMT
etag: W/"639c7da6-e394"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/fonts/FontAwesome/css/all.min.css?ver=11.4.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/themes/dt-the7/fonts/FontAwesome/css/all.min.css?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/fonts/FontAwesome/css/all.min.css?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-e71a"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/css/main.min.css?ver=11.4.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/themes/dt-the7/css/main.min.css?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/css/main.min.css?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-3c623"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/js/above-the-fold.min.js?ver=11.4.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/themes/dt-the7/js/above-the-fold.min.js?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/js/above-the-fold.min.js?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-31a9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-appear.min.js?ver=3.19.12
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-appear.min.js?ver=3.19.12
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/jquery-appear.min.js?ver=3.19.12 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 21 Oct 2022 10:01:55 GMT
etag: W/"63526e13-549"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=3.19.12
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=3.19.12
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate_bg.min.js?ver=3.19.12 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 21 Oct 2022 10:01:55 GMT
etag: W/"63526e13-b05b"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/vc-elegant-tabs/css/font-awesome.min.css?ver=6.1.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/vc-elegant-tabs/css/font-awesome.min.css?ver=6.1.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/vc-elegant-tabs/css/font-awesome.min.css?ver=6.1.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 15:14:08 GMT
etag: W/"6005a5c0-7918"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/the7-css/mega-menu.css?ver=a926a1bfe843
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/the7-css/mega-menu.css?ver=a926a1bfe843
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/the7-css/mega-menu.css?ver=a926a1bfe843 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:31:56 GMT
etag: W/"63d2aafc-48ce"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.19.12
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.19.12
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/ultimate-params.min.js?ver=3.19.12 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 21 Oct 2022 10:01:55 GMT
etag: W/"63526e13-454"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.js?ver=11.4.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.js?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/themes/dt-the7/lib/custom-scrollbar/custom-scrollbar.min.js?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-9c95"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/info-box.min.js?ver=3.19.12
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/Ultimate_VC_Addons/assets/min-js/info-box.min.js?ver=3.19.12
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/Ultimate_VC_Addons/assets/min-js/info-box.min.js?ver=3.19.12 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Fri, 21 Oct 2022 10:01:55 GMT
etag: W/"63526e13-1cf"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/formcraft3/dist/formcraft-common.css?ver=3.5.3
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/formcraft3/dist/formcraft-common.css?ver=3.5.3
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/formcraft3/dist/formcraft-common.css?ver=3.5.3 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 15:14:07 GMT
etag: W/"6005a5bf-6ea2"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/uploads/js_composer/js_composer_front_custom.css?ver=6.10.0
200 OK 0 B URL HTTP/2 caretower.de/wp-content/uploads/js_composer/js_composer_front_custom.css?ver=6.10.0
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/uploads/js_composer/js_composer_front_custom.css?ver=6.10.0 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Mon, 18 Jan 2021 16:49:34 GMT
etag: W/"6005bc1e-8a1f9"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=11.4.1
200 OK 0 B URL HTTP/2 caretower.de/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=11.4.1
IP
ASN #24940 Hetzner Online GmbH
Analyzer Verdict Alert fortinet Phishing
GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.min.css?ver=11.4.1 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: text/css
last-modified: Thu, 26 Jan 2023 16:20:41 GMT
etag: W/"63d2a859-4e33"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
caretower.de/wp-content/plugins/dt-the7-core/assets/js/post-type.min.js?ver=2.7.2
200 OK 0 B URL HTTP/2 caretower.de/wp-content/plugins/dt-the7-core/assets/js/post-type.min.js?ver=2.7.2
IP
ASN #24940 Hetzner Online GmbH
GET /wp-content/plugins/dt-the7-core/assets/js/post-type.min.js?ver=2.7.2 HTTP/1.1
Host: caretower.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://caretower.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 01:32:52 GMT
content-type: application/javascript
last-modified: Tue, 17 Jan 2023 16:27:48 GMT
etag: W/"63c6cc84-68d5"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
138.201.56.111
34.117.237.239
23.36.76.226