r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bea3185dd820a31c1981317f37c3456d
1a548a5d27270fc11df9011837a7149571cedd78
469b97bf9f57401b3c9571039483589f2815f4794212b75c7c85cfefe0ae71e9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "469B97BF9F57401B3C9571039483589F2815F4794212B75C7C85CFEFE0AE71E9"
Last-Modified: Wed, 22 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7243
Expires: Thu, 23 Mar 2023 00:42:03 GMT
Date: Wed, 22 Mar 2023 22:41:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65fc860bc043f3fb83bdc3debdcd322d
418010755deae099ef1284e402813c5837a10f42
d93d50c523c7f735987aba09db628259441eb75efe713a2df3c214e1fb8b5171
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D93D50C523C7F735987ABA09DB628259441EB75EFE713A2DF3C214E1FB8B5171"
Last-Modified: Wed, 22 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19785
Expires: Thu, 23 Mar 2023 04:11:05 GMT
Date: Wed, 22 Mar 2023 22:41:20 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5285a032a285729d3e4a546310ed052d
d370c14bbc2d168cc3703bcb6b94ea0ece26e69d
a811aac1eb89de0666a7de8d3eda1dc3affa7ce5353219211a1beee1211536b5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A811AAC1EB89DE0666A7DE8D3EDA1DC3AFFA7CE5353219211A1BEEE1211536B5"
Last-Modified: Mon, 20 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4107
Expires: Wed, 22 Mar 2023 23:49:47 GMT
Date: Wed, 22 Mar 2023 22:41:20 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 4ad6984a756720fbfff47b37a75513a2
355e35258114452af8b9638985ed9d8ef3bf0aca
43181fccb10652c68cae86e5e32b4e8f426fb5ad49d8125cb99e072cff573cf5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Alert, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 22 Mar 2023 22:15:03 GMT
content-type: application/json
age: 1577
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: ApkaY/a+g1eznm8DxDCZpLbkvAnRvDVvZ4XBaRHchsGYc/Yw/vgV5r3JUDzVcLx7AWw+Nvu8pPM=
x-amz-request-id: 7YCF4TTK9ZGZE6ZA
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 22 Mar 2023 21:59:41 GMT
age: 2499
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:20 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d85a0c5dbdd6105d70f3de5fb5411b68
4f87ba7fb164aca63645b6a4a7fe7e18c4376b0a
41a73fd656a518110f66e2023fc8cb71be5676366710fe2b718d65c1caa58a8c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41A73FD656A518110F66E2023FC8CB71BE5676366710FE2B718D65C1CAA58A8C"
Last-Modified: Wed, 22 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15887
Expires: Thu, 23 Mar 2023 03:06:08 GMT
Date: Wed, 22 Mar 2023 22:41:21 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 22 Mar 2023 22:17:23 GMT
age: 1438
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 6mTRba4HSn8kfjayBdERbA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: R9XMVyV3JWw6S5xRbIlwjDtjoL8=
Date: Wed, 22 Mar 2023 22:41:21 GMT
Via: 1.1 google
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
regio.brecht-caravan.de/
301 Moved Permanently 0 B IP
ASN #8972 Host Europe GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 22 Mar 2023 22:41:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Redirect-By: WordPress
Location: https://regio.brecht-caravan.de/
X-Powered-By: PHP/7.3.5, PleskLin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash df1f793164548e72191e45e12fc96384
e8e8125084cab9f182aa33b66f956b7529e07a32
9cb70e6ce1bd51157caf51ce07c3e80acb0813c576e21752de79031d55c1989c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9CB70E6CE1BD51157CAF51CE07C3E80ACB0813C576E21752DE79031D55C1989C"
Last-Modified: Mon, 20 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 23 Mar 2023 04:41:21 GMT
Date: Wed, 22 Mar 2023 22:41:21 GMT
Connection: keep-alive
regio.brecht-caravan.de/wp-includes/css/classic-themes.min.css?ver=1
200 OK 189 B URL HTTP/2 regio.brecht-caravan.de/wp-includes/css/classic-themes.min.css?ver=1
IP
ASN #8972 Host Europe GmbH
Hash 5a18e16eb01cbaa862eb32e6b77bedb2
3abf9b913cc9f558f02cba7c9b822f8d1812cb96
d2b5af913332941d5ae7786d1fa70e0d009315c4ede6ad5b80d0f663bb54521f
GET /wp-includes/css/classic-themes.min.css?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: text/css
content-length: 189
x-accel-version: 0.01
last-modified: Mon, 07 Nov 2022 16:50:07 GMT
etag: "d9-5ece4373eaceb-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/
200 OK 95 kB IP
ASN #8972 Host Europe GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9495)
Hash 88c46ce1429ef46707755ec3d5f20862
2eb9368684940faf8566df8367c0ceef78253244
71820b06f28a64754fb285bc2c412c9e18c7d1d0555b7f634a10e11a6a8650fe
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: text/html; charset=UTF-8
last-modified: Wed, 22 Mar 2023 12:35:50 GMT
x-powered-by: PHP/7.3.5, PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/logo-brecht-caravan.png
200 OK 9.6 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/logo-brecht-caravan.png
IP
ASN #8972 Host Europe GmbH
File type PNG image data, 315 x 110, 8-bit colormap, non-interlaced\012- data
Hash 0e3b71c8bf9cda0b344179783b191771
7fe74afdf92689cb3bd77077600a72ca4fbfde8d
804ddbaf7594000be46db6cb51b970c0302f01fd22e1625e50c1e1adc7ec2c00
GET /wp-content/uploads/2022/10/logo-brecht-caravan.png HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/png
content-length: 9552
last-modified: Wed, 05 Oct 2022 13:37:37 GMT
etag: "633d88a1-2550"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/css/style.min.css?ver=6.2.3
200 OK 177 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/css/style.min.css?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Size 177 kB (177090 bytes)
Hash 1ff01c0380d8f01bb2372a2133a73706
2029a252b786b270b005ffee17f131e9409ba7bd
3e431414a23b4e99994ee982a3fc47a01dfd07f2df55f08f313e993af542ebbc
GET /wp-content/themes/Getblue/assets/css/style.min.css?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: text/css
content-length: 177090
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-2b3c2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
200 OK 90 kB URL HTTP/2 regio.brecht-caravan.de/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (65447)
Hash 17738318d61d394f1de8890d589afaec
f6d0c4dc1399cf02d53f5753ad46573a8bbc2ac3
cc7403bab52ed166e24ea9324241045af370be482f5b594468f4a6ac6e7e7981
GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 89684
last-modified: Mon, 07 Nov 2022 16:50:06 GMT
etag: "6369373e-15e54"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/modernizr.js?ver=3.3.1
200 OK 13 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/modernizr.js?ver=3.3.1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (12991), with no line terminators
Hash 5c6f8c2d5542d6fa991c13b497d05b42
4136a4ad9c4514563be497f968ce56d11539c8a8
45489ffcf01ef61169bda340908095cfc2c0ddcfa78a6cad71a2d1b636feccdf
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/modernizr.js?ver=3.3.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 12991
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-32bf"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.fitvids.js?ver=1.1
200 OK 1.8 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.fitvids.js?ver=1.1
IP
ASN #8972 Host Europe GmbH
File type HTML document, ASCII text, with very long lines (1767), with no line terminators
Hash 882a4f6998e5d6878f6f53f15008e525
2f73282313194a5ea50186b3d94842b47f941274
233cb2b905dec5df68df039e52e26980f674880fee51a8f6b7f75486760f1f3e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.fitvids.js?ver=1.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1767
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-6e7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/fusion-video-general.js?ver=1
200 OK 6.8 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/fusion-video-general.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (6803), with no line terminators
Hash c47fc57967c35a064f5d1918f173f9d0
96b06b5db2ef750abc8f6232771d7c52879a06d3
dcefc5cafed5481f31bf826c91496e5368751599dd37c4e8d39af82711b439fd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/fusion-video-general.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 6803
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-1a93"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.mousewheel.js?ver=3.0.6
200 OK 2.6 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.mousewheel.js?ver=3.0.6
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2604), with no line terminators
Hash 5118a4965e81da6dcb7def1ca48b189b
f67279ea1c87e5605f9930c9eedfc4cb54c6adf5
136859a04a16d051a3d15752d0b415a6c2c837f1278a56dbb87a0e93ba8b9601
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.mousewheel.js?ver=3.0.6 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2604
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-a2c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-lightbox.js?ver=1
200 OK 6.7 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-lightbox.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (6687), with no line terminators
Hash 2a26fbc83240650485f5745fdee66d03
82528831d8d0398f18bc1924267152f3f98afa02
ad6e433f81355d2027a167a1dc4f841c75babc2cf5a14316e48e1419a2eb3352
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-lightbox.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 6687
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-1a1f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/imagesLoaded.js?ver=3.1.8
200 OK 6.8 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/imagesLoaded.js?ver=3.1.8
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (6785), with no line terminators
Hash 6fb516503ad779228bc4ce728695f863
4327965b2c094d7b2e0723e98fdc5278241faba5
e1ad0b4138c80c3d001287d48a3915724c963ef85787df537a8de61f906c5f8e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/imagesLoaded.js?ver=3.1.8 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 6785
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-1a81"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
200 OK 95 kB URL HTTP/2 regio.brecht-caravan.de/wp-includes/css/dist/block-library/style.min.css?ver=6.1.1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (47826)
Hash 71d925864153f0edf91037f3d31048e8
cc16a0524ac63b5ce29f703a66412224f0dd771a
c324ef26b20264369e4568dc9ef1c5cb1f325f6bc4e8b7c01f7fe93fa353276a
Analyzer Verdict Alert fortinet Malware
GET /wp-includes/css/dist/block-library/style.min.css?ver=6.1.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: text/css
content-length: 94889
last-modified: Tue, 15 Nov 2022 22:16:42 GMT
etag: "63740fca-172a9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/isotope.js?ver=3.0.4
200 OK 35 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/isotope.js?ver=3.0.4
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (34773), with no line terminators
Hash 2da6e4c018f2e2f1dfea2ebaa3ae11d5
b885a7a727ad25230a3bcdd3314da471df899371
ed00ca0964cbfca3e3a28ff14ba988ead8846f695adc310f8d3ad796ffed28fb
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/isotope.js?ver=3.0.4 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 34773
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-87d5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/packery.js?ver=2.0.0
200 OK 14 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/packery.js?ver=2.0.0
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (13723), with no line terminators
Hash 05440d2fd20d5cad51df4b4ed447435d
ea9dba717a70c0afeb61f7a046c6682a62eed827
2b01072bc605e2004b2013b56510475dba15fc901809de67475269d32fb3384d
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/packery.js?ver=2.0.0 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 13723
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-359b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-core/js/min/avada-portfolio.js?ver=1
200 OK 14 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-core/js/min/avada-portfolio.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (13618), with no line terminators
Hash adac662a01508b35cb271074d149b49f
dd59fb4bdf5147ab32bd1dac98f04df75cead4d8
fa9a3b629c012eed6db49a8e209db8ee513f18c4de69ef5a4762838dbddb67dc
GET /wp-content/plugins/fusion-core/js/min/avada-portfolio.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 13618
last-modified: Wed, 11 Nov 2020 16:29:31 GMT
etag: "5fac116b-3532"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.infinitescroll.js?ver=2.1
200 OK 21 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.infinitescroll.js?ver=2.1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (21001), with no line terminators
Hash 182792369c29563f52abf6b0f6aadaab
988149f266f2dbec09c205ec1c5f564cd70a165a
dd3683b4ac4218364a65840dfef8655020d51ec5acc7ac6bda41bbc727c90e66
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.infinitescroll.js?ver=2.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 21001
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-5209"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-core/js/min/avada-faqs.js?ver=1
200 OK 1.1 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-core/js/min/avada-faqs.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1131), with no line terminators
Hash 8c1f36e3c027675079a56b1fbdf0018a
dda09c295433922615fb2c407c53e0abe21d55f6
522e41becdacdc1f0a263e0b96346f7c17c1d60fe3a9094f916b0b149758f08f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-core/js/min/avada-faqs.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1131
last-modified: Wed, 11 Nov 2020 16:29:31 GMT
etag: "5fac116b-46b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-chart.js?ver=1
200 OK 5.2 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-chart.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (5217), with no line terminators
Hash e6bc39884fd8636370d4727968d40c9c
4412499648cfeb0a2ec2f69d788c414c9a4177aa
b026d303f9cf5c28c00da0fa4d537b574556524e49fb50434e580530715c00b6
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-chart.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 5217
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-1461"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column-bg-image.js?ver=1
200 OK 1.8 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column-bg-image.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1843), with no line terminators
Hash d9c1ce75f7a4d6b3119445df9961e750
d6bb3e4f417a808f47037db41a7da51acbad2f9f
c9b312a9ed8b686e4e9f6ef88d30874c8f12222b9d5afca7dafdaa446042ec6f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column-bg-image.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1843
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-733"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/cssua.js?ver=2.1.28
200 OK 3.3 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/cssua.js?ver=2.1.28
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3344), with no line terminators
Hash 6ee34d5acab69cb428cb2d5f4eb00d17
3b7ba1fea4b197f7363d0631ebb70ff1247594d5
daf181ab9ead5372eefb6fe5d87704d7abdbfa6c09e4c79a2a2f688c6fac5ada
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/cssua.js?ver=2.1.28 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3344
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-d10"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.waypoints.js?ver=2.0.3
200 OK 7.5 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.waypoints.js?ver=2.0.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (7507), with no line terminators
Hash b91d520e927a3eae9283e85bf959decb
4be69b91e8186114b91efb0a7f6c492da6e94a2c
b3ce23d3aa6ae1702a3d39482e3959ee43cda13fb33bb9136b09606eef2efd50
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.waypoints.js?ver=2.0.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 7507
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-1d53"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-waypoints.js?ver=1
200 OK 271 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-waypoints.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (479), with no line terminators
Hash f3e94f8fba3206554d0687716e311abd
6f0f5318efc05a0d9d224925ca37427c4f7fd40a
4b4bf1a3a692fa61c7f8c88ebf6d2326356193b6ce6f50a8efeb24b4e378b02e
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-waypoints.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 271
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "1df-5b3c28e309bb3-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-equal-heights.js?ver=1
200 OK 1.4 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-equal-heights.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1417), with no line terminators
Hash 044f04f1b997661773e5fb7a98f0283e
0e6a82d2e4e086f07b3a2f4043d444d44ae45a14
18d6442774348bade3c7053b5775acde74021892a547b57511e8f0c9842f74da
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-equal-heights.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1417
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-589"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-animations.js?ver=1
200 OK 1.7 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-animations.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1710), with no line terminators
Hash 70eee3cb857777d0d1799887c1ece674
68a332673bc8eafc9b532234f3e06cb687545def
c87f539817d339f25966b76b34edcefb306389e761d5d318e6fe14c291ae51e4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-animations.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1710
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-6ae"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column.js?ver=1
200 OK 5.1 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (5069), with no line terminators
Hash 40719b9116c5d2ecdc5963c3a1096492
7324973e34c2aecb3286fc1ef6637eb1ba3ebebd
171292f14119b55d0106dfa2df43e052b778a713c7bfa629364fae708223e76f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-column.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 5069
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-13cd"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.fade.js?ver=1
200 OK 1.2 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.fade.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1162), with no line terminators
Hash eef83ebcbba649dcd3d4939d9221df41
cb1d24ed2c6d23e3b41023935aa50177829033d0
836e98f92408ccb7250927acef9b494fbacc18678ef18888f835101557bddd37
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.fade.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1162
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-48a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.requestAnimationFrame.js?ver=1
200 OK 337 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.requestAnimationFrame.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (695), with no line terminators
Hash 0921c87a11483e7ea5c29d7adeb6575e
7f4edddc51e12385b8ee8c859abbadaae5f2f899
dee531dca244cc30d1bd9e80253cf7362928cc9dfbbf58b3ea020edfdbc6fcbd
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.requestAnimationFrame.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 337
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "2b7-5b3c28e303df3-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/fusion-parallax.js?ver=1
200 OK 12 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/fusion-parallax.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (12004), with no line terminators
Hash e985c6ff520271e147f180d04a411ec3
57fe22916ef0180d5226f5d157497da54d7dcadf
cc4b131c9e9bc64d98932c96c3c65bc4106c8891a3b3fdc2ecd68a70b9051ff6
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/fusion-parallax.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 12004
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-2ee4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.ilightbox.js?ver=2.2.3
200 OK 82 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.ilightbox.js?ver=2.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Hash 35197323ff5dc586f97d942ace3947c7
30f9a14552d9cc9bb1e08b97a44bc0904ccd7a46
30c6eb68fd21f916b20ed49d96372fa260d2c59b73b31a617a62cecef5ad9a15
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.ilightbox.js?ver=2.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 82124
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-140cc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/fusion-video-bg.js?ver=1
200 OK 5.3 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/fusion-video-bg.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (5277), with no line terminators
Hash ce20febc6b8dffe5b4ffd090862aa897
d651067c1e4cc7204bb31dc6580a80f0c3ea4089
a96a401df5c08d96515158eedd46c80a3915f09020b6d2a0a559ac9d7d62227c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/fusion-video-bg.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 5277
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-149d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-container.js?ver=1
200 OK 14 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-container.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (13605), with no line terminators
Hash 455fb50d2239ec5a705f5421797d3a8a
11e8715f0b1b8c15282fb2c88c653d6e163b1608
9657d9acfc3347cb04d62bbfcdc2ab8d45418230b6a90cbc7240eb79026ff3bd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-container.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 13605
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-3525"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-content-boxes.js?ver=1
200 OK 4.2 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-content-boxes.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (4175), with no line terminators
Hash a01980edb8ba1fed86d49b04a66306d8
c86ae4c928e5e17f9404e904a56dacc35e86acae
38c4234cba77d179e82329a80ba957df457d4831a842ebdc24e00179a3d4b537
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-content-boxes.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 4175
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-104f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.countdown.js?ver=1.0
200 OK 2.9 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.countdown.js?ver=1.0
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2876), with no line terminators
Hash 50c6e717421b2e0215533bfc20411908
91945c6eff79501dd3637a40919f61368cbaf730
8fde2abd4112a36fd4ac293c1207d81435d3c68e378928b911569ea448eec4d3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/library/jquery.countdown.js?ver=1.0 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2876
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-b3c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-countdown.js?ver=1
200 OK 329 B URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-countdown.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (522), with no line terminators
Hash fed87aeee911ffd0e37289d7b95221f8
18c75a93ebd981354df7809a60fd6250e6977fc6
956db31bb259e866379bd531cd3e063472a971449b0d95b24d6e1d3a02b3b67e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-countdown.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 329
x-accel-version: 0.01
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "20a-5b3d74ea4e77b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.countTo.js?ver=1
200 OK 430 B URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.countTo.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (945), with no line terminators
Hash fba7a7fe877c30b28aac94da6ab21f05
4449a8cb948839e3679388160107daf9afbbf57f
cd512f9a349ed6e18864ce7472063481a7ad5d07c062bfedf664556d8eaff491
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/library/jquery.countTo.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 430
x-accel-version: 0.01
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "3b1-5b3d74ea4995b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.appear.js?ver=1
200 OK 3.0 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.appear.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2985), with no line terminators
Hash 6cf842b08dffbc10e95807c46f7d0573
cc654b95bdc330edf20372e8db8e5d822ecc013e
fa80baec432350a1a335a421479336b65432f358727c89f0e414fe11fa39cd10
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.appear.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2985
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-ba9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-counters-box.js?ver=1
200 OK 1.3 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-counters-box.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1274), with no line terminators
Hash 9d438d9adbb8fa931323fab6ad97ff4d
670263b8f0fe26afb5219391abd01ca8b5bdf8f1
06c49df1e161d431beb0c50227884fd97c5ab52ab83373ca0ed0e1ee074034fe
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-counters-box.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1274
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-4fa"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.easyPieChart.js?ver=2.1.7
200 OK 3.6 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.easyPieChart.js?ver=2.1.7
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3555), with no line terminators
Hash 1399e3163023f835423766d8ed6fd081
88ef0a2aa9b006c8d622f598d07149f4568ba010
225978e62705950d43f151a42fe6bbee9d02a3c75cfae8121d6c42608f98e317
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.easyPieChart.js?ver=2.1.7 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3555
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-de3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-counters-circle.js?ver=1
200 OK 3.4 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-counters-circle.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3393), with no line terminators
Hash dd8aaca9c551d99c6577006dc749cbb7
152d08bb782d9355d1837eee22ea891f1cd99d0f
0449a9e038e3339d3f289637b406d00323fdb1137a61d707fb8e749d5e7536bc
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-counters-circle.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3393
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-d41"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-flip-boxes.js?ver=1
200 OK 2.7 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-flip-boxes.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2740), with no line terminators
Hash a706b10989b0311a777c2cade22bc417
a720b4e90e69b88ada39910c526d515fb34e4a61
a6e683147bf97993b9cdabbf0ba7f967fff4a87b32736ed8d0e515c10d155373
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-flip-boxes.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2740
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-ab4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-gallery.js?ver=1
200 OK 1.9 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-gallery.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1900), with no line terminators
Hash 44400d4919eab602739395cc400898e7
81e3213ba003192c982abc210a2cafb86dcd7e99
3eb054e82dde7d4fa01c7edcd6216bbe66cc0d1457d5ba4a45fae14b3477ad71
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-gallery.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1900
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-76c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.fusion_maps.js?ver=2.2.2
200 OK 5.7 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.fusion_maps.js?ver=2.2.2
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (5699), with no line terminators
Hash a1531e56b5c6340e633d97a1159d34c1
d81a0714f78dd07733a03c5afd2d09c9bebd9016
fe85251352045b1d73418f58468a6aa1344866115e8c3a3a67a9b65168aa4350
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.fusion_maps.js?ver=2.2.2 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 5699
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-1643"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-google-map.js?ver=1
200 OK 302 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-google-map.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (499), with no line terminators
Hash 96384af790f02ac5f134d8bb2112e74d
e9e34685a85a9984bcee642fd58117b8dfec56c0
52c2d9f15d7e9c34aedd1f48c6d9429e1d0f07f47cecee2fe91e5b21698910bd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-google-map.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 302
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "1f3-5b3c28e30805b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.event.move.js?ver=2.0
200 OK 5.4 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.event.move.js?ver=2.0
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (5443), with no line terminators
Hash 581dff110540eff59ad07eb14e50c6ca
aa7ad46c7680999047d73fce39e201c414175223
c4d2094f4bbc80388b22b1fc80b91a2224cc4f5d324a88e1a50f174111771e0b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/library/jquery.event.move.js?ver=2.0 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 5443
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-1543"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-image-before-after.js?ver=1.0
200 OK 3.1 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-image-before-after.js?ver=1.0
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3090), with no line terminators
Hash 4eb698c427157704e880425235e5f53c
bdd2679972e7c1e9b47a64bcd40bf8063fdbb6eb
3a3c5895b14229a9b899dc6c8b697577c6427c7f77708ea58bb701468a420178
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-image-before-after.js?ver=1.0 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3090
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-c12"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.modal.js?ver=3.1.1
200 OK 4.0 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.modal.js?ver=3.1.1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3974), with no line terminators
Hash 47e44bc47462aaaaacc7ba1fd0df9a2b
1352b9107bf17346cc99f5824d2e9f9e2c771c4c
9a2d11b76feb7a9e531a9d055fae88e495017645e5c823a010c818a7744b2c45
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.modal.js?ver=3.1.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3974
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-f86"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-modal.js?ver=1
200 OK 2.4 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-modal.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2434), with no line terminators
Hash ba5d0c301bec2b0bed272a306d426bbf
5144c5ff4c42691a89d97bade52a8a390fe29785
fd62d3be0dbe94aa82b3ee2aecc1dc031ecc4d4e4c83870e952ba4bf3937d303
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-modal.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2434
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-982"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-progress.js?ver=1
200 OK 341 B URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-progress.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (768), with no line terminators
Hash df87567cabc52ace83c919ce177d250e
d3e47a19eb848058a61ab63aa5c6d7e1d42a73b4
0d4c4fcda482525550273834a736a3d9f2ffaf1c5ce3606b0707bf76d293303c
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-progress.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 341
x-accel-version: 0.01
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "300-5b3d74ea4dfab-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-recent-posts.js?ver=1
200 OK 2.0 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-recent-posts.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1965), with no line terminators
Hash c78072eca09f914f1553fbf60fc2e80d
581d81b8edba90866f99253e64bc515ce7829cc8
1abeabde02ffffcaa1287c39134ae90d13606d423ca99119b4bca9cb5515489c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-recent-posts.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1965
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-7ad"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-syntax-highlighter.js?ver=1
200 OK 2.0 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-syntax-highlighter.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1961), with no line terminators
Hash e3491db22fbc157eda0ba8cdd735cb1a
23b78e0b1513f5731566a1a64d7113f2d91ac19e
0600dd41021581a95572cf76dfe6754f431bf17d1ed5d8407cbbfd41b3c18445
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-syntax-highlighter.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1961
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-7a9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.transition.js?ver=3.3.6
200 OK 373 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.transition.js?ver=3.3.6
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (741), with no line terminators
Hash 0287f860a8c842bd15caea306aeae882
78fd117d49d7ee7aa8f57809902a190b16fe6040
b59b5dbbb13c25fbd8177298e3960a218c5034c076d4f840958540947896ae22
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.transition.js?ver=3.3.6 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 373
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "2e5-5b3c28e300b2b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.tab.js?ver=3.1.1
200 OK 1.7 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.tab.js?ver=3.1.1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1685), with no line terminators
Hash d06c60c843b4aa96ec902f21676860d3
7158a0ca7ec65c884169e06418c4cbeee956dbf7
33729b857c5024754aa713d7af5443f8d3ea366203cbc2df719fea37bedd358b
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.tab.js?ver=3.1.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1685
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-695"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-tabs.js?ver=1
200 OK 3.4 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-tabs.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3378), with no line terminators
Hash 7bd5eb1dd1d5bad28b1657b6e96df1b8
1d8da13fae486eaa268b3d141b8c11cedfddf297
4c33182266f9d163202a45a03fd38eafc78298a35f156d19f6afe1839d25f74e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-tabs.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3378
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-d32"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.cycle.js?ver=3.0.3
200 OK 25 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.cycle.js?ver=3.0.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (25337), with no line terminators
Hash 2f5e7d6416fba59134d024dc5cd193d6
19a427fa80de258de240ba1c49a54eeadc9b0b1a
9a2417fe94980c710d606030d0b1ec1f1794522a1006bc9afbcf9aef00035b4d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.cycle.js?ver=3.0.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 25337
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-62f9"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-testimonials.js?ver=1
200 OK 1.6 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-testimonials.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1634), with no line terminators
Hash d35ed4af8e38c5a859eb9eaa6237f054
6fc4190c6f6806cacaf4df163073f877086b95e2
0d8cacfa24c3c91c154f1bab2a482bc0102554a451308b974906cae6c403b1a2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-testimonials.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1634
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-662"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.textillate.js?ver=2.0
200 OK 5.9 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/jquery.textillate.js?ver=2.0
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (5943), with no line terminators
Hash f2a5bf4853fc2d24985bd1a3ec1a40d2
c92ed71bfe0476ba209a15d5ac57b333480fb927
cf5a694f89a767ceaa37156e4b714df2a03a4dfc79a86286e370079dfb821a78
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/library/jquery.textillate.js?ver=2.0 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 5943
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-1737"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-title.js?ver=1
200 OK 3.8 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-title.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3822), with no line terminators
Hash 97bf161371a8a45737ccc673a74bc69f
ba1b797c59400d1de01400d0f9781386250fd876
43a591036536e303de34153ff30a5f573d2589e44639ecae77eb3cef23e5e911
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-title.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3822
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-eee"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/Caravan-Anschrift.jpg
200 OK 57 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Caravan-Anschrift.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 13:06:11], baseline, precision 8, 400x345, components 3\012- data
Hash e9b76b895c93778f31995e9f885f46bc
32ae25457859c3cf29cc2ae39aed4fccf773cc82
be2f6c627f8de4862b18108620c47029d1e5b557c3cf7adcc84957064e7b1924
GET /wp-content/uploads/2022/10/Caravan-Anschrift.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 57384
last-modified: Wed, 05 Oct 2022 12:12:43 GMT
etag: "633d74bb-e028"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/Chart.js?ver=2.7.1
200 OK 157 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/library/Chart.js?ver=2.7.1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (65536), with no line terminators
Size 157 kB (156737 bytes)
Hash 2cd2684bfefcf503a795a0417d70af0a
a7a8172e415181c92d6b1d198eac56fe3882f0b0
f7de7bf922b74360bdb0e339b18367cc10633f5272b9ccbd1536e5de7b4868d0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/library/Chart.js?ver=2.7.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 156737
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-26441"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnwagen-Video.jpg
200 OK 76 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnwagen-Video.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 13:43:00], baseline, precision 8, 400x345, components 3\012- data
Hash cf8e2411684202b2fc082fd25355fd85
3ad76aec760e5acba0f4ebbbd3d0937c0b36f840
d6391b9b4bccf09cbf50352f41923098e1f97d8fe9979e55adddd39b20da03ca
GET /wp-content/uploads/2022/10/Wohnwagen-Video.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 75842
last-modified: Wed, 05 Oct 2022 12:13:01 GMT
etag: "633d74cd-12842"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnwagen-Vermietung.jpg
200 OK 187 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnwagen-Vermietung.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 11:41:16], baseline, precision 8, 1200x420, components 3\012- data
Size 187 kB (187175 bytes)
Hash d5f6c301610c2a069831e84b540f116e
993d7c3217ae987be2b04dfca7d635930c3d0390
94fe2c83c6e5580097360846ce91d429c24aacee68f8ccd5b22a322eca78742c
GET /wp-content/uploads/2022/10/Wohnwagen-Vermietung.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 187175
last-modified: Wed, 05 Oct 2022 12:12:59 GMT
etag: "633d74cb-2db27"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/Reparaturservice.jpg
200 OK 260 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Reparaturservice.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 10:33:07], baseline, precision 8, 1200x615, components 3\012- data
Size 260 kB (260235 bytes)
Hash 9261721b8f72462e98ac1ef0606231b3
9c3bbb7e7b8fa6f44980b12a721134bc2ab259f9
1c8bfd988889b9d138b9f8dbbc0b183547c069f306f3eca2a08eb7543fb6e103
GET /wp-content/uploads/2022/10/Reparaturservice.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 260235
last-modified: Wed, 05 Oct 2022 12:12:52 GMT
etag: "633d74c4-3f88b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.collapse.js?ver=3.1.1
200 OK 3.5 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.collapse.js?ver=3.1.1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3487), with no line terminators
Hash d1821bc1ca3013109fe82963f105fa1f
1c834500d26ae1874cd3845e8bbc09f77a8cb2b1
7320f1b88beceab8c7640034d3db5012251f4823a593270f8abfdfce0b74d849
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.collapse.js?ver=3.1.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3487
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-d9f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-toggles.js?ver=1
200 OK 1.8 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-toggles.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1781), with no line terminators
Hash e426f3fff0af58bd43ee59d840af83ee
116dbd9e9b3655b0dcb9b6b36771a45a665df1a8
600decba2fea36660d26b29b3b8d6098bfa9cc4b4b8fa044b6104cfcd7ee6f2d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-toggles.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1781
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-6f5"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/Fahrzeuge.jpg
200 OK 226 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Fahrzeuge.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 13:47:45], baseline, precision 8, 1200x746, components 3\012- data
Size 226 kB (226369 bytes)
Hash e260a39a66ded5d8e8f53998c2cd5cdb
54bdd896ed029e98db904c33363c36780fc0560b
b233587675840a94663bdc618733c9635d0ee390e8bbecbfe086c2af94d9539b
GET /wp-content/uploads/2022/10/Fahrzeuge.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 226369
last-modified: Wed, 05 Oct 2022 12:12:49 GMT
etag: "633d74c1-37441"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/Caravan-Team.jpg
200 OK 224 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Caravan-Team.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 12:52:13], baseline, precision 8, 1200x497, components 3\012- data
Size 224 kB (223836 bytes)
Hash 082cd96c059b2ddfc2fce70a34188165
f1b4bc792f6c18222289ce45b25a7300ed42e3a5
86496252a90e51c8ef893b4908529b4891d7c3dfe6fce03a0249bc8d52b748eb
GET /wp-content/uploads/2022/10/Caravan-Team.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 223836
last-modified: Wed, 05 Oct 2022 12:12:44 GMT
etag: "633d74bc-36a5c"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnwagen-Ausstellung.jpg
200 OK 255 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnwagen-Ausstellung.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=600, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], baseline, precision 8, 1200x600, components 3\012- data
Size 255 kB (255342 bytes)
Hash 867ca6021f196fdcbe7c0955c951b2cc
8c9a4946f8223eb21b6e8b48d03d20e7a48bcfc6
cdfd16666afb8d4c047c23f5147d6353b9d6f44adf5f80ac828d7c13a6a58725
GET /wp-content/uploads/2022/10/Wohnwagen-Ausstellung.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 255342
last-modified: Wed, 05 Oct 2022 12:12:57 GMT
etag: "633d74c9-3e56e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/vimeoPlayer.js?ver=2.2.1
200 OK 17 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/vimeoPlayer.js?ver=2.2.1
IP
ASN #8972 Host Europe GmbH
File type Unicode text, UTF-8 text, with very long lines (16292)
Hash add41bd998490cb0db82b59c60b4b433
c367b3166670d0b6a0ee78f0cb8d476f780201cd
501c8b7edd85aa5b93a52254d40cf04d754018292b113caf7f76441701d30a0a
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/vimeoPlayer.js?ver=2.2.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 16573
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-40bd"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-video.js?ver=1
200 OK 2.0 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-builder/assets/js/min/general/fusion-video.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2034), with no line terminators
Hash 34001789ebcbec3a918fd5283b3e303b
820a88763fb7fc318284da77ab7b61ea2022eea2
acf8c2c50d2953ef94da9e99ed22b880a3cc497041833f1fa95ca613c2ab3950
GET /wp-content/plugins/fusion-builder/assets/js/min/general/fusion-video.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2034
last-modified: Wed, 11 Nov 2020 16:30:02 GMT
etag: "5fac118a-7f2"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.hoverintent.js?ver=1
200 OK 1.1 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.hoverintent.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1098), with no line terminators
Hash 3430261b0500bb2d00a6c002c4ffcc30
839ae2f86ab55112649406d8884524c2d66cc297
34e014c7d41ab0ae2996907824eda3bde337242ebd9dc29aeccd9d67078246ab
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.hoverintent.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1098
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-44a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-core/js/min/fusion-vertical-menu-widget.js?ver=1
200 OK 1.9 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-core/js/min/fusion-vertical-menu-widget.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1887), with no line terminators
Hash c1b9597f972aac942c0af8b6568c5c67
db863909e800cf647bad8f39f79f941ec8288f9c
29aaa0e6bbb1fe7cf6adf3c2503ff1a127aece767e950527694d06b5c04230d9
GET /wp-content/plugins/fusion-core/js/min/fusion-vertical-menu-widget.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1887
last-modified: Wed, 11 Nov 2020 16:29:31 GMT
etag: "5fac116b-75f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/lazysizes.js?ver=4.1.5
200 OK 7.1 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/lazysizes.js?ver=4.1.5
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (7142), with no line terminators
Hash d006f3197c59c847385c19956611791f
5bce0a7a09237ca5c6a47255db195e94242e39bc
d45bf49661c66720a758ad7ce7bf639d1831bd3ece908705558552953e00eb15
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/lazysizes.js?ver=4.1.5 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 7142
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-1be6"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.tooltip.js?ver=3.3.5
200 OK 11 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.tooltip.js?ver=3.3.5
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (10837), with no line terminators
Hash b3997023d4e698fdd1db60710a26590d
3ae3d1f1e1ce48106a17c9d33c02472fbecb9628
174e244c283a29b83acfc789a88f269dd468ecf03c7768356e691b81a010e542
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.tooltip.js?ver=3.3.5 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 10837
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-2a55"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.popover.js?ver=3.3.5
200 OK 1.7 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.popover.js?ver=3.3.5
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1748), with no line terminators
Hash d47888bd96f57359b7fa42561494c552
c36918bacdd79aed6718c3786756ae53153ff9eb
b5f949ee17347bdfa9456e7eedd3a0445eccc8809c33b1842551eb5c5daaabd0
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/bootstrap.popover.js?ver=3.3.5 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1748
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-6d4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.carouFredSel.js?ver=6.2.1
200 OK 54 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.carouFredSel.js?ver=6.2.1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (54352), with no line terminators
Hash 59d0b868efeb787eb0cd331f52d25a0e
c6a171b68f26bac1da66883248eb9aa226ed587b
fb19b647849cd037331a7a017e6d5466dc90e3ba866a69ba3c3c5d512f276f13
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.carouFredSel.js?ver=6.2.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 54352
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-d450"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3
200 OK 3.3 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3308), with no line terminators
Hash ef5cea90b052e9a22ea5e8c3447685c6
0229ff6bfd424e2b04904b698feea6f19997e1ce
79cae730bb235a3041521278e905209e2be9f0b817dd2b8742a05dad8b1dc5aa
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.easing.js?ver=1.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3308
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-cec"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.flexslider.js?ver=2.2.2
200 OK 23 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.flexslider.js?ver=2.2.2
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (23008), with no line terminators
Hash ca907333f29fb5447230aae02add6363
42e09f1cdecda5fdca3d43364730510305c6881d
c91b0ef0c9235c53d5ea9a74036c5ec2f6f916c02b80dc344c8975cfab558ab8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.flexslider.js?ver=2.2.2 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 23008
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-59e0"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.hoverflow.js?ver=1
200 OK 334 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.hoverflow.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (647), with no line terminators
Hash d149404863e3dff58424f3f020ae6ace
869cc5667a9c403ceca871820efb16bd194251d6
bbf79d290f98746420dc076d71132d409a2f9dc4132f7d06669b615097fcfb8f
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.hoverflow.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 334
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "287-5b3c28e30035b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.placeholder.js?ver=2.0.7
200 OK 2.2 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.placeholder.js?ver=2.0.7
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2176), with no line terminators
Hash e9256563e9658d30f484407ffb8baf3a
ef00b51debbc367d6039482ef311c115496d5d7d
fa34de993dea91eb0120c3745378192fa1177ba8ec5772e08632318d1d5e1267
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.placeholder.js?ver=2.0.7 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2176
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-880"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.touchSwipe.js?ver=1.6.6
200 OK 9.4 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.touchSwipe.js?ver=1.6.6
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (9399), with no line terminators
Hash cf03f572b825e8710b00b5c86c07aad1
d831d7edd30fdd35842ec489cc61e03a36e7b02c
e21d3d8819243a6cd99c4ab2ed4e9518e3a239f76bf3e9481f318eb4153458e9
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/library/jquery.touchSwipe.js?ver=1.6.6 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 9399
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-24b7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-alert.js?ver=1
200 OK 195 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-alert.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with no line terminators
Hash 035163682275e8f6a212787443a5bec6
030d18ea4df0e92fc24075a087a5d9348ac9ec05
a8c8562166bc6c2f9865bcd3ce89dd0e9d5e49cb6583bcb7d4579e173a882f60
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-alert.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 195
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "104-5b3c28e30788b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-carousel.js?ver=1
200 OK 4.4 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-carousel.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (4419), with no line terminators
Hash 40b4ea0f94fc17d053680aa504b2d069
5df9ba5410e0ad10531514fd2c71e2f16df050b6
bbc6d2a766c68b4ec88d0ec8f9baf63124d71230632c2a022117c9b05b9c6d9c
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-carousel.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 4419
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-1143"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-flexslider.js?ver=1
200 OK 5.9 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-flexslider.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (5875), with no line terminators
Hash 7e77adda909e3d75aa2e6290ef2d5e3d
a7b83817d4cc9857c0b46aba19fdb5f14d7d17b7
b116399eeda8ccc6729f77f2c45e266195892a005399c8e0ef2079ecc5454371
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-flexslider.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 5875
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-16f3"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-popover.js?ver=1
200 OK 305 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-popover.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (698), with no line terminators
Hash 8ee3b4e7eacb6fc3749ecc6ff5bd2223
06f0ea0e8e4a97683c8d96337a8008ba2a268c64
c8b00948f734aae808a6f0e0d303152a8acf4c64ba385c1a40b07f7c9ca9eabd
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-popover.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 305
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "2ba-5b3c28e30a383-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-tooltip.js?ver=1
200 OK 1.7 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-tooltip.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1707), with no line terminators
Hash 6d4fa80597ec147497f4168e255864bc
73e8dd9a63e71d3d00a0747f53caa43f6c4be09f
04ffc69e6bdae64435d6ec1e0ec347979cec8bb40fd0cfcc22c959988b08745e
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-tooltip.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1707
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-6ab"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-sharing-box.js?ver=1
200 OK 339 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-sharing-box.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (888), with no line terminators
Hash 046f411390a97a03d9218b2bd6c64dba
34f2a8696c779c841c3d021289753cd73d0dd8b2
04e39cb212ecc51faacac3d4ef2cebebd33398b4a83ff34eb69150ab5eeea16f
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-sharing-box.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 339
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "378-5b3c28e30882b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-blog.js?ver=1
200 OK 7.5 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-blog.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (7515), with no line terminators
Hash 885adc2fae9799bdcf39440616753784
f52a1ed07d13998b5a95ffca3911d1eeb87b2d2e
d563abdca069e907d71dac9119231745499c5d731a34582a65f44db7cd208212
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-blog.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 7515
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-1d5b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-button.js?ver=1
200 OK 174 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-button.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with no line terminators
Hash 1484db10cddde999b798bd7c603eff96
26a39f2ff3b0e16aef731ef3b17f761959678e19
bf3d923f5f52fb47ebd84f4eac24b5800a2bc7a7e5f7403757fc514fe656e54a
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-button.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 174
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "ec-5b3c28e30805b-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-general-global.js?ver=1
200 OK 245 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-general-global.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (483), with no line terminators
Hash 4001b77cd3b0c975837e565ac678502a
044aa2eddb3c3f51fb12a4d2a28e251c80878202
040c6f4cd99e486f79e06fffdc110d3a554dd72a8d76ac025cf9a6c7110518ca
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-general-global.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 245
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "1e3-5b3c28e308ffb-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion.js?ver=2.2.3
200 OK 2.4 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion.js?ver=2.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2411), with no line terminators
Hash 6c880fed6961e380f90d15ef10d7e208
fb64d6449f2341cc0a124c927c02a59b5c3db146
5a139fca9be6cbe9de8bcd25f9c24ad12d64fc7ae47eac4f7696d8a4bf84e72d
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion.js?ver=2.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2411
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-96b"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-header.js?ver=6.2.3
200 OK 33 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-header.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (31862)
Hash e43647c00a92037d24d8556db0734f2a
23386f86d4be41cd563bc8bb74f48e36330b2653
85040fd29e1243dd78b89f74e0f43af13c340edb6a03ac9def41dc62db15d680
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/assets/min/js/general/avada-header.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 33165
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-818d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-scroll-to-anchor.js?ver=1
200 OK 4.8 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-scroll-to-anchor.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (4801), with no line terminators
Hash 78e5004b22330c578156510ba0ce33a9
ab0ea9b604487bbaeabae71a7c085c63dcd7c495
6db7d277489e4025471d77f99343c5befeba403d158d432b7b87460d563211b7
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-scroll-to-anchor.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 4801
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-12c1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-responsive-typography.js?ver=1
200 OK 3.5 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-responsive-typography.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3464), with no line terminators
Hash ccf72ec7f79a2fe8445ba8679722f290
e216fcaf5318f99bc091040c1a6a53b4744ff16b
17a3d543a99f75298b78071d9f8d2a26815bafc0952485c85d39bde521720141
GET /wp-content/themes/Getblue/includes/lib/assets/min/js/general/fusion-responsive-typography.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3464
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-d88"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-skip-link-focus-fix.js?ver=6.2.3
200 OK 250 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-skip-link-focus-fix.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (340), with no line terminators
Hash 1a3757e2b161b85ec97d872161c6ad9a
1a2e29a7ea018ff34428b0bb11a6b5ed9055018e
ef6019a85746f612113813610dab90644041878e0978138458c2c9c5a2fa2529
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/assets/min/js/general/avada-skip-link-focus-fix.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 250
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "154-5b3c28e334b34-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/library/bootstrap.scrollspy.js?ver=3.3.2
200 OK 2.7 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/library/bootstrap.scrollspy.js?ver=3.3.2
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2679), with no line terminators
Hash 277dfd20d4ad94570e0bd8d6cd8797fd
0676fdf2f2e47823d6ad40134510a84aacd478cb
b6ce2750a5429b968ac4c675acacfbd7da06ddf4638fb1e73ffb0a4553b346cb
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/assets/min/js/library/bootstrap.scrollspy.js?ver=3.3.2 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2679
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-a77"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-comments.js?ver=6.2.3
200 OK 1.2 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-comments.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1244), with no line terminators
Hash 70cee5c6ee29d41a2f95d7ed7997805b
d9105b6e6f90cf2448c24317ba28f723c4db8bcb
d3100ccc3e7ea357480b059670e51d53a8d55c629ef179d67a10f7c7e19e62d6
GET /wp-content/themes/Getblue/assets/min/js/general/avada-comments.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1244
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-4dc"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-general-footer.js?ver=6.2.3
200 OK 364 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-general-footer.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (992), with no line terminators
Hash 51255dd1d96326c875cd329e5d9ea0a3
7c4778d261658c141845b1727cea3ee376cabddf
74194539dfa912c50860b50494649c6d2ee97b3531092894d7d88d6b9d8bafc2
GET /wp-content/themes/Getblue/assets/min/js/general/avada-general-footer.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 364
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "3e0-5b3c28e334364-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-quantity.js?ver=6.2.3
200 OK 1.8 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-quantity.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (1807), with no line terminators
Hash 69c35ac975c7cd3477eb1f07bda1808d
9ca2ff708c31c4efd3c81b8123a1a2aef9a6c535
53c9c63ddd7012082893f0d2fbf1b8af2369378bc3c4e12e581b9d98ad93a518
GET /wp-content/themes/Getblue/assets/min/js/general/avada-quantity.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1807
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-70f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-scrollspy.js?ver=6.2.3
200 OK 225 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-scrollspy.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (486), with no line terminators
Hash e4a7a1811f1fa1da5582e15c030f072a
94b36a9087d705935c402d0d4d1b101494258c68
4ca94cea251c2fc1bc16b0ec9488770086ca388fb32256819cf5c7dd1b35d512
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/assets/min/js/general/avada-scrollspy.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 225
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "1e6-5b3c28e3362a4-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-select.js?ver=6.2.3
200 OK 293 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-select.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (641), with no line terminators
Hash fe8fc369115b1369e40ce4b72a7d4e3c
47086cb82575afe45c3e336ac28484a48d65a0e0
7daa22f5045de9663443eefe773ccb0580c1d14a468c189a2877c4a41bee3905
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/assets/min/js/general/avada-select.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 293
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "281-5b3c28e33474c-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-sidebars.js?ver=6.2.3
200 OK 3.4 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-sidebars.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (3418), with no line terminators
Hash 897da891c321ca3859370a964acf8eb2
a076c3befb660c923710a40411e024b2f290e4aa
f4a702c61f8ad016e4d0817fd996f04ca0801b29d4980ee0ae46adf08eda7688
GET /wp-content/themes/Getblue/assets/min/js/general/avada-sidebars.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 3418
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-d5a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/library/jquery.sticky-kit.js?ver=6.2.3
200 OK 2.7 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/library/jquery.sticky-kit.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2746), with no line terminators
Hash a1d2543d9ee412148453f39cf05cfe0d
c72e8b242d36b69f66be6447264770b4c4ff069f
1b4944b5f8a439d1e7f531888ed6eb66781561f56f84336e75b218cb31bb9af9
GET /wp-content/themes/Getblue/assets/min/js/library/jquery.sticky-kit.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 2746
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-aba"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-tabs-widget.js?ver=6.2.3
200 OK 258 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-tabs-widget.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (498), with no line terminators
Hash b236c130d4545b79b03102da6d99eb40
6a7fba26eb3a051040a13a495133dd2871c25a77
786baa95fa16fc05a8f246c86dd70a9beb6528920d482118e1b678a5e9f2b814
GET /wp-content/themes/Getblue/assets/min/js/general/avada-tabs-widget.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 258
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "1f2-5b3c28e336e5c-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/library/jquery.toTop.js?ver=1.2
200 OK 1.2 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/library/jquery.toTop.js?ver=1.2
IP
ASN #8972 Host Europe GmbH
File type HTML document, ASCII text, with very long lines (1182), with no line terminators
Hash 6f3e1eada93feb0c0bacd9126ece614e
ab529b297fad01ba978a21aa1f05f877b8d36091
211c0a338801bcc09e6378ad85542a9d65402051fdcf1b05227df8c65351f3e2
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/assets/min/js/library/jquery.toTop.js?ver=1.2 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 1182
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-49e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-to-top.js?ver=6.2.3
200 OK 321 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-to-top.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (775), with no line terminators
Hash 8224d0060c542714af72d969fcbae73c
3cfb6572a3d8d8fe425973f4fc5cea2c7ece4bdd
306b876215afde6f7728443124749e3fd757f845727f48af2a6e07af8cec97a3
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/assets/min/js/general/avada-to-top.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 321
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "307-5b3c28e335304-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-drop-down.js?ver=6.2.3
200 OK 5.8 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-drop-down.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (5774), with no line terminators
Hash 1bf954f715ca3c4b0f1f42d8e71c9722
b5ba12ab427f4de34f72e5d157d7884dbb63c528
04e58ad249f8c91e0a74012c63ea50ff60e0ef66652fca395df1680c1c868b39
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/assets/min/js/general/avada-drop-down.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:22 GMT
content-type: application/javascript
content-length: 5774
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-168e"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/library/jquery.elasticslider.js?ver=6.2.3
200 OK 4.6 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/library/jquery.elasticslider.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (4570), with no line terminators
Hash ec3277c4aa0cf6f7edb6055d3ff6eb84
c41e2e260a1bd104e10bdc4201252c7d6dad3f6f
efd7b1811cef4b7c13b8ae58028f93fd15f154177f1a65df59c0f2139649b9ee
GET /wp-content/themes/Getblue/assets/min/js/library/jquery.elasticslider.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:22 GMT
content-type: application/javascript
content-length: 4570
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-11da"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-elastic-slider.js?ver=6.2.3
200 OK 233 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-elastic-slider.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (565), with no line terminators
Hash f39dd41bde45ff29bd8ce208c94482ca
82c273265b6ed4d17be7f2cd63d105892cc6fd77
ede9659bfe70a2ce8c8e5a06b443c7e70c93d0b83f930c7b5e6010674a4be1f5
GET /wp-content/themes/Getblue/assets/min/js/general/avada-elastic-slider.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:22 GMT
content-type: application/javascript
content-length: 233
x-accel-version: 0.01
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "235-5b3c28e33668c-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-powered-by: PleskLin
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-live-search.js?ver=6.2.3
200 OK 2.5 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-live-search.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (2548), with no line terminators
Hash 8e1980499943060812ab9368dd8fefd7
dd01faf05d8c7b8f06149e7036ccee0110f81ef4
a57daa6c05216724158d918ba274f490abd54ea721de900c1e19a6fefb000d6b
GET /wp-content/themes/Getblue/assets/min/js/general/avada-live-search.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:22 GMT
content-type: application/javascript
content-length: 2548
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-9f4"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/fusion-core/js/min/avada-fusion-slider.js?ver=1
200 OK 28 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/fusion-core/js/min/avada-fusion-slider.js?ver=1
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (28424), with no line terminators
Hash 61c290fe4d6ce7e1da112c3e7abc3e87
7be73a0e3c91998e00f8428375fd20ee892be913
12c23becef0243662da0212874885d667ad6f16e5da8f7c7e823a47abd898cf1
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/fusion-core/js/min/avada-fusion-slider.js?ver=1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:22 GMT
content-type: application/javascript
content-length: 28424
last-modified: Wed, 11 Nov 2020 16:29:31 GMT
etag: "5fac116b-6f08"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/plugins/posttabs/postTabs.js?ver=6.1.1
200 OK 1.6 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/plugins/posttabs/postTabs.js?ver=6.1.1
IP
ASN #8972 Host Europe GmbH
Hash a93538a00fc35e10412dbd3dcf03284a
75f1561e8b24126db53a88930bc8b7627feb56f8
17801493672b0ebde53d8ab0400fa63a101ea9e4cd216cabe80b2ff9155464e4
Analyzer Verdict Alert fortinet Malware
GET /wp-content/plugins/posttabs/postTabs.js?ver=6.1.1 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:22 GMT
content-type: application/javascript
content-length: 1590
last-modified: Wed, 11 Nov 2020 16:31:09 GMT
etag: "5fac11cd-636"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/fusion-styles/c690c5f048e4b72779fe71cf310a3969.min.css?ver=2.2.3
200 OK 843 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/fusion-styles/c690c5f048e4b72779fe71cf310a3969.min.css?ver=2.2.3
IP
ASN #8972 Host Europe GmbH
File type ASCII text, with very long lines (59156)
Size 843 kB (843364 bytes)
Hash ba91ec8fa081056a3db935489d9a8cb0
9081ff447ec2b776dac0ef64be726df3cbbe6a67
6ad20009b97d4c08f7961b3dd0984afa4882ead54e272ec1f569f099267285c8
Analyzer Verdict Alert fortinet Malware
GET /wp-content/uploads/fusion-styles/c690c5f048e4b72779fe71cf310a3969.min.css?ver=2.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: text/css
content-length: 843364
last-modified: Wed, 05 Oct 2022 14:10:02 GMT
etag: "633d903a-cde64"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/Ersatzteile-Zubehoer.jpg
200 OK 374 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Ersatzteile-Zubehoer.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 10:44:28], baseline, precision 8, 1200x578, components 3\012- data
Size 374 kB (373578 bytes)
Hash ef579fd33d2ec55de75c0288b44efe96
b3c4b9d67c76def12da31f7d80cb19bbf1454db0
72f06bbfab5cba1c82699ba66214ec8170371a6262f27bfe46d13bc5451340cb
GET /wp-content/uploads/2022/10/Ersatzteile-Zubehoer.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 373578
last-modified: Wed, 05 Oct 2022 12:12:47 GMT
etag: "633d74bf-5b34a"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/brecht-caravan.jpg
200 OK 482 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/brecht-caravan.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 10:20:39 DIY-Thermocam raw data\012- (Lepton 2.x), scale 25976-29780, spot sensor temperature 0.000000, unit celsius, color scheme 0, show spot sensor, calibration: offset 0.000000, slope 314698856740083776253136996283711488.000000], baseline, precision 8, 1200x1200, components 3\012- data
Size 482 kB (482241 bytes)
Hash 2507ecaf76694f6e597fb20a063a6bb8
f9752949b0371aa1922f3e0312fb154af27d278f
a311289f940b44d23359e186018ebe9d3896a00913a0e824f9c6ba9db454d8da
GET /wp-content/uploads/2022/10/brecht-caravan.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 482241
last-modified: Wed, 05 Oct 2022 12:12:41 GMT
etag: "633d74b9-75bc1"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/fonts/icomoon/icomoon.woff
200 OK 20 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/includes/lib/assets/fonts/icomoon/icomoon.woff
IP
ASN #8972 Host Europe GmbH
File type Web Open Font Format, TrueType, length 19560, version 1.0\012- data
Hash 058faad55edf033eda55a2e719963f7b
131adbcab0318d115d8bc24baa7851ba3291bc49
be9cbd5f07dd141bdd7c3d8c09b52c6e283506072e37539d05dc4b9dcbb68e5b
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/includes/lib/assets/fonts/icomoon/icomoon.woff HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/wp-content/uploads/fusion-styles/c690c5f048e4b72779fe71cf310a3969.min.css?ver=2.2.3
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:22 GMT
content-type: application/x-font-woff
content-length: 19560
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-4c68"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 78815ec28cdd11dab4f66f2eaab35658
c6fd7f2a657d87c6e7641be6fc69913c427cd26a
f99b9d279c7ddfe7916dde9c7390be1f225e330ffa662bd7ae603ceed76e44c3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097d447e049e3b41f92a4695b1b0c3c7
f39c9ef8d22bee41d940bf719c75b2cfae9291d5
459e0e586fca9a4720e4e25fa59978368c9d373ee86575a7b40d0ef4262043ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097d447e049e3b41f92a4695b1b0c3c7
f39c9ef8d22bee41d940bf719c75b2cfae9291d5
459e0e586fca9a4720e4e25fa59978368c9d373ee86575a7b40d0ef4262043ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097d447e049e3b41f92a4695b1b0c3c7
f39c9ef8d22bee41d940bf719c75b2cfae9291d5
459e0e586fca9a4720e4e25fa59978368c9d373ee86575a7b40d0ef4262043ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097d447e049e3b41f92a4695b1b0c3c7
f39c9ef8d22bee41d940bf719c75b2cfae9291d5
459e0e586fca9a4720e4e25fa59978368c9d373ee86575a7b40d0ef4262043ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/encodesanscondensed/v10/j8_16_LD37rqfuwxyIuaZhE6cRXOLtm2gfT2hq-KLQwFIg.woff
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/encodesanscondensed/v10/j8_16_LD37rqfuwxyIuaZhE6cRXOLtm2gfT2hq-KLQwFIg.woff
IP
File type Web Open Font Format, TrueType, length 19744, version 1.1\012- data
Hash 75abe9051271157ba24050b12e649973
4338aa02a3e7207d3a5c8e079d6182ab356ef7fc
576491141ef591bf4972b4172e84e1bbf71df3ffbf72f134e6e097c55f3e6d64
GET /s/encodesanscondensed/v10/j8_16_LD37rqfuwxyIuaZhE6cRXOLtm2gfT2hq-KLQwFIg.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://regio.brecht-caravan.de
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 21:03:57 GMT
expires: Thu, 21 Mar 2024 21:03:57 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 21 Apr 2022 16:47:03 GMT
content-type: font/woff
age: 5845
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/maps/embed?pb=!1m0!3m2!1sde!2sus!4v1489536944384!6m8!1m7!1su-esTXZdKbMAAAQ7Lq51Ow!2m2!1d49.14020550192735!2d9.166364995038748!3f39.94528953742005!4f9.594534121714744!5f0.7742716351052916
200 OK 645 B URL HTTP/2 www.google.com/maps/embed?pb=!1m0!3m2!1sde!2sus!4v1489536944384!6m8!1m7!1su-esTXZdKbMAAAQ7Lq51Ow!2m2!1d49.14020550192735!2d9.166364995038748!3f39.94528953742005!4f9.594534121714744!5f0.7742716351052916
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (421)
Hash 754b747e9462455b8010bfc4df1255c1
ba01faffe6d7cbe3dab9755921c7afcd9927a634
31e18f2ae8f1ed68d18c08c28cd706f2ab6b0247d43468514b750e356e838350
GET /maps/embed?pb=!1m0!3m2!1sde!2sus!4v1489536944384!6m8!1m7!1su-esTXZdKbMAAAQ7Lq51Ow!2m2!1d49.14020550192735!2d9.166364995038748!3f39.94528953742005!4f9.594534121714744!5f0.7742716351052916 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Language, Origin, X-Origin, Referer
cache-control: no-cache, must-revalidate
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-f0IDIdoTCxwdCwRNRFaZkg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/geo-maps-api/1
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Wed, 22 Mar 2023 22:41:22 GMT
server: scaffolding on HTTPServer2
content-length: 645
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/encodesanscondensed/v10/j8_46_LD37rqfuwxyIuaZhE6cRXOLtm2gfT-dYyZAC4OCHiYFQ.woff
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/encodesanscondensed/v10/j8_46_LD37rqfuwxyIuaZhE6cRXOLtm2gfT-dYyZAC4OCHiYFQ.woff
IP
File type Web Open Font Format, TrueType, length 19716, version 1.1\012- data
Hash 33c5967ef4aef0473aa1dfba09b91c61
70fc02a2bf5b2a22a6283502874493462e74f77a
8ede2fb8ba9d5177db167f53deba6ecd74f186d4e2ff4ccfd90acd9e66a27994
GET /s/encodesanscondensed/v10/j8_46_LD37rqfuwxyIuaZhE6cRXOLtm2gfT-dYyZAC4OCHiYFQ.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://regio.brecht-caravan.de
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19716
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 21:03:57 GMT
expires: Thu, 21 Mar 2024 21:03:57 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 21 Apr 2022 16:46:58 GMT
content-type: font/woff
age: 5845
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/encodesanscondensed/v10/j8_46_LD37rqfuwxyIuaZhE6cRXOLtm2gfT-IYmZAC4OCHiYFQ.woff
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/encodesanscondensed/v10/j8_46_LD37rqfuwxyIuaZhE6cRXOLtm2gfT-IYmZAC4OCHiYFQ.woff
IP
File type Web Open Font Format, TrueType, length 19828, version 1.1\012- data
Hash e51721903ee5d766d44b2b3286a61e83
706c39f230d762c948eab798c0df75bc8b159588
5603339c3899fc1d11e8a768081d773437e5768d226fba9cc0db5a9ff3253d7a
GET /s/encodesanscondensed/v10/j8_46_LD37rqfuwxyIuaZhE6cRXOLtm2gfT-IYmZAC4OCHiYFQ.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://regio.brecht-caravan.de
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19828
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 22:20:13 GMT
expires: Tue, 19 Mar 2024 22:20:13 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 21 Apr 2022 16:50:15 GMT
content-type: font/woff
age: 174069
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/encodesanscondensed/v10/j8_46_LD37rqfuwxyIuaZhE6cRXOLtm2gfT-PYqZAC4OCHiYFQ.woff
200 OK 20 kB URL HTTP/2 fonts.gstatic.com/s/encodesanscondensed/v10/j8_46_LD37rqfuwxyIuaZhE6cRXOLtm2gfT-PYqZAC4OCHiYFQ.woff
IP
File type Web Open Font Format, TrueType, length 19832, version 1.1\012- data
Hash c6b4c528fea46f30b5479c1e9d092922
f4888eb4e721055cc79d6c370092cddce5a96d6b
fb9a308d3978643f4c52363076baec1c340eb6e89a094285ec95a313658d605c
GET /s/encodesanscondensed/v10/j8_46_LD37rqfuwxyIuaZhE6cRXOLtm2gfT-PYqZAC4OCHiYFQ.woff HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://regio.brecht-caravan.de
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 19832
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 13:56:58 GMT
expires: Thu, 21 Mar 2024 13:56:58 GMT
cache-control: public, max-age=31536000
age: 31464
last-modified: Thu, 21 Apr 2022 16:47:10 GMT
content-type: font/woff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097d447e049e3b41f92a4695b1b0c3c7
f39c9ef8d22bee41d940bf719c75b2cfae9291d5
459e0e586fca9a4720e4e25fa59978368c9d373ee86575a7b40d0ef4262043ed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16061
Expires: Thu, 23 Mar 2023 03:09:03 GMT
Date: Wed, 22 Mar 2023 22:41:22 GMT
Connection: keep-alive
regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnmobil-Adresse.jpg
200 OK 503 B URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnmobil-Adresse.jpg
IP
ASN #8972 Host Europe GmbH
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
GET /wp-content/uploads/2022/10/Wohnmobil-Adresse.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 78918
last-modified: Wed, 05 Oct 2022 12:12:55 GMT
etag: "633d74c7-13446"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16061
Expires: Thu, 23 Mar 2023 03:09:03 GMT
Date: Wed, 22 Mar 2023 22:41:22 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9f0607231b4674d2bfb5a6798b0b4093
6c14f5c952e413365703144951b09b7126ff8e2d
869816689cb9507d294d69f953e8ea33452a177d405816ad86f729b123ceaa98
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d7099bbc5fed74a6e78e1a3096bf
96afaf8b3ac053577c56aca5f4a20d8655ecb771
c8ff32c6809a506d4c656d3200dbfc6682c156c3de0647d13ab8f07a6f9a38ba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C8FF32C6809A506D4C656D3200DBFC6682C156C3DE0647D13AB8F07A6F9A38BA"
Last-Modified: Tue, 21 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16061
Expires: Thu, 23 Mar 2023 03:09:03 GMT
Date: Wed, 22 Mar 2023 22:41:22 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 90f64fe111aa6e90ebf52e0335d21b75
4f25bdbffca3803b02c196c38491223684d36b4d
37894e16112286470b7fd2e0bbd5ca74944e6cb5ca6e8aff189c4515122a0d40
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F772d9c75-9796-494f-9fc4-91d04e2bac53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4905
x-amzn-requestid: f2297c3e-1187-48f5-bffb-c5ea1a79a10b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFgcF4_oAMFd6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b602-02696af01c0d586c631c5b45;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:13:06 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: R9mjcik3i0kISOeO4gVZP6XhhvZO00mriabAtJ8vv1kNhRpz_lfsHQ==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 618052a0d9c86c1a3bf663f82d041d1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 07:39:55 GMT
age: 54087
etag: "4f25bdbffca3803b02c196c38491223684d36b4d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg
200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f4a771935927950222124e14b56046df
d07fe53e4ac41048497b2732c017f6666c3eda9e
4e8388626074646c2336711be0a170ceab367c343648a32d2389dd87640251d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a816157-9568-4e7f-a034-14b2f1982949.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4912
x-amzn-requestid: d8fcf495-12af-42ae-ad69-0ea07b1a8669
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8H3Fl1IAMFYgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73cb-01cbd1981a57e53b3d3cde93;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:31:55 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: soxgrR0B6Rz79QysB7qbMTsNYmkYfG8doOMPpTEd9uLlrE6WTcDKdw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:44 GMT
age: 3218
etag: "d07fe53e4ac41048497b2732c017f6666c3eda9e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg
200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 05c7970e81559904d05b6e8cf693f085
709b01a360624eceafb1876f56378824aa4936b3
a4fd80c9bdce27961560d7c31e216706e9e32d42d1edd883e283c149505b3db0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6cff797b-5560-422b-9907-7a2fbe8dd123.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7424
x-amzn-requestid: 4d4097db-ae95-4a34-8f92-a56c29e836e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CENb6FKDoAMF_cg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6417f5e5-772b562b3176f7ca0740db72;Sampled=0
x-amzn-remapped-date: Mon, 20 Mar 2023 05:57:57 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: KfvwQv6CzrS1gbsqurHb4C_KGfAtJtBZFPUzx6z-IQ19s2WNeMdz5w==
via: 1.1 ef6538ee7be7b17c84d06edb0f4c0a1a.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 02:46:22 GMT
age: 71700
etag: "709b01a360624eceafb1876f56378824aa4936b3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg
200 OK 6.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c05bfdf1411a931d8ea9adc64b07bc74
156ef59e53564a4f2b27002b2695fafecd578d82
15d17c0df2d2b0625ecf5f576a7ff630ae8b923b28be354ad23aec6a284a801a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5be1b286-007a-44a5-a6fd-872190ecfa0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6692
x-amzn-requestid: 0649739b-60ca-460d-87bf-daaf11dc6dcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFvFHGjIAMF1Zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b660-0a6fa03577037af055c397fc;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:14:40 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: yufdqKT7qLEIuC_Zc7CjBbuWQbzJI4yTLOZYKnNEBtCOPSQf7rYTyw==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 07:54:24 GMT
age: 53218
etag: "156ef59e53564a4f2b27002b2695fafecd578d82"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F41bbfbe3-1afb-4b2c-8d39-af9e99722a89.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F41bbfbe3-1afb-4b2c-8d39-af9e99722a89.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 68fdb372d6d3ea3765a2ee6c97d2dfe8
7c7158f69d78dc845790ca0a2aa53e5e299e61ab
7b175d018b420532c3e330e303be1bc0152fe0c872c4dfc191368037bf79b325
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F41bbfbe3-1afb-4b2c-8d39-af9e99722a89.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6035
x-amzn-requestid: 53c1bcd9-37b0-4b11-b517-da351fae6032
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CM8I8HdzoAMFUkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641b73d2-241bad59233aa0a02a37584c;Sampled=0
x-amzn-remapped-date: Wed, 22 Mar 2023 21:32:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: kvse_yY887iAIBjk6HpI4Co1fynHitnnrX4FClfrqkMEVQ4rYyu4VQ==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 f313d3df80c4dab8f5399614116801cc.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 21:47:44 GMT
age: 3218
etag: "7c7158f69d78dc845790ca0a2aa53e5e299e61ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba4910e6-683b-4c06-94c1-4e4a3314f2f7.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba4910e6-683b-4c06-94c1-4e4a3314f2f7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fdf1ed2958d8db65b7e247e1584eb841
a6385a641fbb1445ca73e632d06d691970b1e3f8
49fda09ea2e648aa8a09b7e72735a3402e8e87572cc188155c292a0d9fd6159b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba4910e6-683b-4c06-94c1-4e4a3314f2f7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5971
x-amzn-requestid: a3b249e1-616a-492b-bfc5-12df811361cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CBFV9H5XIAMFb9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6416b5bf-4d51c9467af0c8485d7d98c0;Sampled=0
x-amzn-remapped-date: Sun, 19 Mar 2023 07:11:59 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Qv0F14NgbMfCze9mmFykEDHdCG8yCNvFNa4smLDa1Tmg3_aaZakVoQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 a06140ffee86972bad90c57fc682df36.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 10:34:59 GMT
age: 43583
etag: "a6385a641fbb1445ca73e632d06d691970b1e3f8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/favicon.png
200 OK 872 B URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/favicon.png
IP
ASN #8972 Host Europe GmbH
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 2c0fa4f69239f439af6f4b9de4a36b53
a515549ef6c097b23b4b3d7c09f7d78c2568caf1
0b71f41fe3b9dba97202fc48dcad4c6528330cebc1a838cc25e25f398e95a948
GET /wp-content/uploads/2022/10/favicon.png HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:22 GMT
content-type: image/png
content-length: 872
x-accel-version: 0.01
last-modified: Wed, 05 Oct 2022 13:37:45 GMT
etag: "368-5ea49ae8ab8be"
accept-ranges: bytes
x-powered-by: PleskLin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 342da587101df62e3e8f03dc4a87f93d
897c40f31b24adf281b804bbca7f0ffba5b86816
f6b8dde2c506c3ec03517324e93c04058e44e345dae5a52e5f49c97d77455aec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad
200 OK 58 kB URL HTTP/2 maps.googleapis.com/maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad
IP
File type ASCII text, with very long lines (2469)
Hash 1ba72dcc402bf9fd23e013e91c0cb312
08e54c36bd0f36e372274eda0cbddcd8656c9896
0964705569351cc126f890b895cc50c12a750b92e139f9302d57c4c507db906e
GET /maps/api/js?client=google-maps-embed&paint_origin=&libraries=geometry,search&v=3.exp&language=en_US&callback=onApiLoad HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 57678
x-xss-protection: 0
x-frame-options: SAMEORIGIN
date: Wed, 22 Mar 2023 22:38:58 GMT
expires: Wed, 22 Mar 2023 23:08:58 GMT
cache-control: public, max-age=1800
content-type: text/javascript; charset=UTF-8
age: 145
server-timing: gfet4t7; dur=0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 342da587101df62e3e8f03dc4a87f93d
897c40f31b24adf281b804bbca7f0ffba5b86816
f6b8dde2c506c3ec03517324e93c04058e44e345dae5a52e5f49c97d77455aec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x01.jpg
200 OK 248 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x01.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 14:34:37], baseline, precision 8, 1920x650, components 3\012- data
Size 248 kB (247535 bytes)
Hash d59e9b3d67c7f6e052b653eaaf5e32ed
8771fbedb15d61220ca4938b04b2a74ce2e3899a
39ba51a295bee66621ca2506f03b078c7ce6e00a502a5686591dfbdeaf505620
GET /wp-content/uploads/2022/10/home-slider-2022-x01.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:23 GMT
content-type: image/jpeg
content-length: 247535
last-modified: Wed, 05 Oct 2022 13:26:06 GMT
etag: "633d85ee-3c6ef"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x02.jpg
200 OK 313 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x02.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 14:34:18], baseline, precision 8, 1920x650, components 3\012- data
Size 313 kB (313124 bytes)
Hash d331e7791f598d297ddef552b0e63f39
01a6fc20946070b4bc818b883b7418cb74f79490
c09ac44ea219aad68ac7d77d3ecd26c584874e086de077dfece9b26501fab7cd
GET /wp-content/uploads/2022/10/home-slider-2022-x02.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:23 GMT
content-type: image/jpeg
content-length: 313124
last-modified: Wed, 05 Oct 2022 13:26:08 GMT
etag: "633d85f0-4c724"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x03.jpg
200 OK 243 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x03.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 14:34:56], baseline, precision 8, 1920x650, components 3\012- data
Size 243 kB (243279 bytes)
Hash 8edbcdb9773b24633691b1d846544201
88866e9c046668efe56c6eb872e6a3775a1f9d4c
5ca630918110844e3aebd686341af95133419763e2ac63f74671824335b2a2d4
GET /wp-content/uploads/2022/10/home-slider-2022-x03.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:23 GMT
content-type: image/jpeg
content-length: 243279
last-modified: Wed, 05 Oct 2022 13:26:10 GMT
etag: "633d85f2-3b64f"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
maps.gstatic.com/maps-api-v3/embed/js/52/6/init_embed.js
200 OK 66 kB URL HTTP/2 maps.gstatic.com/maps-api-v3/embed/js/52/6/init_embed.js
IP
File type ASCII text, with very long lines (2647)
Hash 3ef6dfbf3b57ddb1cffb291af4dffe5f
0dab8207dfa5a5fedeaa7a959028d574f0773542
15ca67d70d885130a772bff2c7dbc797d48f657e745871d8acedba5e46b12e59
GET /maps-api-v3/embed/js/52/6/init_embed.js HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/maps-api-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="maps-api-js"
report-to: {"group":"maps-api-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/maps-api-js"}]}
content-length: 66148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 19:33:44 GMT
expires: Thu, 21 Mar 2024 19:33:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Mar 2023 21:47:34 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 11259
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x04.jpg
200 OK 294 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x04.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 14:33:01], baseline, precision 8, 1920x650, components 3\012- data
Size 294 kB (293615 bytes)
Hash 418213136764144c7ddd61b2412b8e0d
de3e656fd929cc9225dc8a57cbcaf4da44922a05
981c24c0ec40d14cc2f2097ed74cc0d9ae5090c3113210225a777f0c72532557
GET /wp-content/uploads/2022/10/home-slider-2022-x04.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:23 GMT
content-type: image/jpeg
content-length: 293615
last-modified: Wed, 05 Oct 2022 13:26:12 GMT
etag: "633d85f4-47aef"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x05.jpg
200 OK 275 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x05.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 14:33:59], baseline, precision 8, 1920x650, components 3\012- data
Size 275 kB (274637 bytes)
Hash 4b9ce33f5622c4039dccbfe78c179763
54f692bd1187797266a8bb430159e32b1a71e5af
a882c7b6599d71569e7d8612abe044d0da5ecbdde4240b7c3ad616f92fc35de1
GET /wp-content/uploads/2022/10/home-slider-2022-x05.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:23 GMT
content-type: image/jpeg
content-length: 274637
last-modified: Wed, 05 Oct 2022 13:26:14 GMT
etag: "633d85f6-430cd"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x06.jpg
200 OK 215 kB URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/home-slider-2022-x06.jpg
IP
ASN #8972 Host Europe GmbH
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 21.2 (Windows), datetime=2022:10:05 14:35:16], baseline, precision 8, 1920x650, components 3\012- data
Size 215 kB (215414 bytes)
Hash b52b979da7fab2bb4fc63728cfff7eee
db1d89672459af842ce62bf530dfc68ff8cfdf0c
3b9c199c34b3a9170164a75fa797d24ad58cf5902b0e34d3fea1c55e33aad5ca
GET /wp-content/uploads/2022/10/home-slider-2022-x06.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:23 GMT
content-type: image/jpeg
content-length: 215414
last-modified: Wed, 05 Oct 2022 13:26:16 GMT
etag: "633d85f8-34976"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
streetviewpixels-pa.googleapis.com/v1/tile?cb_client=apiv3&panoid=u-esTXZdKbMAAAQ7Lq51Ow&output=tile&x=0&y=0&zoom=0&nbt=1&fover=2
404 Not Found 115 B URL HTTP/2 streetviewpixels-pa.googleapis.com/v1/tile?cb_client=apiv3&panoid=u-esTXZdKbMAAAQ7Lq51Ow&output=tile&x=0&y=0&zoom=0&nbt=1&fover=2
IP
File type JSON data\012- , ASCII text
Hash 8cb1445f83f7f046472727a406eac20d
056115e06cb2ed649631b79dd5a3ed24cd1070f7
6d8c9ac5c0a43bb73fb4be1ac5dce8ee9b541b6f155df26b098ea563cf237c39
GET /v1/tile?cb_client=apiv3&panoid=u-esTXZdKbMAAAQ7Lq51Ow&output=tile&x=0&y=0&zoom=0&nbt=1&fover=2 HTTP/1.1
Host: streetviewpixels-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
vary: Origin, X-Origin, Referer
content-type: application/json; charset=UTF-8
content-encoding: gzip
date: Wed, 22 Mar 2023 22:41:23 GMT
server: scaffolding on HTTPServer2
cache-control: private
content-length: 115
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.google.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 14:12:20 GMT
expires: Tue, 19 Mar 2024 14:12:20 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 203343
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 18:05:11 GMT
expires: Thu, 21 Mar 2024 18:05:11 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
age: 16572
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
200 OK 952 B URL HTTP/2 fonts.googleapis.com/css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en
IP
File type ASCII text, with very long lines (1413)
Hash 1d2b20f0518afdf37fc45a9d03f86ce7
50f77c1f6098953bedb791bdfe4dffbab16329e8
7528eda82d463dd8df1fa1ac80723cfbe9c505352d82511b322fcf25c7da92a9
GET /css?family=Google+Sans+Text:400&text=%E2%86%90%E2%86%92%E2%86%91%E2%86%93&lang=en HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 22 Mar 2023 22:41:23 GMT
date: Wed, 22 Mar 2023 22:41:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f2d9058a696bc3684e9116b15fef251b
8915ec6b4396539cdb639cb5abf1dd9a9762650c
886cd009bfce7f31c36e479c5fb443d8ae66bcd0a736043317c77ccb81809210
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y0-z0
200 OK 42 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y0-z0
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash de0bc4b42eab117cabca5a0c467a2206
b7ad7008a0eb0ac082828a36ae6588d68e514f06
4b609b7071515199a10c77050ea61640a2529d017d97ca76c2d3ad3f50c9f73c
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y0-z0 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:26 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:26 GMT
server: fife
content-length: 42532
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f2d9058a696bc3684e9116b15fef251b
8915ec6b4396539cdb639cb5abf1dd9a9762650c
886cd009bfce7f31c36e479c5fb443d8ae66bcd0a736043317c77ccb81809210
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 22 Mar 2023 22:41:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y1-z2
200 OK 75 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y1-z2
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 6889efd58bc0e57aeb69609a93d5fcb6
2831d168f6cfae85247cec4df258a34502962223
0539bd50eb303c42f3e7a8953cbe4bc632b8554ec442134f79c9118a435c227f
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y1-z2 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:26 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:26 GMT
server: fife
content-length: 75039
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y1-z2
200 OK 73 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y1-z2
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 6da978f21a3edeb1c39d777d311fa2c7
aa010f76535d9aa524e726c40d0ef9578df53fdd
f9e7b54455ffdcb0d6acd76f7f5c818c23c5a1658230c1bb1e7df1d28e50ac01
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y1-z2 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:26 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:26 GMT
server: fife
content-length: 72751
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y0-z2
200 OK 63 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y0-z2
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 3c137c6bc0f2451ef4f9c5611cdc62a1
373456e9ad33ea55e3d0cd278a4a43ed62b90d24
a194f1bf3e0e4b1606e4ebf18e970a4a37bc2c8d0841dcf4c56dfa6946994d6f
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y0-z2 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 62876
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x12-y2-z4
200 OK 26 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x12-y2-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 08ab406b1c864cfa4e90dbfe0fb33b82
8113219b7d63a0f0e0e7c141836e9160e2ed6ec1
3f30d6bbfddbae567484f41fd01187ff92f3dc61e41ab5c19e3c0d356255c1e9
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x12-y2-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 25956
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y0-z2
200 OK 53 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y0-z2
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash bcd4f590b6314e7c6e57ccd5672e3b16
17957c7a02a7fd716758e3a4605a46c88a4fce7c
bead92f6819fe3e59318a0a04237636cd865c78f49407ace44714659f7e25844
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y0-z2 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 53342
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y4-z4
200 OK 95 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y4-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash a887af456fa422bf2a3c65b3de9c2703
3653c67f71d9e7461c0a3b4b2d0b35864baace75
62ed13c0bf144e7fc854b7c2e32feae19ac183c94352c15fbae004ae971d89ec
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y4-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 95371
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y0-z2
200 OK 45 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y0-z2
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 9ac307f2c7238391e80585f2e43fd562
a3961815854c29f7db9850f8399928038bcb41e9
b912764996b36339e5e7f56caea1a6cfe6987e60fcfe05489197a4d5a1d085d5
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y0-z2 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 44719
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y2-z4
200 OK 39 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y2-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 181d7af07e66807fb8ae5574a0d1da29
465a927baaf8339fbd7b32eeee8ab64eb4f2eb57
7d4a230d6b21f1f9bee0024fe57ee9b8c0eb831108be65be4a94af06d3a78f50
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y2-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 38641
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y1-z4
200 OK 18 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y1-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 8042523b17a36baed6192232f6630e9f
c443905408026ec48eea251e2c4feb5f1726dc14
233a8c30a7525c19c574b5f9333fa9b5f85fff94057b363590497bb6237c8bd4
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y1-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 18040
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y1-z4
200 OK 23 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y1-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 653762608f9c5bb5f4fea17aac1dad02
b7c2411506ff7966a13731c225575a6845e0c0e8
fc1abda7cfeead3d198465f0e9e9b1c34424ddbd63521b7f61e03af381f52fed
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y1-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 23168
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y1-z4
200 OK 15 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y1-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash a0e170d44cad0f27cd5ebad84ce09835
a3f2633a90b58cc2d40267c7f04ab23a0a276356
0de5b4f22e221f8a9ef3a55a8ce565c18b9d07def213b0dfd6d3ea2ede6b6d04
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y1-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 14891
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y3-z4
200 OK 72 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y3-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash de47dae74f2b4f136ebfb022f0327225
c59d2a511ede15bbc47928c9f1aebb238bd4ca72
1b67fb59386b0e0af9336c85264f3d3bea337ad36a5b3706b4c9674cef6cbe9e
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y3-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 72239
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y4-z4
200 OK 62 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y4-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 10051cac395bca0805fb8220516272e5
350effff71dec57645396f25d3aad9505bf70e1f
53bf31ac1bdee7950798f3dc688428ed8d7d2dca8b3297a4b9c431e5e5c26df4
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y4-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 61908
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y1-z2
200 OK 68 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y1-z2
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 5d07c76f661b41ccac6d7d0ce6facd84
567e185e4ae07f8c5540003bf4ec2ee2388787e1
bb16a400ab37d6f449beb37c768f4f7b70e8afd6ba0a8b58e2a1eff100e7170c
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y1-z2 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 67569
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y2-z4
200 OK 26 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y2-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 42bc7bf53cfdccda0b75b1cbc952f1b8
e5ceb6f4293a3b5cc4fa54b9fb9026f2e6db4035
244dff65a9ab30c5880652e4e2896500f811f3b955be523437610d31a67bf5d4
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y2-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 25784
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y1-z4
200 OK 18 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y1-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash f69c0186de348e136e609c10fa8dbef7
58498b327d5bf812636a76058ff78365c57c588c
b58b4fc2176eff1729565418d3e94446b14acdb94a2a2bf0648b943ad73505dc
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y1-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 18009
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y4-z4
200 OK 99 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y4-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 3868db7e8bc8e7179acf4cad39b31bc8
c06c09a458f289af4be226b7b1fa2ebd01ac86db
a419160f6dce7e5b07eb42de62e49a745a15bbb4d862448cec52fb93420808b6
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y4-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 99326
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y3-z4
200 OK 82 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y3-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash f047c271c2b55e5d8cd88583b71a770b
00c7cd64ae3788cba2a0617c87406bfa06aed68a
f083f029d1f375d0bf4e76146c9a346ed6e0b77e99968117b665e75d62780de7
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x1-y3-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 81482
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y2-z4
200 OK 38 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y2-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 535b8a071426f18c8691ffe45afeaca9
91bfd04d53556005af3b90fe88192649db68555e
872d2a4849911be523a6d59dce3d0010529ed826d279c6c1ad3a58a1391cbe58
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y2-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 38496
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y0-z2
200 OK 63 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y0-z2
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 999444fcac25b1cbc7cc0569e642b83a
f4ce79f21f499093a64bf0149775a014f8dbea78
b4c27e04911f548ccc192ed058bcd8e1231fe227ea2601cd267fd6736d5a3912
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y0-z2 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 63157
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y2-z4
200 OK 31 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y2-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 898e7db37fe1c03ed2fda7f21842909b
1ac4d59c7465c82301475c84e3c23aef1a8ace91
52539b06801f33e301f5762aaf586a321bddab0bbdfde89a7032d525ce5d0a8f
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y2-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 31422
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y3-z4
200 OK 68 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y3-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash 4c1f5a2e537b53c28f911c7d519f4780
33d9c36b3e8c1ae2e3f3cd642410af5746e6a2cc
dbee9368635473d41579c0e8ddc62a6e118c1ec16dab4b8492a8da61881ebdf3
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x2-y3-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 68498
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y1-z2
200 OK 74 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y1-z2
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash a8a046771bbc2e43b789413558011fa3
4f899afcd8d31aaae6622512bb3e4030defef006
22c8d337e28b53be2c11a0175fb070ae12b136da2b84a2fc52f66e96280dda98
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x3-y1-z2 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:27 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:27 GMT
server: fife
content-length: 73570
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y3-z4
200 OK 64 kB URL HTTP/2 lh3.ggpht.com/p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y3-z4
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 512x512, components 3\012- data
Hash dbe1b400c495c7e51525b3f82c9b4aa6
e9c0e8e196dd7823ac26541170135a096ad29ec4
e0405643c02ceb5f6cb9c558c46f12e0a23d388c5a8bc99eebff7b80d752c5d6
GET /p/AF1QipOcLjJokWrO9ACCUDSanJBaQtPNOKyq2qaiVlEe=x0-y3-z4 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11a45"
expires: Thu, 23 Mar 2023 22:41:28 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2017-08-31.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-credentials: true
access-control-allow-origin: https://www.google.com
timing-allow-origin: https://www.google.com
x-content-type-options: nosniff
date: Wed, 22 Mar 2023 22:41:28 GMT
server: fife
content-length: 64075
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae396653-384e-48e4-9824-4bf9d53f211b.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae396653-384e-48e4-9824-4bf9d53f211b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 90be67fd11de3a169f4de942f6418f3f
55bd99cc5490b60e7a653ffa5f2a8c288ef66e87
b07e34257bbaa41c941650a839adad82d4999d92ee62402dbec969d9464c89b0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae396653-384e-48e4-9824-4bf9d53f211b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10959
x-amzn-requestid: a7e3f891-6f0e-48af-9a37-3cb8f9cae223
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B9xD8G-pIAMFagQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64156218-3334d770691739b77f855b0b;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 07:02:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 42WgGpls95Wxkx1mwlu_0Xe1cfzndRkaWAyTblM_izKKfEIri4fgFg==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 0ec9ddba08fcd99386924593dbdbd44a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 22 Mar 2023 03:12:08 GMT
age: 70161
etag: "55bd99cc5490b60e7a653ffa5f2a8c288ef66e87"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-json/wp-statistics/v2/hit?wp_statistics_hit_rest=yes&track_all=1¤t_page_type=home¤t_page_id=2&search_query&page_uri=Lw=&referred=&_=1679524896455
404 Not Found 1.0 kB URL HTTP/2 regio.brecht-caravan.de/wp-json/wp-statistics/v2/hit?wp_statistics_hit_rest=yes&track_all=1¤t_page_type=home¤t_page_id=2&search_query&page_uri=Lw=&referred=&_=1679524896455
IP
ASN #8972 Host Europe GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash eb4931c82d2eebd8e39fabf292198830
246e60a36c27c156477699b4d67e14c28bde960f
9828fde077b7116b924327150c7ad9343b2b35b28b605237f912efb3521cbd82
GET /wp-json/wp-statistics/v2/hit?wp_statistics_hit_rest=yes&track_all=1¤t_page_type=home¤t_page_id=2&search_query&page_uri=Lw=&referred=&_=1679524896455 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=UTF-8
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Wed, 22 Mar 2023 22:41:29 GMT
content-type: text/html
content-length: 1027
last-modified: Fri, 03 Mar 2017 11:57:16 GMT
etag: "403-549d23f35bf00"
accept-ranges: bytes
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-menu.js?ver=6.2.3
200 OK 0 B URL HTTP/2 regio.brecht-caravan.de/wp-content/themes/Getblue/assets/min/js/general/avada-menu.js?ver=6.2.3
IP
ASN #8972 Host Europe GmbH
Analyzer Verdict Alert fortinet Malware
GET /wp-content/themes/Getblue/assets/min/js/general/avada-menu.js?ver=6.2.3 HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: application/javascript
content-length: 39757
last-modified: Tue, 10 Nov 2020 15:44:34 GMT
etag: "5faab562-9b4d"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=en
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=en
IP
GET /css?family=Roboto:300,400,500,700|Google+Sans:400,500,700|Google+Sans+Text:400&lang=en HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 22 Mar 2023 22:41:23 GMT
date: Wed, 22 Mar 2023 22:41:23 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnwagen-Werkstatt.jpg
200 OK 0 B URL HTTP/2 regio.brecht-caravan.de/wp-content/uploads/2022/10/Wohnwagen-Werkstatt.jpg
IP
ASN #8972 Host Europe GmbH
GET /wp-content/uploads/2022/10/Wohnwagen-Werkstatt.jpg HTTP/1.1
Host: regio.brecht-caravan.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://regio.brecht-caravan.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 22 Mar 2023 22:41:21 GMT
content-type: image/jpeg
content-length: 281459
last-modified: Wed, 05 Oct 2022 12:13:03 GMT
etag: "633d74cf-44b73"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
91.250.114.206
216.58.207.228
23.36.77.32
0.0.0.0