medi-buy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
213.133.105.76301 Moved Permanently 414 B URL HTTP/1.1 medi-buy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 48147bffd72da66ccf7cf78598b7f1c8
d2d42f328b0f9800922a1b84f7cafbadc3b9b270
53d621c536725b21cbdb6471df2fde6a0daff968545d261d71ceec38309df194
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1
Host: medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Mon, 12 Dec 2022 19:16:30 GMT
Server: Apache
Location: https://medi-buy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Content-Length: 414
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4585
Expires: Mon, 12 Dec 2022 20:32:56 GMT
Date: Mon, 12 Dec 2022 19:16:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5331
Expires: Mon, 12 Dec 2022 20:45:22 GMT
Date: Mon, 12 Dec 2022 19:16:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 12 Dec 2022 19:08:38 GMT
content-type: application/json
age: 473
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dbd022fec0a71226daaf29b7563a8896
c37d14dc7b3849a4bb815fa325fb5e70fae54039
22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8587
Expires: Mon, 12 Dec 2022 21:39:38 GMT
Date: Mon, 12 Dec 2022 19:16:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RMNx+Ge/8rkdzPCOqbTkyJbmVq3XtIYIVLhqAtG5KNEhLTTWNVJntAutZirQgdLYHelTLKv8WIs=
x-amz-request-id: MJ0SY11H691BGBBE
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 12 Dec 2022 18:49:43 GMT
age: 1608
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
medi-buy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
213.133.105.76301 Moved Permanently 418 B URL HTTP/2 medi-buy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c7e2b5004a03e581a5a8d7bea4fc8f6a
bb0e2462d40eda19747a6de8caf9bac4e38309b6
eb1f2de51fb8df60ac0baa9b895d4ae2cb29b1a7b748d4d7fb39279ae7f1c3d7
Analyzer Verdict Alert fortinet Phishing
GET /mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1
Host: medi-buy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
location: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
cache-control: max-age=2592000
expires: Wed, 11 Jan 2023 19:16:31 GMT
content-length: 418
content-type: text/html; charset=iso-8859-1
date: Mon, 12 Dec 2022 19:16:31 GMT
server: Apache
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 19:16:31 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
213.133.105.76200 OK 64 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Hash 81fce090d1864ae9e7bf8fa03fa82a28
bdb8ba3b071d97aeee30278bc8a3c05e4ebbc418
19d8bd08842b87328958345941b731824ad1f2ab89292b7049dc5dcc378a8e5c
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 64437
accept-ranges: bytes
server: Apache
x-original-content-length: 448307
vary: Accept-Encoding
content-encoding: gzip
etag: W/"PSA-aj-IVBjQ8B2-g"
expires: Wed, 11 Jan 2023 18:09:39 GMT
cache-control: max-age=2587987, public
date: Mon, 12 Dec 2022 19:16:31 GMT
x-content-type-options: nosniff
content-type: text/css
X-Firefox-Spdy: h2
www.medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
213.133.105.76200 OK 7.7 kB URL HTTP/2 www.medibuy.de/media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 145 x 75, 8-bit/color RGBA, non-interlaced\012- data
Hash 5b4f85e28897cbcab62d129e51104eab
28a7e923047697db3ae446ce5a51866c2355cf4e
8a382b94b3e401ae4dffb6e8d9e676d2efc3f5020bd1a09be086f3bd6cce75de
GET /media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 7720
last-modified: Wed, 17 Aug 2022 14:02:53 GMT
accept-ranges: bytes
expires: Wed, 11 Jan 2023 19:15:52 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-W0-F4oiXy8"
date: Mon, 12 Dec 2022 19:16:31 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/bundles/storefront/assets/illustration/404_error.svg?166990692510264
213.133.105.76200 OK 10 kB URL HTTP/2 www.medibuy.de/bundles/storefront/assets/illustration/404_error.svg?166990692510264
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10264), with no line terminators
Hash 09cc03d27a1bec1834fc2557c8756de6
b99d2c4e2e65fa4a6e67a2120cc003397641b6bb
0f7438ab906cd5e913d0672ede6a7e50a4b33052522152411a83db5fd75077e1
GET /bundles/storefront/assets/illustration/404_error.svg?166990692510264 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 10264
cache-control: max-age=2592000, public, s-maxage=10
expires: Wed, 11 Jan 2023 19:16:31 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Mon, 12 Dec 2022 19:16:31 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
213.133.105.76200 OK 3.4 kB URL HTTP/2 www.medibuy.de/thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash acfea59e8cd875cd024cfbf3d19dd41b
69598eac7549445f211e070d2345f0d9ba676390
e4aa7abfdf0141b057516bf9bddd14be8651a0ae9fe6fc05a723240fd5a8e19a
GET /thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 3411
last-modified: Wed, 16 Mar 2022 09:39:22 GMT
accept-ranges: bytes
expires: Wed, 11 Jan 2023 18:09:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-rP6lnozYdc"
date: Mon, 12 Dec 2022 19:16:31 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/media/c7/93/b8/1647424094/rechnung.png
213.133.105.76200 OK 3.8 kB URL HTTP/2 www.medibuy.de/media/c7/93/b8/1647424094/rechnung.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Hash 8db2ae36a06c30c951bc5b07d7bc9148
8a309d77ae76de9ada1ba397dddb42b19b10d365
066098bde82e26620fd48cae563e63c82300403f1471d3b1daa3423032874855
GET /media/c7/93/b8/1647424094/rechnung.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 3769
last-modified: Wed, 16 Mar 2022 09:48:14 GMT
accept-ranges: bytes
expires: Wed, 11 Jan 2023 18:09:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-jbKuNqBsMM"
date: Mon, 12 Dec 2022 19:16:31 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/media/66/fd/63/1647424374/visa_mastercard.png
213.133.105.76200 OK 5.0 kB URL HTTP/2 www.medibuy.de/media/66/fd/63/1647424374/visa_mastercard.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 380 x 180, 8-bit colormap, non-interlaced\012- data
Hash b436b228c185dd1694ee7dc90276a241
16f6d028dcb2ceed023e582620dc6b05792b9e53
00fe369484d1f2ffdcb4e94429c9f197b69ebd3baa6b1de2136b19ffc959f0b7
GET /media/66/fd/63/1647424374/visa_mastercard.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 4999
last-modified: Wed, 16 Mar 2022 09:52:54 GMT
accept-ranges: bytes
expires: Wed, 11 Jan 2023 18:09:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-tDayKMGF3R"
date: Mon, 12 Dec 2022 19:16:31 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/media/0b/db/27/1647424306/PayPal.png
213.133.105.76200 OK 1.2 kB URL HTTP/2 www.medibuy.de/media/0b/db/27/1647424306/PayPal.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 52 x 13, 8-bit/color RGBA, non-interlaced\012- data
Hash 10e74d7f9c80fa575a82d281d59b07d7
ab28ead6cfd04169bcbb9abe0b72cc6114fdcd04
87c23da20335fef912b5f73054479da28932b7150964dd00f04621f7d66cb88b
GET /media/0b/db/27/1647424306/PayPal.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 1209
last-modified: Wed, 16 Mar 2022 09:51:46 GMT
accept-ranges: bytes
expires: Wed, 11 Jan 2023 18:09:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-EOdNf5yA-l"
date: Mon, 12 Dec 2022 19:16:31 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 12 Dec 2022 18:33:17 GMT
age: 2594
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.medibuy.de/media/2d/d3/21/1647427612/UPS.svg
213.133.105.76200 OK 9.8 kB URL HTTP/2 www.medibuy.de/media/2d/d3/21/1647427612/UPS.svg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9839), with no line terminators
Hash 7d431787d0670bbfed25042f31765950
7806b1cbd22e59454e0db311a57a0dc6f4c95044
be5355d455d0f806217d793bf05c06583a7e8fae0868f5ce5234dfc9a742c7df
GET /media/2d/d3/21/1647427612/UPS.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:46:52 GMT
accept-ranges: bytes
content-length: 9839
cache-control: max-age=2592000, public
expires: Wed, 11 Jan 2023 19:16:31 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Mon, 12 Dec 2022 19:16:31 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/de/61/51/1647427683/DPD.svg
213.133.105.76200 OK 1.8 kB URL HTTP/2 www.medibuy.de/media/de/61/51/1647427683/DPD.svg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1784), with no line terminators
Hash dd28c0a5daef8ea0fa5b4fdfb922e642
6835ab6acdc420dd3cfcc5bc65db9c68e9a1e3c7
8234e24e56d28f50892e97f85b54c48ef8da0605a59dd5e82de53112ff4117ed
GET /media/de/61/51/1647427683/DPD.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:48:03 GMT
accept-ranges: bytes
content-length: 1784
cache-control: max-age=2592000, public
expires: Wed, 11 Jan 2023 19:16:31 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Mon, 12 Dec 2022 19:16:31 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
213.133.105.76200 OK 9.4 kB URL HTTP/2 www.medibuy.de/media/82/e2/a0/1647426572/Hermes.svg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9350), with no line terminators
Hash 5f5624b00ef137c75797afa4cca2ad88
55e72269cfd7e4690830fe00fdffdcae157d5894
166ab49b3471568a0e08af48c9f41a260397eec8032a2b1774d22f2edb830d3c
GET /media/82/e2/a0/1647426572/Hermes.svg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 16 Mar 2022 10:29:32 GMT
accept-ranges: bytes
content-length: 9350
cache-control: max-age=2592000, public
expires: Wed, 11 Jan 2023 19:16:31 GMT
content-security-policy: script-src 'none'
content-type: image/svg+xml
date: Mon, 12 Dec 2022 19:16:31 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/media/90/e1/80/1647434313/dhl.png
213.133.105.76200 OK 23 kB URL HTTP/2 www.medibuy.de/media/90/e1/80/1647434313/dhl.png
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 892 x 660, 8-bit/color RGBA, non-interlaced\012- data
Hash f701ba545c40d9022dc97668c7400a43
91c4cad7ae63f5f751dff1bc0a2ebede2e64d908
f97e17aa330ea80f47c7f90e46af5cbea114e31d835d4bb39956a8ff2379e9f6
GET /media/90/e1/80/1647434313/dhl.png HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 23109
last-modified: Wed, 16 Mar 2022 12:38:33 GMT
accept-ranges: bytes
expires: Wed, 11 Jan 2023 18:09:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-9wG6VFxA2Q"
date: Mon, 12 Dec 2022 19:16:31 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.medibuy.de/media/0f/55/eb/1647434309/gls.jpg
213.133.105.76200 OK 21 kB URL HTTP/2 www.medibuy.de/media/0f/55/eb/1647434309/gls.jpg
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1168x657, components 3\012- data
Hash ea8c3240f3a929801f0525d005eddc25
ef6b0286016c58e8722cbf64b1e185b61e80486a
bdcbf3e1707aba9169bff1919ff05fe7f06f76ef3b9046f081534b947a041bf9
GET /media/0f/55/eb/1647434309/gls.jpg HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 20730
last-modified: Wed, 16 Mar 2022 12:38:29 GMT
accept-ranges: bytes
expires: Wed, 11 Jan 2023 18:09:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-6owyQPOpKY"
date: Mon, 12 Dec 2022 19:16:31 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
213.133.105.76200 OK 231 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (59042)
Size 231 kB (231005 bytes)
Hash ee2d56d611bc6ee2e4de06764076c649
ddeff7ec512764dcd4315bb5ac7400552926be55
fa449a3b958ebd156bc4962929db24e30b0ebc5ff19331e4fa71dfe97db8d498
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 231005
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
expires: Wed, 11 Jan 2023 19:15:52 GMT
vary: Accept-Encoding
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-RM_47jDH5u"
x-original-content-length: 946899
content-encoding: gzip
date: Mon, 12 Dec 2022 19:16:31 GMT
x-content-type-options: nosniff
content-type: application/javascript
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
213.133.105.76200 OK 100 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 100088, version 1.0\012- data
Size 100 kB (100088 bytes)
Hash 77812e2fead777db0dc806b1eaabc7fd
512526689a4fd677ffca333a9dc1d412ad44caaf
77677cd3d62f53fce403b743c6ab0dfacf6109cfa5f2c511a57b0779222c76de
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 100088
cache-control: max-age=2592000, public, s-maxage=10
expires: Wed, 11 Jan 2023 19:16:31 GMT
content-type: font/woff2
date: Mon, 12 Dec 2022 19:16:31 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
213.133.105.76200 OK 107 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107184, version 1.0\012- data
Size 107 kB (107184 bytes)
Hash 3d011804596fb2ccde4af51830a9a7d5
999e92214edfb5b102919586df4cfe16f7ddaccb
e9bb1331830a18e2504d966f1fa931e711cad726e454722f324d63534cec97d9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107184
cache-control: max-age=2592000, public, s-maxage=10
expires: Wed, 11 Jan 2023 19:16:31 GMT
content-type: font/woff2
date: Mon, 12 Dec 2022 19:16:31 GMT
server: Apache
X-Firefox-Spdy: h2
www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
213.133.105.76200 OK 107 kB URL HTTP/2 www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format (Version 2), TrueType, length 107300, version 1.0\012- data
Size 107 kB (107300 bytes)
Hash 741dc4163a97ffa354979f18802f6ca8
0e4b89a4a2801dd5e25364f439d7bfee47594762
20fd98b18d523471ae687971086817766649ce25f32e438d14711561a95bc9e9
GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107300
cache-control: max-age=2592000, public, s-maxage=10
expires: Wed, 11 Jan 2023 19:16:31 GMT
content-type: font/woff2
date: Mon, 12 Dec 2022 19:16:31 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ee19f96e42a0eca99d00c8d91f977c35
3bf8dbf8b8ce6ea7adadf7bb92cae2f9502fbee9
6d8adcb1494bfe2ca73cd6b77eb57b2d08e07b05eb892fea98a1fde0bfb2ea12
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1439
Cache-Control: max-age=137658
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 19:16:32 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 09:30:50 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a33409f980e81b54f660035dd9c14cfb
8399645bbd14b6a968328c6552b837e3368948a3
9cf6b1845f29636c04e711a6bf1e7937773c6c4522e2ba66dd6c43bfef34b33b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 19:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 367df8ec4cdc053254dabffde0272beb
82911d48811045672346a58540a5f6aec6c633ce
70b816d214bc99ab02ca6f8866f1e26c91b3adc63228bcdf79a9e18a3fce9846
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3669
Cache-Control: max-age=111846
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 19:16:32 GMT
Etag: "639681a1-1d7"
Expires: Wed, 14 Dec 2022 02:20:38 GMT
Last-Modified: Mon, 12 Dec 2022 01:19:29 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
www.medibuy.de/widgets/checkout/info
213.133.105.76200 OK 511 B URL HTTP/2 www.medibuy.de/widgets/checkout/info
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type Unicode text, UTF-8 text, with very long lines (893)
Hash 493a5de4e5ee35b780abd036727f3864
99ab201cb7443a982c8b70945c6e0e64529e69cc
6570e674f01a7fd1efc6e7545379a0a48362799a0e32f9759fa2286786d0ad4a
GET /widgets/checkout/info HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 12 Dec 2022 19:16:32 GMT
x-robots-tag: noindex
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-mod-pagespeed: 1.13.35.2-0
cache-control: no-cache, private, max-age=0, no-cache
vary: Accept-Encoding
content-encoding: br
content-length: 511
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
151.101.65.21200 OK 160 kB URL HTTP/2 www.paypal.com/sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW
IP 151.101.65.21:0
File type ASCII text, with very long lines (65472)
Size 160 kB (159637 bytes)
Hash acd934dc276e355c72e14a55b537ca3a
83735dc344590f0d5dcba0107bec1dda4553f67f
1032496228f199c729c7bc8c994bcdc4860b430e0972807e5d5544a108c8e808
GET /sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE¤cy=EUR&intent=capture&merchant-id=GNSPGCCJR6URW HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-Qv+NPUKY7bKXoHpZguuaFCGvXn/FIiCNnz4SQcdDXjts5K0N' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-Qv+NPUKY7bKXoHpZguuaFCGvXn/FIiCNnz4SQcdDXjts5K0N' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
etag: W/"26f95-g3Ndw0RZDw1dy6AQe+wd2kVT9n8"
p3p: true
paypal-debug-id: f415400a075f8
traceparent: 00-0000000000000000000f415400a075f8-fbb527244fb0ee8e-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 12 Dec 2022 19:16:32 GMT
age: 38
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220053-HHN, cache-bma1660-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1670872592.318702,VS0,VE2
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f415400a075f8-06cbb1faf529c892-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 159637
X-Firefox-Spdy: h2
push.services.mozilla.com/
35.161.148.163101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.161.148.163:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WubfZBPlQeFGNSA4H8CusQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: p6dfucmmZsr1kEuTcwToybhv/Ps=
www.medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
213.133.105.76200 OK 4.6 kB URL HTTP/2 www.medibuy.de/media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
File type PNG image data, 512 x 512, 4-bit colormap, non-interlaced\012- data
Hash 88c734babd964cc8ae1839e9be164ca9
78fc99bde11eb697353244aa8f7ff3297d9bd9cd
63e35c5c2d81ece3ac43436b7ba8642767a01d88064a04c13ac488157532e342
GET /media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000 HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-length: 4599
last-modified: Wed, 02 Mar 2022 13:15:55 GMT
accept-ranges: bytes
expires: Wed, 11 Jan 2023 18:09:52 GMT
cache-control: max-age=2592000, public
etag: W/"PSA-iMc0ur2WTM"
date: Mon, 12 Dec 2022 19:16:32 GMT
x-content-type-options: nosniff
content-type: image/png
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a33409f980e81b54f660035dd9c14cfb
8399645bbd14b6a968328c6552b837e3368948a3
9cf6b1845f29636c04e711a6bf1e7937773c6c4522e2ba66dd6c43bfef34b33b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 19:16:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 12 Dec 2022 18:41:08 GMT
expires: Mon, 12 Dec 2022 20:41:08 GMT
cache-control: public, max-age=7200
age: 2124
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.343&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
151.101.65.21200 OK 4.3 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.343&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false
IP 151.101.65.21:0
File type ASCII text, with very long lines (12084), with no line terminators
Hash da1b94bdea2eb1769e74df6fbd2c1a2e
4c7f6b5318ffd3d36b6b431f4bd113b55d8f14a7
45cc4e008a654e4ef3f3b3eb0ca92f52ade64445039059b5395b11734b033be4
GET /tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.343&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-mtv2CRW/a3xVwaThTdtLHu474vy+SF5XWEueXIL1s49XVF7g' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
paypal-debug-id: f5362993f7b74
traceparent: 00-0000000000000000000f5362993f7b74-a8c7f4212820b56c-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Mon, 12 Dec 2022 19:16:32 GMT
age: 115256
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220059-HHN, cache-bma1660-BMA
x-cache: HIT, HIT
x-cache-hits: 10, 9
x-timer: S1670872593.513323,VS0,VE1
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f5362993f7b74-febe0dd4b4c31262-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4299
X-Firefox-Spdy: h2
www.medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
213.133.105.76204 No Content 0 B URL HTTP/2 www.medibuy.de/_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Content-Length: 175
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1; session-=7883f5ec9491795ba08d7bd7d265e12d; csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Mon, 12 Dec 2022 19:16:32 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: object-src 'none'; script-src 'none'; base-uri 'self';
expires: Mon, 12 Dec 2022 19:16:32 GMT
cache-control: no-cache, private, public
server: Apache
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670872590646&g=0&completeurl=https%3A%2F%2Fwww.medibuy.de%2Fmailster%2F1111%2Fc897f3d024f4a88a28fed9613d4156e1%2FaHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
192.229.221.25200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670872590646&g=0&completeurl=https%3A%2F%2Fwww.medibuy.de%2Fmailster%2F1111%2Fc897f3d024f4a88a28fed9613d4156e1%2FaHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D
IP 192.229.221.25:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670872590646&g=0&completeurl=https%3A%2F%2Fwww.medibuy.de%2Fmailster%2F1111%2Fc897f3d024f4a88a28fed9613d4156e1%2FaHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
date: Mon, 12 Dec 2022 19:16:32 GMT
expires: Mon, 12 Dec 2022 19:16:32 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: cb7f3611e55b3
pragma: no-cache
server: ECAcc (lhd/3597)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=187
set-cookie: ts=vreXpYrS%3D1765566992%26vteXpYrS%3D1670874392%26vr%3D07c471131850a461a8b15dd9ffffffff%26vt%3D07c471131850a461a8b15dd9fffffffe; Expires=Fri, 12 Dec 2025 19:16:32 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3D07c471131850a461a8b15dd9ffffffff%26vt%3D07c471131850a461a8b15dd9fffffffe; Expires=Fri, 12 Dec 2025 19:16:32 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-0000000000000000000cb7f3611e55b3-1508bd26479132e2-01
content-length: 42
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7372
Expires: Mon, 12 Dec 2022 21:19:25 GMT
Date: Mon, 12 Dec 2022 19:16:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7372
Expires: Mon, 12 Dec 2022 21:19:25 GMT
Date: Mon, 12 Dec 2022 19:16:33 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7372
Expires: Mon, 12 Dec 2022 21:19:25 GMT
Date: Mon, 12 Dec 2022 19:16:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9f8d3e3c9e5d2ed74c3894b4825fcc2f
6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da
9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5619
x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAEMPFCSIAMF4uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: kbfjvh64NjCUE-e-3z7W58vyJMisRwERUV_W99jn3vrErY4bF1SFsg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:59:55 GMT
etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da"
content-type: image/jpeg
age: 76598
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45e0c1638ad919bde19731f7987ab064
1e492807c665e6e6b24ec6ce19035fdfc6f23b92
f0d3738ec8406958470c8fd152a02a123d7654c30f974c1df5c4977a380c2d62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10205
x-amzn-requestid: daca166e-fa82-4491-9065-a4629141fd11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c4OQAGLyoAMFQgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63932a66-0551e77243e4a6472b377f9d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 12:30:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: miR7RxPy5ldYudl8lYXWkth-_liryMFY7aZsvNC4mDVtf13qJg0NZA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 18:44:11 GMT
age: 1942
etag: "1e492807c665e6e6b24ec6ce19035fdfc6f23b92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75dd1ecae61b991cd21929deb9244aac
4f14c9f7b36dfa356877251f1e6a0f5936286c4b
3435eda8961bb9954fcf5fd7c957ce58fd7aa4bb9e00525b8f42756adcf341e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6438
x-amzn-requestid: 517b1627-9789-48e8-b5df-106fee878820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENaGN6IAMFoUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d88-28cbd126745e8ab15d937936;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: amWbF9zOStURk7mvKoCOs0babDMecP7hOWzf4Hrn8RGThFiqv-_elg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:59:55 GMT
etag: "4f14c9f7b36dfa356877251f1e6a0f5936286c4b"
content-type: image/jpeg
age: 76598
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38876d760ef06c8471468c474c1e28a7
d43cd03d5eb3e7618b6fb70c935010c2ac92ad32
a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4720
x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuF6SoAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kwweq9Tz-UmF0uP_LKgkPlXwvak8U55ZoBW37FyytkDV0peSujBf5Q==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 22:16:48 GMT
age: 75585
etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9051770b3587c195bea670f8820e8cfe
abf58087f0e345202da088238daea85d177b431b
f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8841
x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMWH7MIAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wk9BI6v5Q6COMKhEiVyGW07a43hO-gddJZdFGb-Miu4LuOa7azKqyQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 22:36:02 GMT
age: 74431
etag: "abf58087f0e345202da088238daea85d177b431b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2020df3404a4b7c3e142af4a1330b848
2fe69b52fe03128e86550bf08474ecac82682384
37a52c158d5cfdf3589e19163cf446c02ce1466f444656080b02da82d2bcefae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6311
x-amzn-requestid: 46ccaee0-bde8-4be6-9dc8-46e3ae356dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8xUYH10oAMF8Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394fc1b-2440251f06cb950a57489555;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UU3eyJXDqth6F65_913HL9lqA3qZHfGExAV89BRzHpQho5wZbQRTmw==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:38:41 GMT
age: 77872
etag: "2fe69b52fe03128e86550bf08474ecac82682384"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
213.133.105.76404 Not Found 0 B URL HTTP/2 www.medibuy.de/mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP 213.133.105.76:0
ASN #24940 Hetzner Online GmbH
GET /mailster/1111/c897f3d024f4a88a28fed9613d4156e1/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1
Host: www.medibuy.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: timezone=UTC; _gcl_au=1.1.484117248.1670872578; _ga=GA1.2.1385987375.1670872578; _gid=GA1.2.1458102187.1670872578; _gat_UA-224940953-1=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 404 Not Found
date: Mon, 12 Dec 2022 19:16:31 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,POST,PUT,PATCH,DELETE
access-control-allow-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
access-control-expose-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
sw-language-id: 2fbb5fe2e29a4d70aa5854ce7ce3e20b
sw-context-token: 4pTVr59HijE6yePEUSNFwAu8i2hdfA3p
x-frame-options: deny
set-cookie: session-=7883f5ec9491795ba08d7bd7d265e12d; path=/; secure; HttpOnly; SameSite=lax
session-=7883f5ec9491795ba08d7bd7d265e12d; path=/; secure; httponly; samesite=lax
csrf[frontend.store-api.proxy]=4d5b028ebd4b14c9bbd60d41ac94.G2OpY70rrqQCZ50NAAn14Rgdun6DsL78VcD78tlGWxs.KgHYAuVZ3d1zFuVfaF2ghHJ_1jTb_IarDY2u3553LSNjFPsr7RjFw1sE2A; path=/; secure; httponly; samesite=lax
cache-control: no-cache, private, public
content-type: text/html; charset=UTF-8
server: Apache
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
151.101.65.21200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP 151.101.65.21:0
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.medibuy.de/
Origin: https://www.medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f24344716a2ac
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 13 Dec 2022 04:02:28 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Tue, 12 Dec 2023 19:16:32 GMT; Secure
x-pp-s=eyJ0IjoiMTY3MDg3MjU5MjkyNyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Thu, 15 Dec 2022 19:16:32 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg15.slc; Path=/; Domain=paypal.com; Expires=Mon, 12 Dec 2022 19:46:32 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765566992%26vteXpYrS%3D1670874392%26vr%3D07c472031850a7a0a6fed075fef97595%26vt%3D07c472031850a7a0a6fed075fef97594%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Thu, 11 Dec 2025 19:16:32 GMT; HttpOnly; Secure
ts_c=vr%3D07c472031850a7a0a6fed075fef97595%26vt%3D07c472031850a7a0a6fed075fef97594; Path=/; Domain=paypal.com; Expires=Thu, 11 Dec 2025 19:16:32 GMT; Secure
traceparent: 00-0000000000000000000f24344716a2ac-8dbfe36209bbe872-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Mon, 12 Dec 2022 19:16:33 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220055-HHN, cache-bma1660-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670872593.817433,VS0,VE209
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
151.101.65.21200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP 151.101.65.21:0
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1456
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
etag: W/W/"3ee-JcS3IGUqGSJlYyNtKUwbvA57D/0"
paypal-debug-id: f243447b507bd
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Tue, 12 Dec 2023 19:16:33 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 13 Dec 2022 04:02:29 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Thu, 15 Dec 2022 19:16:32 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3MDg3MjU5MzE1NSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg13.slc; Path=/; Domain=paypal.com; Expires=Mon, 12 Dec 2022 19:46:33 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1765566993%26vteXpYrS%3D1670874393%26vr%3D07c472e61850ad04b270f55dff138ea4%26vt%3D07c472e61850ad04b270f55dff138ea3%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Thu, 11 Dec 2025 19:16:33 GMT; HttpOnly; Secure
ts_c=vr%3D07c472e61850ad04b270f55dff138ea4%26vt%3D07c472e61850ad04b270f55dff138ea3; Path=/; Domain=paypal.com; Expires=Thu, 11 Dec 2025 19:16:33 GMT; Secure
traceparent: 00-0000000000000000000f243447b507bd-32a69a938ea4f10c-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Mon, 12 Dec 2022 19:16:33 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220048-HHN, cache-bma1660-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670872593.044138,VS0,VE198
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2