urlquery - report: dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
dev-www-online-dkb-de.pantheonsite.io (11)	0	2022-11-30 16:20:51 UTC	2022-12-02 20:30:33 UTC	23.185.0.1	Unknown ranking
firefox.settings.services.mozilla.com (2)	867	2020-05-25 20:06:39 UTC	2022-12-08 17:12:32 UTC	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-12-08 17:21:04 UTC	34.160.144.191
ocsp.globalsign.com (1)	2075	2012-05-25 06:20:55 UTC	2022-12-08 17:15:03 UTC	104.18.20.226
ocsp.pki.goog (2)	175	2017-06-14 07:23:31 UTC	2022-12-08 17:12:01 UTC	142.250.74.131
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-12-08 15:50:00 UTC	34.120.237.76
fonts.googleapis.com (1)	8877	2012-05-23 12:41:44 UTC	2022-12-08 17:12:12 UTC	142.250.74.106
r3.o.lencr.org (5)	344	2020-12-02 08:52:13 UTC	2022-12-08 17:12:06 UTC	23.33.119.27
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-12-08 17:14:01 UTC	34.117.237.239
cdn.jsdelivr.net (1)	439	2012-09-30 00:15:09 UTC	2022-12-08 17:12:17 UTC	151.101.65.229
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2022-12-08 17:15:52 UTC	93.184.220.29

Scan Date	Severity	Indicator	Comment
2022-12-09	2	dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26 (...)	Phishing
2022-12-09	2	dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26 (...)	Phishing

Date	UQ / IDS / BL	URL	IP
2023-02-04 01:49:16 +0000	0 - 0 - 5	dev-itausecurelogin-py-43.pantheonsite.io/	23.185.0.1
2023-02-04 01:48:56 +0000	0 - 0 - 5	dev-itaupysecureo.pantheonsite.io/	23.185.0.1
2023-02-03 17:42:44 +0000	0 - 0 - 2	dev-mybpostale.pantheonsite.io/web/	23.185.0.1
2023-02-03 12:48:46 +0000	15 - 0 - 4	dev-seguridadbancolombia-co.pantheonsite.io/	23.185.0.1
2023-02-03 02:15:24 +0000	0 - 0 - 3	dev-itausecurelogin-py-26.pantheonsite.io/	23.185.0.1

Date	UQ / IDS / BL	URL	IP
2023-02-05 01:41:39 +0000	0 - 0 - 6	borbabeats.github.io/netflix-clone	185.199.108.153
2023-02-05 01:37:39 +0000	2 - 0 - 4	appeal-status-100255663.web.app/	199.36.158.100
2023-02-05 01:37:14 +0000	2 - 0 - 4	appeal-status-100255663.firebaseapp.com/	199.36.158.100
2023-02-05 01:37:00 +0000	0 - 0 - 3	facebook-marketplace-item2462699.web.app/	199.36.158.100
2023-02-05 01:36:38 +0000	0 - 2 - 4	accounts-centre-42993.firebaseapp.com/	199.36.158.100

Date	UQ / IDS / BL	URL	IP
2022-12-09 17:46:12 +0000	0 - 0 - 2	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1
2022-12-09 15:36:06 +0000	19 - 0 - 5	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1
2022-12-09 15:35:58 +0000	17 - 0 - 3	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1
2022-12-09 12:36:11 +0000	19 - 0 - 5	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1
2022-12-09 12:36:10 +0000	17 - 0 - 3	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1

Date	UQ / IDS / BL	URL	IP
2022-12-09 15:36:06 +0000	19 - 0 - 5	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1
2022-12-09 15:35:58 +0000	17 - 0 - 3	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1
2022-12-09 12:36:11 +0000	19 - 0 - 5	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1
2022-12-09 12:36:10 +0000	17 - 0 - 3	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1
2022-12-09 11:57:26 +0000	19 - 0 - 5	dev-www-online-dkb-de.pantheonsite.io/_files/ (...)	23.185.0.1

Request	Response
GET /_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/login. (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a 23.185.0.1 HTTP/1.1 301 Moved Permanently Content-Type: text/html Connection: keep-alive Content-Length: 162 Location: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Server: nginx X-Pantheon-Styx-Hostname: styx-fe1fe2-d-65d5fd69f6-qncws X-Styx-Req-Id: 81f385f2-77b6-11ed-9917-0283fa56a928 Cache-Control: public, max-age=86400 Date: Fri, 09 Dec 2022 11:57:16 GMT X-Served-By: cache-ams12765-AMS, cache-bma1660-BMA X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1670587037.640161,VS0,VE97 Vary: Cookie, Cookie X-Robots-Tag: noindex Age: 910 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators Size: 162 Md5: 4f8e702cc244ec5d4de32740c0ecbd97 Sha1: 3adb1f02d5b6054de0046e367c1d687b6cdf7aff Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a Alerts: urlquery: - Phishing - Deutsche Kreditbank - Phishing - Deutsche Kreditbank Blocklists: - fortinet: Phishing
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 89c5c0e2d6890798644174a8e31976aec03a1b3deb03812afbb520e5ed68f522 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "89C5C0E2D6890798644174A8E31976AEC03A1B3DEB03812AFBB520E5ED68F522" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5645 Expires: Fri, 09 Dec 2022 13:31:21 GMT Date: Fri, 09 Dec 2022 11:57:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7181eff9c60e83eb0004ece591e47dca Sha1: 0fd8cd0c9d10b0547938982e57d2c43e2d98679f Sha256: 89c5c0e2d6890798644174a8e31976aec03a1b3deb03812afbb520e5ed68f522
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=5413 Expires: Fri, 09 Dec 2022 13:27:29 GMT Date: Fri, 09 Dec 2022 11:57:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 388f6fea5bafa378266622b72311a6ee Sha1: 447f102dc12172ce1ba44c5e94e1d7bb49d43372 Sha256: a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA" Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=14799 Expires: Fri, 09 Dec 2022 16:03:55 GMT Date: Fri, 09 Dec 2022 11:57:16 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 4ee537977be9c03702f8ffe0025bf1fe Sha1: 21637881c4aa34c4add703f8bff4eff573159f45 Sha256: 4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Fri, 09 Dec 2022 11:08:18 GMT age: 2938 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 14cd9a0afb6ba9a763651d5112760d1e Sha1: 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 34.160.144.191 HASH: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0 34.160.144.191 HTTP/2 200 OK content-type: binary/octet-stream x-amz-id-2: tYJkZUvRUb0iRmsVB7AQ6OAimqGL6rNY0JfalbnQBWj+KPd9HLvDBYeDJ3cmPXLxYcQ5TQZQRA/syNLA3mL67A== x-amz-request-id: S12000ZME92HEFM7 content-disposition: attachment accept-ranges: bytes server: AmazonS3 content-length: 5348 via: 1.1 google date: Fri, 09 Dec 2022 11:48:19 GMT age: 537 last-modified: Wed, 30 Nov 2022 10:06:34 GMT etag: "53341dea33f4f3d9b4966f80589f429a" cache-control: public,max-age=3600 alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 53341dea33f4f3d9b4966f80589f429a Sha1: 20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Fri, 09 Dec 2022 11:57:17 GMT content-length: 12 access-control-expose-headers: content-type access-control-allow-credentials: true vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /_files/web/layout/img/aside_1.png HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/layout (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: 69d23c696ace7e88ea64474450d8cc42f27fe298e268c60a4c0f9e4d375a45c3 23.185.0.1 HTTP/2 200 OK content-type: image/png etag: "63864531-f03" expires: Fri, 09 Dec 2022 11:57:16 GMT last-modified: Tue, 29 Nov 2022 17:45:21 GMT server: nginx strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-d-65d5fd69f6-qncws x-styx-req-id: a0b30d10-77b8-11ed-9917-0283fa56a928 cache-control: no-cache, must-revalidate date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams12743-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587037.197595,VS0,VE28 x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish content-length: 3843 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 190 x 355, 8-bit colormap, non-interlaced\012- data Size: 3843 Md5: 751069444736dae231c3e84bd1128b8a Sha1: 5b3974fad05a913c2e42faf07e052ac8593840eb Sha256: 69d23c696ace7e88ea64474450d8cc42f27fe298e268c60a4c0f9e4d375a45c3 Alerts: urlquery: - Phishing - Deutsche Kreditbank - Phishing - Deutsche Kreditbank
GET /_files/web/layout/img/search.png HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/layout (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: e78a7546181abd93801044ffa526b2716da93bfdf3062f68ebf51fb7327dd6ef 23.185.0.1 HTTP/2 200 OK content-type: image/png etag: "63864531-28a" expires: Fri, 09 Dec 2022 11:57:16 GMT last-modified: Tue, 29 Nov 2022 17:45:21 GMT server: nginx strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-c-559c4776c7-vnphx x-styx-req-id: a0b2d1a2-77b8-11ed-8f07-7ecdf34ba12b cache-control: no-cache, must-revalidate date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams12779-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587037.197615,VS0,VE29 x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish content-length: 650 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 300 x 40, 8-bit colormap, non-interlaced\012- data Size: 650 Md5: 73357923a9b80d3cf8eb2fed2d03ded1 Sha1: b10df5d5ac3fab3261c7f53441faeb6d7dbc3f60 Sha256: e78a7546181abd93801044ffa526b2716da93bfdf3062f68ebf51fb7327dd6ef Alerts: urlquery: - Phishing - Deutsche Kreditbank - Phishing - Deutsche Kreditbank
GET /_files/web/layout/img/logo.png HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/layout (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: 14b35e728a11ebaa486217f6c05103335902d1bdcbe2e7640a6df44f8b7f936a 23.185.0.1 HTTP/2 200 OK content-type: image/png etag: "63864531-405" expires: Fri, 09 Dec 2022 11:57:16 GMT last-modified: Tue, 29 Nov 2022 17:45:21 GMT server: nginx strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-d-65d5fd69f6-qncws x-styx-req-id: a0b34b38-77b8-11ed-9917-0283fa56a928 cache-control: no-cache, must-revalidate date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams21022-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587037.197635,VS0,VE32 x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish content-length: 1029 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 105 x 60, 4-bit colormap, non-interlaced\012- data Size: 1029 Md5: 72f6b978de97104fc108c0f51d0ec357 Sha1: 32a345fb1c3c1f7bcf2e4e5250da0df748f6c36f Sha256: 14b35e728a11ebaa486217f6c05103335902d1bdcbe2e7640a6df44f8b7f936a Alerts: urlquery: - Phishing - Deutsche Kreditbank - Phishing - Deutsche Kreditbank
GET /_files/web/layout/img/footer.png HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/layout (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: 2362595d4adabb5a7119d6ac37ab03d9e39ffc5ed49bd41adfbc0ffddc14b7ed 23.185.0.1 HTTP/2 200 OK content-type: image/png etag: "63864531-3827" expires: Fri, 09 Dec 2022 11:57:16 GMT last-modified: Tue, 29 Nov 2022 17:45:21 GMT server: nginx strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-d-65d5fd69f6-wdtnd x-styx-req-id: a0b3e8e8-77b8-11ed-93d3-e2fd3fce0f4a cache-control: no-cache, must-revalidate date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams12764-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587037.200273,VS0,VE37 x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish content-length: 14375 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 960 x 357, 8-bit colormap, non-interlaced\012- data Size: 14375 Md5: db6a25f5766282c3e6a5cad3a79aaf9d Sha1: e18428ce9c79025973667b3542ca7075fa30c210 Sha256: 2362595d4adabb5a7119d6ac37ab03d9e39ffc5ed49bd41adfbc0ffddc14b7ed Alerts: urlquery: - Phishing - Deutsche Kreditbank - Phishing - Deutsche Kreditbank
GET /_files/web/layout/img/banner_1.png HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/layout (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: 96ecab11ca4a18e2fa96a9b5683187ad779b2762f1ae904ed65aebe0d7247cc2 23.185.0.1 HTTP/2 200 OK content-type: image/png etag: "63864531-22cc" expires: Fri, 09 Dec 2022 11:57:16 GMT last-modified: Tue, 29 Nov 2022 17:45:21 GMT server: nginx strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-d-65d5fd69f6-wdtnd x-styx-req-id: a0b426e1-77b8-11ed-93d3-e2fd3fce0f4a cache-control: no-cache, must-revalidate date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams12775-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587037.197570,VS0,VE40 x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish content-length: 8908 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 120 x 90, 8-bit colormap, non-interlaced\012- data Size: 8908 Md5: c8ee8d128a5e005192a4f659ef174956 Sha1: e1829ca34f1eebdc252a5d5c999171acf4238bed Sha256: 96ecab11ca4a18e2fa96a9b5683187ad779b2762f1ae904ed65aebe0d7247cc2 Alerts: urlquery: - Phishing - Deutsche Kreditbank - Phishing - Deutsche Kreditbank
GET /_files/web/layout/img/keyboard.png HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/layout (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: 09347f6a4e4d4863e0a665b0bff9c9d17a5b022b4fff6ceb185c3dde0f087494 23.185.0.1 HTTP/2 200 OK content-type: image/png etag: "63864531-13b" expires: Fri, 09 Dec 2022 11:57:16 GMT last-modified: Tue, 29 Nov 2022 17:45:21 GMT server: nginx strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-d-65d5fd69f6-qncws x-styx-req-id: a0b314cd-77b8-11ed-9917-0283fa56a928 cache-control: no-cache, must-revalidate date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams21058-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587037.199883,VS0,VE38 x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish content-length: 315 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 26 x 26, 8-bit colormap, non-interlaced\012- data Size: 315 Md5: 5219eaeae32f52069d1a03bfcab1dc05 Sha1: 83651ca949bbf5bee9dfe34af319a76a6846241e Sha256: 09347f6a4e4d4863e0a665b0bff9c9d17a5b022b4fff6ceb185c3dde0f087494 Alerts: urlquery: - Phishing - Deutsche Kreditbank - Phishing - Deutsche Kreditbank
GET /_files/web/layout/img/aside_2.png HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/layout (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: 51dd2d5cd058a7c9eecae574a2896089032ee1e7c35adf3b0a9dfa2549e7fe5d 23.185.0.1 HTTP/2 200 OK content-type: image/png etag: "63864531-8661" expires: Fri, 09 Dec 2022 11:57:16 GMT last-modified: Tue, 29 Nov 2022 17:45:21 GMT server: nginx strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-d-65d5fd69f6-wdtnd x-styx-req-id: a0b327f1-77b8-11ed-93d3-e2fd3fce0f4a cache-control: no-cache, must-revalidate date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams21041-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587037.200175,VS0,VE36 x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish content-length: 34401 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 190 x 768, 8-bit colormap, non-interlaced\012- data Size: 34401 Md5: 24301739ae0a2b846e30c3158b2b646b Sha1: df97b38c8c5963f105757bb23576111e1cfb18d9 Sha256: 51dd2d5cd058a7c9eecae574a2896089032ee1e7c35adf3b0a9dfa2549e7fe5d Alerts: urlquery: - Phishing - Deutsche Kreditbank - Phishing - Deutsche Kreditbank
GET /npm/semantic-ui@2.4.2/dist/semantic.min.css HTTP/1.1 Host: cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: cdn.jsdelivr.net/npm/semantic-ui@2.4.2/dist/semantic.min.css FQDN: cdn.jsdelivr.net IP: 151.101.65.229 HASH: 5c23a30ed76bc6d2a95415f8ef1719cb54ca7997d95812a3fbfe24cb5bedbd37 151.101.65.229 HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * cache-control: public, max-age=31536000, s-maxage=31536000, immutable cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: 2.4.2 x-jsd-version-type: version etag: W/"99738-xBtVnjRc5piOJZyFKbhk0QxxYOQ" content-encoding: gzip accept-ranges: bytes date: Fri, 09 Dec 2022 11:57:17 GMT age: 4253581 x-served-by: cache-fra-eddf8230085-FRA, cache-bma1680-BMA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 content-length: 103066 X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with very long lines (59894) Size: 103066 Md5: 22d93630da3bb8059186d4f3ebbf9cb2 Sha1: 12ae0d8680559ec43285010391dcc2852458486b Sha256: 5c23a30ed76bc6d2a95415f8ef1719cb54ca7997d95812a3fbfe24cb5bedbd37
POST /ca/gsatlasr3dvtlsca2022q1 HTTP/1.1 Host: ocsp.globalsign.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q1 FQDN: ocsp.globalsign.com IP: 104.18.20.226 HASH: 7856e039049b2b5fc8bc93d13b90124cb2d47abfdb07c00818396181f1546b47 104.18.20.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 11:57:17 GMT Transfer-Encoding: chunked Connection: keep-alive Etag: "25B64E29AFE3563AE315CE87FC777DCC883BC298" Expires: Fri, 09 Dec 2022 22:00:00 GMT Last-Modified: Fri, 09 Dec 2022 10:00:00 UTC Cache-Control: s-maxage=3600, public, no-transform, must-revalidate CF-Cache-Status: HIT Age: 3079 Vary: Accept-Encoding Server: cloudflare CF-RAY: 776d8ff72b08b515-OSL --- Additional Info --- Magic: data Size: 1462 Md5: 24308767d6f3990ebca8fc646f8bd436 Sha1: 7d0249a16c8314f2e91b3e16f93653307e300b4e Sha256: 7856e039049b2b5fc8bc93d13b90124cb2d47abfdb07c00818396181f1546b47
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 11:57:17 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: d61883097c47c0fcb4a15cafc5bdbdfc Sha1: 54411aba43093cafd1cb2acea7c2b4c69184611f Sha256: 0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.131 HASH: 0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c 142.250.74.131 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Fri, 09 Dec 2022 11:57:17 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: d61883097c47c0fcb4a15cafc5bdbdfc Sha1: 54411aba43093cafd1cb2acea7c2b4c69184611f Sha256: 0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
GET /_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Sec-Fetch-User: ?1	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/login. (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: 5bdd09bda213a1ac47b4a093d27fae23e5182c8431eaf8c3f9949a298f769ea4 23.185.0.1 HTTP/2 200 OK content-type: text/html; charset-UTF-8;charset=UTF-8 cache-control: no-store, no-cache, must-revalidate expires: Thu, 19 Nov 1981 08:52:00 GMT pragma: no-cache server: nginx set-cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893; expires=Sun, 01-Jan-2023 15:30:36 GMT; Max-Age=2000000; path=/ strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-d-65d5fd69f6-wdtnd x-styx-req-id: a092386c-77b8-11ed-93d3-e2fd3fce0f4a date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams12770-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587037.982160,VS0,VE30 vary: Cookie, Cookie x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish X-Firefox-Spdy: h2 --- Additional Info --- Magic: data Size: 232274 Md5: 629e6fa31be829c63a646c8967acd47b Sha1: 146a044f4ee4253d236b4de00fe5f7ca09f3caf5 Sha256: 5bdd09bda213a1ac47b4a093d27fae23e5182c8431eaf8c3f9949a298f769ea4 Alerts: Blocklists: - fortinet: Phishing
GET /_files/web/layout/img/ico.png HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/layout (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: 32f59da3dd8671278503227b34a313174baf91bcd5b751f28991bb50b78ee258 23.185.0.1 HTTP/2 200 OK content-type: image/png etag: "63864531-163" expires: Fri, 09 Dec 2022 11:57:16 GMT last-modified: Tue, 29 Nov 2022 17:45:21 GMT server: nginx strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-d-65d5fd69f6-wdtnd x-styx-req-id: a0e8fbb3-77b8-11ed-93d3-e2fd3fce0f4a cache-control: no-cache, must-revalidate date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams12778-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587038.552886,VS0,VE27 x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish content-length: 355 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data Size: 355 Md5: 3debee3ed5f77bf51f17b20b6ef163ca Sha1: 75f23e4c6d17c1b15e3457b6cf19d859c44b312d Sha256: 32f59da3dd8671278503227b34a313174baf91bcd5b751f28991bb50b78ee258 Alerts: urlquery: - Phishing - Deutsche Kreditbank - Phishing - Deutsche Kreditbank
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 35.241.9.150 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 35.241.9.150 HTTP/2 200 OK content-type: application/json access-control-allow-origin: * access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 329 via: 1.1 google date: Fri, 09 Dec 2022 11:07:55 GMT age: 2962 last-modified: Fri, 25 Mar 2022 17:45:46 GMT etag: "1648230346554" cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 4d8a5fa2362fd0910babd6d128d850d4460829468eb23d34ee5ee6eaa42d5a38 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 6295 Cache-Control: max-age=168873 Date: Fri, 09 Dec 2022 11:57:17 GMT Etag: "6392faaf-1d7" Expires: Sun, 11 Dec 2022 10:51:50 GMT Last-Modified: Fri, 09 Dec 2022 09:06:55 GMT Server: ECS (ska/F71B) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: e6be4d2155028ffff5d01ab6e7edf6da Sha1: 07172071b5cf43c4cd7d7930b4ad8518ec1e32e9 Sha256: 4d8a5fa2362fd0910babd6d128d850d4460829468eb23d34ee5ee6eaa42d5a38
GET /_files/web/layout/css/main.css HTTP/1.1 Host: dev-www-online-dkb-de.pantheonsite.io User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: dev-www-online-dkb-de.pantheonsite.io/_files/web/layout (...) FQDN: dev-www-online-dkb-de.pantheonsite.io IP: 23.185.0.1 HASH: dda9b96398b61fb3a9f3aa81c6af99333de26849f135cdd85e9950cc649b7d00 23.185.0.1 HTTP/2 200 OK content-type: text/css content-encoding: gzip etag: W/"63864531-311c" expires: Fri, 09 Dec 2022 11:57:16 GMT last-modified: Tue, 29 Nov 2022 17:45:21 GMT server: nginx strict-transport-security: max-age=300 x-pantheon-styx-hostname: styx-fe1fe2-c-559c4776c7-vnphx x-styx-req-id: a0b28926-77b8-11ed-8f07-7ecdf34ba12b cache-control: no-cache, must-revalidate date: Fri, 09 Dec 2022 11:57:17 GMT x-served-by: cache-ams12746-AMS, cache-bma1683-BMA x-cache: MISS, MISS x-cache-hits: 0, 0 x-timer: S1670587037.194231,VS0,VE55 vary: Accept-Encoding x-robots-tag: noindex age: 0 accept-ranges: bytes via: 1.1 varnish, 1.1 varnish X-Firefox-Spdy: h2 --- Additional Info --- Magic: Unicode text, UTF-8 text, with very long lines (12270) Size: 2941 Md5: b329b6ed338179c0e63d16078bdfc8f0 Sha1: d545fd30fa887dcd38755368b564c64f92775b59 Sha256: dda9b96398b61fb3a9f3aa81c6af99333de26849f135cdd85e9950cc649b7d00
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6540 Expires: Fri, 09 Dec 2022 13:46:19 GMT Date: Fri, 09 Dec 2022 11:57:19 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.33.119.27 HASH: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38 23.33.119.27 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=6540 Expires: Fri, 09 Dec 2022 13:46:19 GMT Date: Fri, 09 Dec 2022 11:57:19 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: 7b8c1870f03a90aac6370fc69516f95f Sha1: 1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F29d00d08-ec53-4c7b-a2ef-5901b64cdefd.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7557 x-amzn-requestid: 09204b5e-8af5-4d4b-8186-628443866e0f x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ctlz5EISoAMFdWw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638ee9b2-357cd4f921c592e1319098dd;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 07:05:22 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 3KZwQ5HqXa_-tUyDHA5m-65OprogFpFgbbKpEJ65k-Yy3lwoCg8M5w== via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Dec 2022 07:13:15 GMT age: 17044 etag: "cde4c7fa0145d3645af17e34c83c63c08f76a076" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7557 Md5: 5de5d319f43d9c9c641419d96655541f Sha1: cde4c7fa0145d3645af17e34c83c63c08f76a076 Sha256: fdb114eb142f035c7a54195d16af51b5b423642c312f4bccc0f407d8fcc245aa
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7897 x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cwVM_F51IAMFunw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0 x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: oV7bB5Tek01MFi9x2tr_Wix13-UGlQPIt042XM0ALNUvVFYnu5DRcg== via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Dec 2022 03:38:26 GMT age: 29933 etag: "7558222788f06623ddae6e883413e38e1146281e" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7897 Md5: 8c3214044657f3b876d1f1848bca5684 Sha1: 7558222788f06623ddae6e883413e38e1146281e Sha256: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2654f7a6-bd8b-4c13-9c46-9b7582ba979a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 4099a2fb6ddc4feaa30f357a180d64aeb7c9fc73f115fc762d5fe5c221d2e89e 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5169 x-amzn-requestid: 277a1b04-4e19-4313-8aac-5f9ab9076305 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ctEdkFGrIAMFvHg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638eb456-5b21edd57297665012d536cc;Sampled=0 x-amzn-remapped-date: Tue, 06 Dec 2022 03:17:42 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: swNGUcNy2i0w9UGe-EJhwslE01TzTC3rrDhLhVVxHyhWMGSC1uq0mA== via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Dec 2022 04:46:15 GMT age: 25864 etag: "ebb97e5b97f394e8c67098f55581d5329ce819a2" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5169 Md5: 06514ce96ae21cb01f526a5febdcbeb4 Sha1: ebb97e5b97f394e8c67098f55581d5329ce819a2 Sha256: 4099a2fb6ddc4feaa30f357a180d64aeb7c9fc73f115fc762d5fe5c221d2e89e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6578 x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cw4beGG7oAMF8hA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0 x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: nXaZ1pazAGWMI9GFYZjGlvVVIb8wX6feD0O8VpzjsL8F8l3mFmydAw== via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Dec 2022 07:13:59 GMT age: 17000 etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6578 Md5: 8546542f00ea29ef4df6ab8d3c7c2164 Sha1: 5c8ffe91490006a9890188b53f875568c2b6bd8f Sha256: 7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2dbe127a-1d23-4c1b-b13e-cd024e5fd5de.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: bfe88cb97ccec5af627853d0bbc02f4799c4b8a25a995c8578365cb5a2914d6a 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8626 x-amzn-requestid: c5f3e36b-87f1-4938-819c-7b1a6ec6bfeb x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: cy4BXHJ0oAMFaKQ= x-content-type-options: nosniff x-amzn-trace-id: Root=1-639106d5-15635f9a10d25d8c1d702bbd;Sampled=0 x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:13 GMT x-amz-cf-pop: SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: msEEgIkOwqaeISHVzXfHYlry5WVRuBjTqDbyQDmvMFBB8JT9DVuFAA== via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 22:06:54 GMT age: 49825 etag: "86cd1428b2fd21ccb9d80c7f6be4d1e6221e97ef" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8626 Md5: d2d14fc1b5d2e6d6f4751a2fe741b990 Sha1: 86cd1428b2fd21ccb9d80c7f6be4d1e6221e97ef Sha256: bfe88cb97ccec5af627853d0bbc02f4799c4b8a25a995c8578365cb5a2914d6a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 5188 x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: ck2-5G9joAMFlPA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0 x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT x-amz-cf-pop: SEA19-C2 x-cache: Hit from cloudfront x-amz-cf-id: dGxzuQ6zj6wXQbkBuKBnOKxwKJDHUyGoi7PgcugcpdX4QYruNiFxsQ== via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google date: Thu, 08 Dec 2022 21:51:24 GMT age: 50755 etag: "8fbff7725c842d70e047c635a725723a9dc9c55a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 5188 Md5: fba9a3854df65740512f96efe7442e58 Sha1: 8fbff7725c842d70e047c635a725723a9dc9c55a Sha256: 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /css?family=Lato:400,700,400italic,700italic&subset=latin HTTP/1.1 Host: fonts.googleapis.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: https://cdn.jsdelivr.net/ Sec-Fetch-Dest: style Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: fonts.googleapis.com/css?family=Lato:400,700,400italic, (...) FQDN: fonts.googleapis.com IP: 142.250.74.106 142.250.74.106 HTTP/2 200 OK content-type: text/css; charset=utf-8 access-control-allow-origin: * timing-allow-origin: * link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin strict-transport-security: max-age=31536000 expires: Fri, 09 Dec 2022 11:57:17 GMT date: Fri, 09 Dec 2022 11:57:17 GMT cache-control: private, max-age=86400 cross-origin-opener-policy: same-origin-allow-popups cross-origin-resource-policy: cross-origin content-encoding: gzip server: ESF x-xss-protection: 0 x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=5413 

                                        
                                            
Expires: Fri, 09 Dec 2022 13:27:29 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 11:57:16 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    388f6fea5bafa378266622b72311a6ee

                                                Sha1:   447f102dc12172ce1ba44c5e94e1d7bb49d43372

                                                Sha256: a597afb4d4f7f3c82f0f2857322226fc69dc92e099bfd0605f7a0cd562be9d21

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 939 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Fri, 09 Dec 2022 11:08:18 GMT 

                                        
                                            
age: 2938 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    14cd9a0afb6ba9a763651d5112760d1e

                                                Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa

                                                Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Fri, 09 Dec 2022 11:57:17 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
access-control-expose-headers: content-type 

                                        
                                            
access-control-allow-credentials: true 

                                        
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /npm/semantic-ui@2.4.2/dist/semantic.min.css HTTP/1.1 

                                        
                                            
Host: cdn.jsdelivr.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://dev-www-online-dkb-de.pantheonsite.io/ 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         151.101.65.229

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css; charset=utf-8

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: * 

                                        
                                            
timing-allow-origin: * 

                                        
                                            
cache-control: public, max-age=31536000, s-maxage=31536000, immutable 

                                        
                                            
cross-origin-resource-policy: cross-origin 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
strict-transport-security: max-age=31536000; includeSubDomains; preload 

                                        
                                            
x-jsd-version: 2.4.2 

                                        
                                            
x-jsd-version-type: version 

                                        
                                            
etag: W/"99738-xBtVnjRc5piOJZyFKbhk0QxxYOQ" 

                                        
                                            
content-encoding: gzip 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
date: Fri, 09 Dec 2022 11:57:17 GMT 

                                        
                                            
age: 4253581 

                                        
                                            
x-served-by: cache-fra-eddf8230085-FRA, cache-bma1680-BMA 

                                        
                                            
x-cache: HIT, HIT 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400 

                                        
                                            
content-length: 103066 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (59894)

                                                Size:   103066

                                                Md5:    22d93630da3bb8059186d4f3ebbf9cb2

                                                Sha1:   12ae0d8680559ec43285010391dcc2852458486b

                                                Sha256: 5c23a30ed76bc6d2a95415f8ef1719cb54ca7997d95812a3fbfe24cb5bedbd37

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.131

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Fri, 09 Dec 2022 11:57:17 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    d61883097c47c0fcb4a15cafc5bdbdfc

                                                Sha1:   54411aba43093cafd1cb2acea7c2b4c69184611f

                                                Sha256: 0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         35.241.9.150

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
access-control-expose-headers: Alert, Cache-Control, Backoff, Content-Length, Content-Type, Last-Modified, ETag, Expires, Retry-After, Pragma 

                                        
                                            
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-length: 329 

                                        
                                            
via: 1.1 google 

                                        
                                            
date: Fri, 09 Dec 2022 11:07:55 GMT 

                                        
                                            
age: 2962 

                                        
                                            
last-modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
etag: "1648230346554" 

                                        
                                            
cache-control: max-age=3600,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET /_files/web/layout/css/main.css HTTP/1.1 

                                        
                                            
Host: dev-www-online-dkb-de.pantheonsite.io

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: https://dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d 

                                        
                                            
Cookie: PHPSESSID=7886dee6ae77540416cc25b9085ad893 

                                        
                                            
Sec-Fetch-Dest: style 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: same-origin 

                                        
                                            
TE: trailers

                                         23.185.0.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/css

                                        

                                        
                                            
content-encoding: gzip 

                                        
                                            
etag: W/"63864531-311c" 

                                        
                                            
expires: Fri, 09 Dec 2022 11:57:16 GMT 

                                        
                                            
last-modified: Tue, 29 Nov 2022 17:45:21 GMT 

                                        
                                            
server: nginx 

                                        
                                            
strict-transport-security: max-age=300 

                                        
                                            
x-pantheon-styx-hostname: styx-fe1fe2-c-559c4776c7-vnphx 

                                        
                                            
x-styx-req-id: a0b28926-77b8-11ed-8f07-7ecdf34ba12b 

                                        
                                            
cache-control: no-cache, must-revalidate 

                                        
                                            
date: Fri, 09 Dec 2022 11:57:17 GMT 

                                        
                                            
x-served-by: cache-ams12746-AMS, cache-bma1683-BMA 

                                        
                                            
x-cache: MISS, MISS 

                                        
                                            
x-cache-hits: 0, 0 

                                        
                                            
x-timer: S1670587037.194231,VS0,VE55 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
x-robots-tag: noindex 

                                        
                                            
age: 0 

                                        
                                            
accept-ranges: bytes 

                                        
                                            
via: 1.1 varnish, 1.1 varnish 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Unicode text, UTF-8 text, with very long lines (12270)

                                                Size:   2941

                                                Md5:    b329b6ed338179c0e63d16078bdfc8f0

                                                Sha1:   d545fd30fa887dcd38755368b564c64f92775b59

                                                Sha256: dda9b96398b61fb3a9f3aa81c6af99333de26849f135cdd85e9950cc649b7d00

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.33.119.27

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38" 

                                        
                                            
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=6540 

                                        
                                            
Expires: Fri, 09 Dec 2022 13:46:19 GMT 

                                        
                                            
Date: Fri, 09 Dec 2022 11:57:19 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    7b8c1870f03a90aac6370fc69516f95f

                                                Sha1:   1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb

                                                Sha256: f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 7897 

                                        
                                            
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cwVM_F51IAMFunw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: oV7bB5Tek01MFi9x2tr_Wix13-UGlQPIt042XM0ALNUvVFYnu5DRcg== 

                                        
                                            
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 09 Dec 2022 03:38:26 GMT 

                                        
                                            
age: 29933 

                                        
                                            
etag: "7558222788f06623ddae6e883413e38e1146281e" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   7897

                                                Md5:    8c3214044657f3b876d1f1848bca5684

                                                Sha1:   7558222788f06623ddae6e883413e38e1146281e

                                                Sha256: e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6578 

                                        
                                            
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: cw4beGG7oAMF8hA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Miss from cloudfront 

                                        
                                            
x-amz-cf-id: nXaZ1pazAGWMI9GFYZjGlvVVIb8wX6feD0O8VpzjsL8F8l3mFmydAw== 

                                        
                                            
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 09 Dec 2022 07:13:59 GMT 

                                        
                                            
age: 17000 

                                        
                                            
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6578

                                                Md5:    8546542f00ea29ef4df6ab8d3c7c2164

                                                Sha1:   5c8ffe91490006a9890188b53f875568c2b6bd8f

                                                Sha256: 7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 5188 

                                        
                                            
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: ck2-5G9joAMFlPA= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT 

                                        
                                            
x-amz-cf-pop: SEA19-C2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: dGxzuQ6zj6wXQbkBuKBnOKxwKJDHUyGoi7PgcugcpdX4QYruNiFxsQ== 

                                        
                                            
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Thu, 08 Dec 2022 21:51:24 GMT 

                                        
                                            
age: 50755 

                                        
                                            
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   5188

                                                Md5:    fba9a3854df65740512f96efe7442e58

                                                Sha1:   8fbff7725c842d70e047c635a725723a9dc9c55a

                                                Sha256: 6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9

URL	dev-www-online-dkb-de.pantheonsite.io/_files/web/login.php?authId=2c0038f26ed2f83db07562486d06385e6b07ec9d
IP	23.185.0.1 (United States)
ASN	#54113 FASTLY
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-12-09 11:57:27 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	2
urlquery alerts	19 Phishing - Deutsche Kreditbank
Tags	None

Overview

Domain Summary (11)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 23.185.0.1

Last 5 reports on ASN: FASTLY

Last 5 reports on domain: dev-www-online-dkb-de.pantheonsite.io

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (14)

Executed Evals (0)

Executed Writes (12)

#1 JavaScript::Write (size: 49) - SHA256: 36235d073ab58160d70e11d2f6d1d07ad39ca7b36d4b45d795511b6d9ac61484

#2 JavaScript::Write (size: 30) - SHA256: a22cd4566f0a02b57a75a0f8bc346d53a18d9533a8363cc7ac387084b1dc3fe3

#3 JavaScript::Write (size: 18) - SHA256: aae65e97bdc898c3ab182658963e72f88a4268a82431db468f3ba5480454075b

#4 JavaScript::Write (size: 42) - SHA256: fa730ff9a08232e6ec2c6498ea7ecfd44333982245fe5d03f52921614f667651

#5 JavaScript::Write (size: 8) - SHA256: fdadcc19bf10f1ab0e94b5d2e7f789f264225bb3ae6841ab1de350570adba219

#6 JavaScript::Write (size: 19) - SHA256: 2b6fe010f625cf93bfe5cd6986fade20e3fe8be8cb9b80f5726c6329fe7f1d55

#7 JavaScript::Write (size: 180) - SHA256: 21dc862e157c1b6a962ca9c60f8e3b2cbbb5272aab451cb5f6f49049cc966ebb

#8 JavaScript::Write (size: 146) - SHA256: f6ed373e961aa6b971e797286094748eb023db8c557594eadcb7c0b00f8d6073

#9 JavaScript::Write (size: 11) - SHA256: 3e14fa9224434ebe5286b4deb186001fd544008e393253cbf1f473738cdfbd71

#10 JavaScript::Write (size: 8) - SHA256: 82e8a8989130813dff3d05dbb164ecc882037889acf6d2abdb7dab7caf4bdf3b

#11 JavaScript::Write (size: 16) - SHA256: e12cdd4ed1c87661d1aa3ebebec924772d4186713d2d84c095814530a54d028c

#12 JavaScript::Write (size: 80) - SHA256: e40629b035cc7ddfc27fc567b28e1fd85de223772dc9c89f6522ca74d27fdb9e

HTTP Transactions (32)

Overview

Domain Summary (11)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 23.185.0.1

Last 5 reports on ASN: FASTLY

Last 5 reports on domain: dev-www-online-dkb-de.pantheonsite.io

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (14)

Executed Evals (0)

Executed Writes (12)

#1 JavaScript::Write (size: 49) - SHA256: 36235d073ab58160d70e11d2f6d1d07ad39ca7b36d4b45d795511b6d9ac61484

#2 JavaScript::Write (size: 30) - SHA256: a22cd4566f0a02b57a75a0f8bc346d53a18d9533a8363cc7ac387084b1dc3fe3

#3 JavaScript::Write (size: 18) - SHA256: aae65e97bdc898c3ab182658963e72f88a4268a82431db468f3ba5480454075b

#4 JavaScript::Write (size: 42) - SHA256: fa730ff9a08232e6ec2c6498ea7ecfd44333982245fe5d03f52921614f667651

#5 JavaScript::Write (size: 8) - SHA256: fdadcc19bf10f1ab0e94b5d2e7f789f264225bb3ae6841ab1de350570adba219

#6 JavaScript::Write (size: 19) - SHA256: 2b6fe010f625cf93bfe5cd6986fade20e3fe8be8cb9b80f5726c6329fe7f1d55

#7 JavaScript::Write (size: 180) - SHA256: 21dc862e157c1b6a962ca9c60f8e3b2cbbb5272aab451cb5f6f49049cc966ebb

#8 JavaScript::Write (size: 146) - SHA256: f6ed373e961aa6b971e797286094748eb023db8c557594eadcb7c0b00f8d6073

#9 JavaScript::Write (size: 11) - SHA256: 3e14fa9224434ebe5286b4deb186001fd544008e393253cbf1f473738cdfbd71

#10 JavaScript::Write (size: 8) - SHA256: 82e8a8989130813dff3d05dbb164ecc882037889acf6d2abdb7dab7caf4bdf3b

#11 JavaScript::Write (size: 16) - SHA256: e12cdd4ed1c87661d1aa3ebebec924772d4186713d2d84c095814530a54d028c

#12 JavaScript::Write (size: 80) - SHA256: e40629b035cc7ddfc27fc567b28e1fd85de223772dc9c89f6522ca74d27fdb9e

HTTP Transactions (32)

Network Intrusion Detection Systems