Overview

URL verify-uni-frankfurt.de/
IP91.250.102.236
ASNAS20773 Host Europe GmbH
Location Germany
Report completed2017-11-14 21:14:21 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-11-14 2 verify-uni-frankfurt.de/ Phishing
2017-11-14 2 verify-uni-frankfurt.de/ Phishing
2017-11-14 2 www.verify-uni-frankfurt.de/ Phishing
2017-11-14 2 www.verify-uni-frankfurt.de/ Phishing
2017-11-14 2 www.verify-uni-frankfurt.de/web/fonts/GandhiSans-Regular-webfont.woff Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 91.250.102.236

Date UQ / IDS / BL URL IP
2017-11-23 00:52:50 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-21 15:35:32 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-21 06:35:44 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-21 05:35:36 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-20 13:20:05 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-20 04:04:46 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-19 23:45:07 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-19 09:00:48 +0100
0 - 3 - 0 samadis-bollywood-style.de/ 91.250.102.236
2017-11-19 07:01:52 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-19 02:29:18 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236

Last 10 reports on ASN: AS20773 Host Europe GmbH

Date UQ / IDS / BL URL IP
2017-11-23 15:09:07 +0100
0 - 0 - 27 ma-music.at/ 87.230.26.152
2017-11-23 14:38:31 +0100
1 - 0 - 0 haus-anni-moosbach.de/ 91.250.117.125
2017-11-23 14:22:29 +0100
0 - 1 - 0 faq.neusued-dev.de/ 92.51.147.94
2017-11-23 13:33:32 +0100
0 - 1 - 0 soturo.getfood.at/ 91.250.117.138
2017-11-23 13:15:48 +0100
1 - 0 - 0 spvgg-moosbach.de/ 91.250.117.125
2017-11-23 12:38:18 +0100
1 - 0 - 0 magerete-kellermann.de/ 91.250.117.125
2017-11-23 12:37:12 +0100
0 - 1 - 0 hamburg-harley-days.de/ 178.77.109.95
2017-11-23 11:23:22 +0100
0 - 3 - 0 schwaben-geissboecke.de/ 92.51.180.171
2017-11-23 10:17:59 +0100
0 - 1 - 0 www.funk.eu/downloads/amt/AMT-Installer_v4_0.exe 91.250.118.144
2017-11-23 09:56:31 +0100
0 - 2 - 0 static.updatestar.net/dl/storagecraft/ShadowP (...) 91.250.81.8

Last 10 reports on domain: verify-uni-frankfurt.de

Date UQ / IDS / BL URL IP
2017-11-23 00:52:50 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-21 15:35:32 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-21 06:35:44 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-21 05:35:36 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-20 13:20:05 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-20 04:04:46 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-19 23:45:07 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-19 07:01:52 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-19 02:29:18 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236
2017-11-18 16:27:53 +0100
0 - 0 - 5 verify-uni-frankfurt.de/ 91.250.102.236


JavaScript

Executed Scripts (16)


Executed Evals (0)


Executed Writes (4)

#1 JavaScript::Write (size: 2351, repeated: 1) - SHA256: 01892ae0b9e233262c10776aec1177a9355a0d331fe8d123cf3d251a97b21402

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-8136498590039459"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20171108/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_format="195x600";google_ad_slot="4791199527";google_ad_client="ca-pub-8136498590039459";google_adsbygoogle_status="done";google_full_width_responsive_allowed=false;google_fwr_non_expansion_reason=4;google_responsive_formats=4;google_ad_width=195;google_ad_height=600;google_ad_resizable=true;google_override_format=1;google_responsive_auto_format=1;google_loader_features_used=128;google_ad_modifications={"plle":true,"eids":["21060867","21061122","191880151"],"loeids":[]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_unit_key="3579260277";google_ad_dom_fingerprint="807048394";google_sailm=false;google_sl_win=window.parent;google_unique_id=2;google_async_iframe_id="aswift_1";google_start_time=1510690825896;google_pub_vars="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";google_bpp=43;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script > window.parent.google_sa_impl.call(this, window, document, location); < /script></body > < /html>
                                    

#2 JavaScript::Write (size: 1742, repeated: 1) - SHA256: c65100dd9d62be07c312216ce66149b4839fa4e02e2bbafc2be5418375702703

                                        < !doctype html > < html > < body > < iframe style = "display:none"
data - ad - client = "ca-pub-8136498590039459"
id = "google_esf"
name = "google_esf"
src = "https://googleads.g.doubleclick.net/pagead/html/r20171108/r20170110/zrt_lookup.html#" > < /iframe><script>google_ad_slot="9991625128";google_ad_client="ca-pub-8136498590039459";google_adsbygoogle_status="done";google_ad_width=728;google_ad_height=90;google_ad_modifications={"plle":true,"eids":["21060867","21061122","191880151"],"loeids":[]};google_loader_used="aa";google_reactive_tag_first=false;google_ad_format="728x90";google_ad_unit_key="3150848441";google_ad_dom_fingerprint="807048394";google_sailm=false;google_sl_win=window.parent;google_unique_id=1;google_async_iframe_id="aswift_0";google_start_time=1510690825834;google_pub_vars="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";google_bpp=61;google_async_rrc=0;google_iframe_start_time=new Date().getTime();</script > < script > window.parent.google_sa_impl.call(this, window, document, location); < /script></body > < /html>
                                    

#3 JavaScript::Write (size: 1305, repeated: 1) - SHA256: 6241e72bf60778c997877e8e86393b25bb30f3ecc33c39ea77ac53624ea55ca3

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "728"
height = "90"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8136498590039459&amp;output=html&amp;h=90&amp;slotname=9991625128&amp;adk=3150848441&amp;adf=807048394&amp;w=728&amp;lmt=1510690824&amp;format=728x90&amp;url=https%3A%2F%2Fwww.verify-uni-frankfurt.de%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=FBT&amp;dt=1510690825834&amp;bpp=61&amp;fdt=1525&amp;idt=1530&amp;shv=r20171108&amp;cbv=r20170110&amp;saldr=aa&amp;correlator=7075296546980&amp;frm=20&amp;ga_vid=677913289.1510690827&amp;ga_sid=1510690827&amp;ga_hid=952542415&amp;ga_fc=0&amp;pv=2&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=29&amp;ady=146&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=21060867%2C21061122%2C191880151%2C21061217&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7C%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;dtd=1561"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#4 JavaScript::Write (size: 1381, repeated: 1) - SHA256: d466cfd9ec89de826a684b64cea3065879b273cb34f91e8fecb7565c5585bcd9

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "195"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8136498590039459&amp;output=html&amp;h=600&amp;slotname=4791199527&amp;adk=3579260277&amp;adf=807048394&amp;w=195&amp;fwrn=4&amp;lmt=1510690824&amp;rafmt=1&amp;format=195x600&amp;url=https%3A%2F%2Fwww.verify-uni-frankfurt.de%2F&amp;ea=0&amp;flash=10.0.45&amp;fwr=0&amp;resp_fmts=4&amp;wgl=0&amp;adsid=NT&amp;dt=1510690825896&amp;bpp=43&amp;fdt=1521&amp;idt=1534&amp;shv=r20171108&amp;cbv=r20170110&amp;saldr=aa&amp;prev_fmts=728x90&amp;correlator=7075296546980&amp;frm=20&amp;ga_vid=677913289.1510690827&amp;ga_sid=1510690827&amp;ga_hid=952542415&amp;ga_fc=0&amp;pv=1&amp;icsg=0&amp;nhd=1&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=60&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=48&amp;ady=1275&amp;biw=1159&amp;bih=754&amp;abxe=1&amp;eid=21060867%2C21061122%2C191880151%2C21061217&amp;oid=3&amp;nmo=1&amp;zm=1.02&amp;rx=0&amp;eae=4&amp;fc=528&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=144&amp;bc=1&amp;ifi=2&amp;dtd=1567"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (46)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.250.102.236
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 14 Nov 2017 20:20:23 GMT
Server: Apache
Location: https://verify-uni-frankfurt.de/
Content-Length: 313
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   313
Md5:    12eef5e02687b3284a5dd2e180e2c0c3
Sha1:   8a90b786f32749d8c9a8e6d275d7098b884a62c3
Sha256: 00333fd9748fe1abb6439e1910c90b48bef6cb4e8989dd21120494ce1acce36b

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.int-x3.letsencrypt.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 117
Content-Type: application/ocsp-request

                                         
                                         195.159.219.11
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 527
Etag: "6829B472285861F1F328F69F0EA4AF21993DB8F4157E409C2CB7633104117695"
Last-Modified: Sat, 11 Nov 2017 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8440
Expires: Tue, 14 Nov 2017 22:41:04 GMT
Date: Tue, 14 Nov 2017 20:20:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   527
Md5:    6fd29c5859a1b372527b23c616878fb6
Sha1:   004a5c0ae49336369f506d69f7d8c7dcd60e9662
Sha256: 6829b472285861f1f328f69f0ea4af21993db8f4157e409c2cb7633104117695
                                        
                                            POST / HTTP/1.1 
Host: isrg.trustid.ocsp.identrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         192.147.157.202
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 20:20:24 GMT
Content-Transfer-Encoding: Binary
Last-Modified: Tue, 14 Nov 2017 08:29:09 GMT
Etag: "1fd86a8e0b93c3b8696c96059c0678acc7537cce"
Expires: Wed, 15 Nov 2017 08:29:09 GMT
Cache-Control: max-age=43200,public,no-transform,must-revalidate
Content-Length: 1398
Connection: close


--- Additional Info ---
Magic:  data
Size:   1398
Md5:    c044eeb293be272c3ad3f041345493b3
Sha1:   1fd86a8e0b93c3b8696c96059c0678acc7537cce
Sha256: f509b0b7df09b7d4cda32ba4c48e26c25cddc5d3f1c3e3687269a2aabfe5cf61
                                        
                                            GET / HTTP/1.1 
Host: verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.250.102.236
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 14 Nov 2017 20:20:24 GMT
Server: Apache
Location: http://www.verify-uni-frankfurt.de/
Content-Length: 317
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   317
Md5:    4f0c0945a6d4dd7d556b5004041db774
Sha1:   9e74b7133a6681afbe114bed44e9643656339453
Sha256: 85515388e1114c61d71d18fbfaa6432fd386b58f9b68d5ddb6ca2fe91424e1ed

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.250.102.236
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 14 Nov 2017 20:20:24 GMT
Server: Apache
Location: https://www.verify-uni-frankfurt.de/
Content-Length: 321
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   321
Md5:    228ea4e2d5cda678e84d7b08b12924de
Sha1:   9a7f70ef6bdd3a7941886b0b8d74d1bb40fb3c15
Sha256: 9577749c79db70c8c5f208c8c706f3675b051c48016980ca6589b0638c440173

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.250.102.236
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Tue, 14 Nov 2017 20:20:24 GMT
Server: Apache
X-Powered-By: PHP/5.5.9-1ubuntu4.22, PleskLin
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3039
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3039
Md5:    cc8c139e6d90adc64742c811eb2046d9
Sha1:   308d56fe872500897222b3b85c6637089890da5d
Sha256: 16489aadbb154121317c7486b7962ed57f2203052726d0372acbb43de2f0a9c4

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /web/css/style.css HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         91.250.102.236
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 14 Nov 2017 20:20:24 GMT
Server: Apache
Last-Modified: Wed, 26 Apr 2017 15:36:14 GMT
Etag: "496a-54e1399bca3a8-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
X-Powered-By: PleskLin
Content-Length: 3996
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3996
Md5:    e98917e4a91da1aae355e0b0b27b311f
Sha1:   d9e9faac015fa695d4c10160234598b7f6aa0e02
Sha256: 14f921a8b6693a80cc39f55849b8ed9b73dea50d93ba5596ab44e4e9fd495444
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 20:20:24 GMT
Server: Apache
Last-Modified: Mon, 13 Nov 2017 23:25:59 GMT
Expires: Mon, 20 Nov 2017 23:25:59 GMT
Etag: B8DD31AD6CBDC2B5AF896217525B41E0B896CFB6
Cache-Control: max-age=528934,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp14
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    aa3f8ab7e1385d2774bb7463c6d33a34
Sha1:   b8dd31ad6cbdc2b5af896217525b41e0b896cfb6
Sha256: 0851e7b3145dceb4643ce998a292fec52266caedd2883d6373599ffc5d9bdeae
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Server: Apache
Last-Modified: Mon, 13 Nov 2017 11:43:12 GMT
Expires: Mon, 20 Nov 2017 11:43:12 GMT
Etag: C86352D6B860039C8621B740A98C213A9EF7D9BF
Cache-Control: max-age=486766,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp14
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    ebf4e873cd55da908aa11bdccc4e3a9c
Sha1:   c86352d6b860039c8621b740a98c213a9ef7d9bf
Sha256: 612ec9ecca32cdde75d1f926c411bce32c91cb85a1ae006ca5355e29316be806
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Server: Apache
Last-Modified: Mon, 13 Nov 2017 11:43:12 GMT
Expires: Mon, 20 Nov 2017 11:43:12 GMT
Etag: 6F15D70331A2933F6ECD99291D030B2E4ADCB2D8
Cache-Control: max-age=486766,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp14
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f72d96d14294cadcc7fdedfb5c81044e
Sha1:   6f15d70331a2933f6ecd99291d030b2e4adcb2d8
Sha256: 3dc2787bf96a195e82489b3a58b9bb523d69de45de845dfb3f80cc5b28f0d03b
                                        
                                            GET /ajax/libs/cookieconsent2/1.0.9/cookieconsent.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         104.19.194.102
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 22 Jun 2016 14:41:22 GMT
Expires: Sun, 04 Nov 2018 20:20:25 GMT
Cache-Control: public, max-age=30672000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Strict-Transport-Security: max-age=15780000; includeSubDomains
Server: cloudflare-nginx
CF-RAY: 3bdcabd97c13429d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1946
Md5:    d927af0997aa2abe50c5fdca613f50ff
Sha1:   51224e2481c6095fdb9b5c2cefbac44d13ebc21e
Sha256: 3b08c1d74fb7f1d6ee4a8702a6448eb19f5d6f035ecf0dcacc7e7789f1a670bc
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Expires: Sat, 18 Nov 2017 20:20:25 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    6b8df898873de8e6fd0dc549f747e21a
Sha1:   acb34ac3447e6f3cc8c2f0ace4c4120f7ea91714
Sha256: c24085d475c1ac496a01f4ad671f040f0f93ecd713b57585127851b9778dd1a0
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=534747, public, no-transform, must-revalidate
Last-Modified: Tue, 14 Nov 2017 00:50:10 GMT
Expires: Tue, 21 Nov 2017 00:50:10 GMT
Date: Tue, 14 Nov 2017 20:20:25 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    4de03576e9416c587bec3f1c83e8d9c3
Sha1:   7e803bf8912b1a8d74779306169db4f383516cef
Sha256: 1083d3d337138ac311b21305d5d9dc6b4c3c26f94628b2ceba66d790fc0964bd
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.250.102.236
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Server: Apache
Last-Modified: Wed, 26 Apr 2017 15:36:13 GMT
Etag: "d9-54e1399b6797e"
Accept-Ranges: bytes
Content-Length: 217
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   217
Md5:    b3fbf30c125f7858de8a5e3ab84adfbd
Sha1:   5612ed8c48428122091802b2986341af02502728
Sha256: 1b44947a9f67a408a812eae66f5aa196e878c3cfce944d219383fca1b615ea5e
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Expires: Sat, 18 Nov 2017 20:20:25 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    404386ee5f5cdb845a84d07408a1a074
Sha1:   865c34beca7ed886736766c6954b8865b0b7e935
Sha256: e00709c05ed82a090180d824f7523ee5db1282727e018960adc03a27524c4be9
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Expires: Sat, 18 Nov 2017 20:20:25 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /web/fonts/GandhiSans-Regular-webfont.woff HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/web/css/style.css

                                         
                                         91.250.102.236
HTTP/1.1 200 OK
Content-Type: application/x-font-woff
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Server: Apache
Last-Modified: Wed, 26 Apr 2017 15:36:14 GMT
Etag: "6354-54e1399bcc2e9"
Accept-Ranges: bytes
Content-Length: 25428
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   25428
Md5:    04bd632f5094a3c6b196605aeaabc5f1
Sha1:   e85f064f9b7bf8194b9a572a1af8413819f3d15d
Sha256: 8f6d93e567b10a60389690bc82dfd7a0f84e8478152e59d2c5210598fe4841ce

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /web/images/header-border.png HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/web/css/style.css

                                         
                                         91.250.102.236
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Server: Apache
Last-Modified: Wed, 26 Apr 2017 15:36:14 GMT
Etag: "108-54e1399c6e4b9"
Accept-Ranges: bytes
Content-Length: 264
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 594 x 5, 8-bit/color RGBA, non-interlaced
Size:   264
Md5:    2efd80fff6c0e6f4617fdb2c66b071fe
Sha1:   8b87920e0d3ea88c924f05c2f0561d66fc8bd486
Sha256: 2472603fbd9fce21e33f3efe89e9a65e4628608222b32182dbd823753032e502
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 20:20:25 GMT
Expires: Sat, 18 Nov 2017 20:20:25 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    06800fb95c99d7ad5aad09259ed8d1df
Sha1:   7d6b9b1c12229cb7eca89598b52fed83182d4a46
Sha256: f5b826ad51a872dfcdf959a2ef514dacd893d48342421d88afcba87efe1360f2
                                        
                                            GET /vi/5iuyh60wkjg/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 29204
Date: Tue, 14 Nov 2017 18:55:50 GMT
Expires: Tue, 14 Nov 2017 20:55:50 GMT
Etag: "1491822074"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 5075
Cache-Control: public, max-age=7200
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   29204
Md5:    c7a8b9e16e492c1089b2203e18c92923
Sha1:   f4583fc3ebce36fa0d5fa764cc1189f06683a429
Sha256: f8dd07e6d401eaf7a7d1ad13bd0625df58747b410eec915ce33a61fc9694048e
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 14 Nov 2017 20:20:25 GMT
Expires: Tue, 14 Nov 2017 20:20:25 GMT
Cache-Control: private, max-age=3600
Etag: 16906647195411736446
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   25020
Md5:    6e96aaae758cf81cfa11ba121341b5d2
Sha1:   c149d41a7fc67c885d2c78ba929f8a33975f943a
Sha256: 4f1920951f83d279b9ffec152b203de6c9b0a3614c3e2b7a9a483211443ef9aa
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 14 Nov 2017 19:50:40 GMT
Expires: Tue, 14 Nov 2017 21:50:40 GMT
Last-Modified: Fri, 20 Oct 2017 23:46:20 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14635
Cache-Control: public, max-age=7200
Age: 1785
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14635
Md5:    babff30a99e3dcaace32247777578260
Sha1:   6181b85ed6bffce1b3d00d23143ff914246d57c5
Sha256: 2731dd23151f162075a96330ae714823901e764fc7bf92a87168e5371aa4c099
                                        
                                            GET /vi/i8HePfa7WYs/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 9898
Date: Tue, 14 Nov 2017 20:20:25 GMT
Expires: Tue, 14 Nov 2017 22:20:25 GMT
Etag: "1469897041"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=7200
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   9898
Md5:    4333c8cab740fdecf42104a4d92da934
Sha1:   e7e0b08ac66f9e9e795c0d012d71137f7cfff85e
Sha256: b2b5c747c3398bea34d357e2252ccccedb42cf15ef433f48503c90760dec8d00
                                        
                                            GET /vi/KLWLTs90_po/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 42966
Date: Tue, 14 Nov 2017 19:21:49 GMT
Expires: Tue, 14 Nov 2017 21:21:49 GMT
Etag: "1477034511"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=7200
Age: 3516
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   42966
Md5:    64446719bf83d7650ef7bb561948f01b
Sha1:   66f4f1666d62c5892b203631eccc0e32797ab50e
Sha256: c6613113944e3658a68c203284e28f3811e1dc5dd68b7a1eb44fa98f7c77a78a
                                        
                                            GET /web/images/likes.png HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         91.250.102.236
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 14 Nov 2017 20:20:26 GMT
Server: Apache
Last-Modified: Wed, 26 Apr 2017 15:36:14 GMT
Etag: "1a6-54e1399c765a2"
Accept-Ranges: bytes
Content-Length: 422
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 15 x 15, 8-bit/color RGBA, non-interlaced
Size:   422
Md5:    c789ec9a8a0a806d0b456e060fed67bf
Sha1:   12feed1bd50f0504268a8b370934f0caf5ab349d
Sha256: 48e2bdfa5ca183a3fa4aaff86c3b19c4f569bb1369a5e098bf4664083f594202
                                        
                                            GET /vi/97XSh2t5weI/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 28366
Date: Tue, 14 Nov 2017 20:20:26 GMT
Expires: Tue, 14 Nov 2017 22:20:26 GMT
Etag: "1493095176"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=7200
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   28366
Md5:    36333dc1c24535fa369ebc359a158ba6
Sha1:   7078619ab719e805a2129841b3d17c5228047ff2
Sha256: 47c672f9eff2d7ea9244ecda0a1351f9be68ca660e12113ad262a18504de4bf6
                                        
                                            GET /r/collect?v=1&_v=j65&a=952542415&t=pageview&_s=1&dl=https%3A%2F%2Fwww.verify-uni-frankfurt.de%2F&ul=en-us&de=UTF-8&dt=verify-uni-frankfurt.de%20%7C%20Funny%20Video%20Highlights&sd=24-bit&sr=1176x885&vp=1159x754&je=1&fl=10.0%20r45&_u=IEBAAEQAI~&jid=1780576058&gjid=541989563&cid=677913289.1510690827&tid=UA-74285936-1&_gid=1358491324.1510690827&_r=1&z=1256374069 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Tue, 14 Nov 2017 20:20:26 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /vi/atVf2xDm8Js/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 10766
Date: Tue, 14 Nov 2017 20:20:25 GMT
Expires: Tue, 14 Nov 2017 22:20:25 GMT
Cache-Control: public, max-age=7200
Etag: "1493066165"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   10766
Md5:    f29abf2add6d3abc8435ad4d64e13479
Sha1:   5a9a5542a84edb8cce6807f7c06859d47e86ef56
Sha256: 45bd412ac41f1ce3e6aa3b624388ac8930a728f02d9ca6520f2766a9fde429c4
                                        
                                            GET /vi/UhIdclSF_qs/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 39937
Date: Tue, 14 Nov 2017 20:20:26 GMT
Expires: Tue, 14 Nov 2017 22:20:26 GMT
Etag: "1493098231"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=7200
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   39937
Md5:    2cfb71b415e6ab37f5ae94d7aaa19029
Sha1:   7450ff87bd55ff4a0b8d861f88daba8c492d3785
Sha256: 30fba26b3d4acaea802059d81abfcba811375e9035cb5b445195f6b1bf709198
                                        
                                            GET /pub-config/r20160913/ca-pub-8136498590039459.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Tue, 14 Nov 2017 20:20:26 GMT
Expires: Wed, 15 Nov 2017 08:20:26 GMT
Cache-Control: public, max-age=43200
Last-Modified: Mon, 13 Nov 2017 21:48:43 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /vi/dxn6msihFjc/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 33759
Date: Tue, 14 Nov 2017 20:20:26 GMT
Expires: Tue, 14 Nov 2017 22:20:26 GMT
Etag: "1493155669"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=7200
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   33759
Md5:    ab849b52b2bb73a8c740487ce2e22368
Sha1:   b88449602d3b7ce870f9c2444a75fc3b41e8fffa
Sha256: f4f69391fc353f5f724b33fd197220aa60f2bc6c864310779e0c49a1ed3eb527
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 14 Nov 2017 20:20:27 GMT
Expires: Sat, 18 Nov 2017 20:20:27 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    48cb62e68e982f0b85ed6671d2365656
Sha1:   eb759064b95db37bd7ee82fad1cfd184d9ed1ea6
Sha256: 0d6fd9680cecfaa3cee81da6b6cdff581c8c3ace36581913446c51e08ba02584
                                        
                                            GET /web/images/logo.png HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         91.250.102.236
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 14 Nov 2017 20:20:26 GMT
Server: Apache
Last-Modified: Wed, 26 Apr 2017 15:36:14 GMT
Etag: "732-54e1399c7715a"
Accept-Ranges: bytes
Content-Length: 1842
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 290 x 42, 8-bit/color RGBA, non-interlaced
Size:   1842
Md5:    0d43d3b279e960c07e689eb5014aba30
Sha1:   aae92a90a0bafa1ff3e342480337a04cb9a199c0
Sha256: b426281825001b46f04c0416cd341a8740e7220939defe6434a3fdd2bf852c1b
                                        
                                            GET /adsid/integrator.js?domain=www.verify-uni-frankfurt.de HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 20:20:27 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /pagead/js/r20171108/r20170110/show_ads_impl_single_load.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Tue, 14 Nov 2017 20:20:27 GMT
Expires: Tue, 14 Nov 2017 20:20:27 GMT
Cache-Control: private, max-age=1209600
Etag: 2634569518752493747
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67449
Md5:    21ca2b580b75d660044446b4e833a4e9
Sha1:   2bea5d8628bd5b2c4f4b74b195e08785c7adab27
Sha256: e1086ab90b9660b2311894901025c5e79cff4f5363fc4aff9e6563edb4c72f3b
                                        
                                            GET /vi/rIsQYrzztzI/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 11176
Date: Tue, 14 Nov 2017 20:20:27 GMT
Expires: Tue, 14 Nov 2017 22:20:27 GMT
Cache-Control: public, max-age=7200
Etag: "1459501515"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   11176
Md5:    c06bb21b9fad2dfe1a910ba8bad05a48
Sha1:   c836a5c6e647e9071bc7e113e03a62f6e901d82c
Sha256: 32d40000898382ce78abccad3df79838e41fc348670b9b4e8f1946cadc83e1dc
                                        
                                            GET /adsid/integrator.js?domain=www.verify-uni-frankfurt.de HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 20:20:27 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   107
Md5:    5432a558d422eaeaa6f7e8a15c0c1134
Sha1:   252ee6dbb502fd998fbdc5721da5986b877f1c73
Sha256: e61d268069b171358cb5d545e31856cbc3ac2b995cff5e4f7043ae988dc44c6d
                                        
                                            GET /vi/dun7KkHd1qA/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 13610
Date: Tue, 14 Nov 2017 18:58:26 GMT
Expires: Tue, 14 Nov 2017 20:58:26 GMT
Etag: "1444640865"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 4921
Cache-Control: public, max-age=7200
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   13610
Md5:    3e183a5211e36a9b3738da8be2a21aeb
Sha1:   6b544def726f9a042f8614465980bfb4e582c1c3
Sha256: df290e1992ef0a64e30397469a2f2212fee144993b6574dfc9d4e1e7921f5f22
                                        
                                            GET /vi/9efw5WgHzO8/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 12189
Date: Tue, 14 Nov 2017 20:20:27 GMT
Expires: Tue, 14 Nov 2017 22:20:27 GMT
Cache-Control: public, max-age=7200
Etag: "0"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   12189
Md5:    69f5f53c1f01629e6d4e29c70bbc4166
Sha1:   2dd734ca266dce78eeaf9dc7960a3841184415fd
Sha256: 2a7db6f17f33a702c2d386de17a2eee3ef59e6f5172238dce9210ed17d100a39
                                        
                                            GET /pagead/ads?client=ca-pub-8136498590039459&output=html&h=90&slotname=9991625128&adk=3150848441&adf=807048394&w=728&lmt=1510690824&format=728x90&url=https%3A%2F%2Fwww.verify-uni-frankfurt.de%2F&ea=0&flash=10.0.45&wgl=0&adsid=FBT&dt=1510690825834&bpp=61&fdt=1525&idt=1530&shv=r20171108&cbv=r20170110&saldr=aa&correlator=7075296546980&frm=20&ga_vid=677913289.1510690827&ga_sid=1510690827&ga_hid=952542415&ga_fc=0&pv=2&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=29&ady=146&biw=1159&bih=754&abxe=1&eid=21060867%2C21061122%2C191880151%2C21061217&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7C%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&dtd=1561 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 20:20:27 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 14-Nov-2017 20:35:27 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 14 Nov 2017 20:20:27 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   367
Md5:    7a85c31ee71553bc1204a3d3a9fbc934
Sha1:   9098fba8f19c41b64f62d3b15b1eb38813d77ecd
Sha256: 7248a16099ad788177e59f94a427fa6a4e4ab07218b74ce1a84afbab4b48dee0
                                        
                                            GET /vi/poq6AoHn4HM/hqdefault.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.142
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Length: 78831
Date: Tue, 14 Nov 2017 19:13:57 GMT
Expires: Tue, 14 Nov 2017 21:13:57 GMT
Etag: "1486907531"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 3989
Cache-Control: public, max-age=7200
Alt-Svc: quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   78831
Md5:    637f2f751ec19fc70294eb220fd62b42
Sha1:   8e6d5ce4e709171d134de1b15588e50fbcfe139a
Sha256: 891f4161fe2b136d97caac26a5428a569b19eca502db834e9c698ce6847aac74
                                        
                                            GET /pagead/js/r20171108/r20170110/osd.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Mon, 13 Nov 2017 14:13:38 GMT
Expires: Mon, 27 Nov 2017 14:13:38 GMT
Etag: 4704686864894352291
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 29470
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 108409
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   29470
Md5:    ccccb075378ca70c241e9ce1ceff0cff
Sha1:   add6947bd8506e93552028e27d7affbdf89bb9af
Sha256: 61e03d3d3274f3290f53842ef4dc0e93c2dfca33b357a9027de0d106c77095a8
                                        
                                            GET /web/images/views.png HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         91.250.102.236
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 14 Nov 2017 20:20:26 GMT
Server: Apache
Last-Modified: Wed, 26 Apr 2017 15:36:15 GMT
Etag: "1c5-54e1399c93e4d"
Accept-Ranges: bytes
Content-Length: 453
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 15 x 15, 8-bit/color RGBA, non-interlaced
Size:   453
Md5:    6d74f3df36d1621aff08be51d8c24ae2
Sha1:   19893f91552bf632477484d3ffa6d21fdebc7586
Sha256: 13fa76f87f7efa24f7a730e19a467e4e27cfe7817ce9130f510510fbd4c5869f
                                        
                                            GET /web/images/link.png HTTP/1.1 
Host: www.verify-uni-frankfurt.de
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         91.250.102.236
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 14 Nov 2017 20:20:27 GMT
Server: Apache
Last-Modified: Wed, 26 Apr 2017 15:36:14 GMT
Etag: "1e5-54e1399c765a2"
Accept-Ranges: bytes
Content-Length: 485
X-Powered-By: PleskLin
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 13 x 13, 8-bit/color RGBA, non-interlaced
Size:   485
Md5:    fbea157d2abd991c7f08d165881a0696
Sha1:   cc4f94a5f981463905790f276da22a6b592fa3e3
Sha256: 86aee1433cb99d5572c0f15b124427adc6899adca78041f7a1a506f372b07a9e
                                        
                                            GET /pagead/ads?client=ca-pub-8136498590039459&output=html&h=600&slotname=4791199527&adk=3579260277&adf=807048394&w=195&fwrn=4&lmt=1510690824&rafmt=1&format=195x600&url=https%3A%2F%2Fwww.verify-uni-frankfurt.de%2F&ea=0&flash=10.0.45&fwr=0&resp_fmts=4&wgl=0&adsid=NT&dt=1510690825896&bpp=43&fdt=1521&idt=1534&shv=r20171108&cbv=r20170110&saldr=aa&prev_fmts=728x90&correlator=7075296546980&frm=20&ga_vid=677913289.1510690827&ga_sid=1510690827&ga_hid=952542415&ga_fc=0&pv=1&icsg=0&nhd=1&dssz=0&mdo=0&mso=0&u_tz=60&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=48&ady=1275&biw=1159&bih=754&abxe=1&eid=21060867%2C21061122%2C191880151%2C21061217&oid=3&nmo=1&zm=1.02&rx=0&eae=4&fc=528&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=144&bc=1&ifi=2&dtd=1567 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 14 Nov 2017 20:20:28 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 1; mode=block
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 14-Nov-2017 20:35:27 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"
Expires: Tue, 14 Nov 2017 20:20:28 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   365
Md5:    288da083efa44377b29fccd71db67329
Sha1:   2243349ed0176f46277def71c95671073b794fdc
Sha256: a9287ba815a9d878f86b79315a7cd9269c88e31ec75b32a6bdec90b11a77c64c
                                        
                                            GET /pagead/html/r20171108/r20170110/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.verify-uni-frankfurt.de/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Date: Mon, 13 Nov 2017 17:31:18 GMT
Expires: Mon, 27 Nov 2017 17:31:18 GMT
Etag: 1844729265854807198
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6789
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 96550
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="41,39,38,37,35",quic=":443"; ma=2592000; v="41,39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6789
Md5:    294fc0121e8314d99d6a182d9df9a5cb
Sha1:   b38387df84d5750d63ab498f528540b087b36178
Sha256: 144a71c79ee1e3a690ae74448dbe0d4db6cf22b7ef04b9aa7e0b7f631a3cfa0c