hct-busvermietung.de/tmp/DHL/dhl/info.php
301 Moved Permanently 327 B URL HTTP/1.1 hct-busvermietung.de/tmp/DHL/dhl/info.php
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ca81e0b65c2be6fa6e086cece9f9d025
9373f042fde9f7f183373dfb4f0fab4d2292f6d4
a6e12c67db9e59b512d2b029826f961f95e5a89e653b5f867c2aeab6a1a2244f
Analyzer Verdict Alert fortinet Phishing
GET /tmp/DHL/dhl/info.php HTTP/1.1
Host: hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 04 Feb 2023 05:54:23 GMT
Server: Apache
Location: https://hct-busvermietung.de/tmp/DHL/dhl/info.php
Content-Length: 327
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 81713f952b51a865ad9764cde68e3fdb
278c3a9c4bb2a0ffb7375f90d89a1ba6e90a766a
c2eb0d8a24ecb51af28f1c71db4b9a95c568dcf6c94b41ee8c78787a4ebebcef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C2EB0D8A24ECB51AF28F1C71DB4B9A95C568DCF6C94B41EE8C78787A4EBEBCEF"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13938
Expires: Sat, 04 Feb 2023 09:46:41 GMT
Date: Sat, 04 Feb 2023 05:54:23 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e935ea42be4feaed61a824b0b903913e
f966cfa80d65a805cb9d7c6a53b3340865d7c51a
eb0ce9ae50d156fe5924b2d77346735e4e93b5240cff301c9aa835bb0b385815
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB0CE9AE50D156FE5924B2D77346735E4E93B5240CFF301C9AA835BB0B385815"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11759
Expires: Sat, 04 Feb 2023 09:10:22 GMT
Date: Sat, 04 Feb 2023 05:54:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 05:36:14 GMT
content-type: application/json
age: 1089
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7d2222d41721947297aaeb5a6e3d0714
04cc1ee417c8bf6338657fd4c2e4e1c1ddfd3065
de0e45969a2ad95e52f7e2fbd0d021d9075dd7b14666c929346efe111f648f7c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13601
Expires: Sat, 04 Feb 2023 09:41:04 GMT
Date: Sat, 04 Feb 2023 05:54:23 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 9e7H8hL0Ut0ZO6sGCmgSzk4arGMrXYiAnLLzEEvjQf+EhV3tQkL9PhN713JZP7oTvO+U8aqnx/c=
x-amz-request-id: 8BAEDJ0D9CAFJ27E
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 05:23:52 GMT
age: 1831
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
hct-busvermietung.de/tmp/DHL/dhl/info.php
302 Found 296 B URL HTTP/2 hct-busvermietung.de/tmp/DHL/dhl/info.php
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7fdd7c076dcd7332c27fd6ce63856ba6
2d3c5d420ed56a24d5fb3bb27311ae60df414a99
92836ca573e4d3f6ca6d86026f8af2c027e66b6bef848e314a9793444112ec9c
Analyzer Verdict Alert fortinet Phishing
GET /tmp/DHL/dhl/info.php HTTP/1.1
Host: hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 302 Found
location: http://www.hct-busvermietung.de/index.php
content-length: 296
content-type: text/html; charset=iso-8859-1
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 05:54:24 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
www.hct-busvermietung.de/index.php
301 Moved Permanently 324 B URL HTTP/1.1 www.hct-busvermietung.de/index.php
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5078abade005675eea020462260f722a
585e5ebfafc52c1ecf2b08d1795c9b6993a76984
a1add94913fad123d9a14825f78dd2e4cd5c7254336e9c56f74e4c13b2e862c5
GET /index.php HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 04 Feb 2023 05:54:24 GMT
Server: Apache
Location: https://www.hct-busvermietung.de/index.php
Content-Length: 324
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 05:07:19 GMT
age: 2825
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12530
Expires: Sat, 04 Feb 2023 09:23:14 GMT
Date: Sat, 04 Feb 2023 05:54:24 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 278 B IP
Hash 149a2367312653ee73b6581578a2f84d
3c98fcaa27940cfcfb9a8c27bc3ec80476898bbc
007b5bc87b6006e78e97ea446e1979574d5c17782be5e901706a0881e62d05a4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2255
Cache-Control: max-age=163935
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:24 GMT
Etag: "63ddc7a0-116"
Expires: Mon, 06 Feb 2023 03:26:39 GMT
Last-Modified: Sat, 04 Feb 2023 02:49:04 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.hct-busvermietung.de/images/logo-big.png
200 OK 31 kB URL HTTP/2 www.hct-busvermietung.de/images/logo-big.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 240 x 110, 8-bit/color RGBA, non-interlaced\012- data
Hash b70cff8b437c2e7515f32ee717bd299a
42e24f16a61cd41832a807f926660c3e98440aa3
451f456cabb3a0fb900e4cdc0940aabe3ff49ee8c62c9e46dac3b8e1f475695e
GET /images/logo-big.png HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:01:34 GMT
etag: "79e4-5e79c5ff2439b"
accept-ranges: bytes
content-length: 31204
content-type: image/png
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
IP
File type ASCII text, with very long lines (32038)
Hash 103708790db3586027df27ded660f8ef
d3f58fbe6e02cb4b8b34c6fd510e011cb325bc70
fdba876856bb6c2783df94cacb0f17b53fe33f1907135539272c0127b4270ffe
GET /ajax/libs/jquery/1.11.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33507
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 17:55:49 GMT
expires: Wed, 31 Jan 2024 17:55:49 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 302315
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.hct-busvermietung.de/media/mod_languages/images/en_gb.gif
200 OK 1.0 kB URL HTTP/2 www.hct-busvermietung.de/media/mod_languages/images/en_gb.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 87a, 18 x 12\012- data
Hash dc27490e740f62c372205d04e5b0400e
cad81078b95b980801485ac2d69b10a45b8ff3f6
5d14e1355f6dc3fae99dda64bd1b376867196c66c2eb3dd07ffb18f8dd0d242b
GET /media/mod_languages/images/en_gb.gif HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:07:00 GMT
etag: "403-5e79c736b7d1f"
accept-ranges: bytes
content-length: 1027
content-type: image/gif
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/logo-small.png
200 OK 7.7 kB URL HTTP/2 www.hct-busvermietung.de/images/logo-small.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 166 x 49, 8-bit/color RGBA, non-interlaced\012- data
Hash d63242e30914051f082c70f1e135f573
5e1f887dca1b726bb6eee7e558a327368b57a2e7
6477993170131bdf3ade64889c5e9a1802cd9886b0882ed4f71a459bd0cfd9b2
GET /images/logo-small.png HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:01:35 GMT
etag: "1e29-5e79c6001b4d3"
accept-ranges: bytes
content-length: 7721
content-type: image/png
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 149a2367312653ee73b6581578a2f84d
3c98fcaa27940cfcfb9a8c27bc3ec80476898bbc
007b5bc87b6006e78e97ea446e1979574d5c17782be5e901706a0881e62d05a4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2255
Cache-Control: max-age=163935
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:24 GMT
Etag: "63ddc7a0-116"
Expires: Mon, 06 Feb 2023 03:26:39 GMT
Last-Modified: Sat, 04 Feb 2023 02:49:04 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7d482750bf7fdfcaa38c0efd583ef4dc
a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d
5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.hct-busvermietung.de/media/mod_languages/images/es.gif
200 OK 169 B URL HTTP/2 www.hct-busvermietung.de/media/mod_languages/images/es.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 87a, 18 x 12\012- data
Hash 2773d70dd10b25208af0e02151ddaef9
ee6eab80cfbac5bb362161cb0fbe4cc2b9b5c33d
4b488639f0cf5d69cef7b5465329f797697dcf8d930728eae793f1e41d913a57
GET /media/mod_languages/images/es.gif HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:07:05 GMT
etag: "a9-5e79c73ad1a64"
accept-ranges: bytes
content-length: 169
content-type: image/gif
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/Kostenloser_Service_XL.png
200 OK 26 kB URL HTTP/2 www.hct-busvermietung.de/images/Kostenloser_Service_XL.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 140 x 112, 8-bit/color RGBA, non-interlaced\012- data
Hash a94c0ee50127f27b0f29051c3e9beb43
4a4e183577bfd2ce2c592b4814f2f57e571ca28b
5f7833f83c91564a39311b44298e99c436ff9fc561e238f52bc802b6b125d484
GET /images/Kostenloser_Service_XL.png HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:01:35 GMT
etag: "647b-5e79c6002fcf5"
accept-ranges: bytes
content-length: 25723
content-type: image/png
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c181c51a9326d56e60915a792c306c2c
de1cc0ce1384905e65a9fa9575743091d785e528
b74bc74e2920124b3288a980f9a7b59e3450ba63f2333027440cd6ebbdfdbf8d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-PGKN6XV
200 OK 56 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PGKN6XV
IP
File type ASCII text, with very long lines (3989)
Hash 5b1807acee00ed47ab33fe7e7ddb8dae
e757b27380529d6c4b4d860d7bd2c6e9cb87b470
9b204fc7d7553f508fa233c631093c250ec7f307509fdda49cbaa23a543bebda
GET /gtm.js?id=GTM-PGKN6XV HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 Feb 2023 05:54:24 GMT
expires: Sat, 04 Feb 2023 05:54:24 GMT
cache-control: private, max-age=900
last-modified: Sat, 04 Feb 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 55741
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.hct-busvermietung.de/media/mod_languages/images/ru_ru.gif
200 OK 102 B URL HTTP/2 www.hct-busvermietung.de/media/mod_languages/images/ru_ru.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 18 x 12\012- data
Hash ae8150beecb2f5fa3b20c899d6a320cd
f7c98f348a4bbcfc18f471ce51a781b833168df5
381f776a074f6280762868e90f3fe2153300fd7820744e536a544f037516d342
GET /media/mod_languages/images/ru_ru.gif HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:06:57 GMT
etag: "66-5e79c733be156"
accept-ranges: bytes
content-length: 102
content-type: image/gif
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/templates/purity_iii/js/css/owl.carousel.css
200 OK 528 B URL HTTP/2 www.hct-busvermietung.de/templates/purity_iii/js/css/owl.carousel.css
IP
ASN #24940 Hetzner Online GmbH
Hash a70757c9c5b45b8b3e693066dee5c63c
4ddc02d2eac2bb1a9ccc446ff1e19641ee8f7279
97e2ca1b06a80ecd57e1514d54bec8904727d25dc47f878b41d204c72e8535de
GET /templates/purity_iii/js/css/owl.carousel.css HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 15:38:24 GMT
etag: "5c4-5e78b499c27c7-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 528
content-type: text/css
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/templates/purity_iii/js/waypoints.min.js
200 OK 2.4 kB URL HTTP/2 www.hct-busvermietung.de/templates/purity_iii/js/waypoints.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (7828), with no line terminators
Hash 8d64f0be8a3dccd78942f2ef95f20f27
bed236d44f4336ba54b2104af4ad45e7d7e2db33
6b42bce9d7844e4b00c460241f5d505d65b504c8aeb8f8e3731645ba0059e488
GET /templates/purity_iii/js/waypoints.min.js HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 15:38:17 GMT
etag: "1e94-5e78b492c65ba-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 2443
content-type: application/javascript
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/templates/purity_iii/js/waypoints-sticky.min.js
200 OK 480 B URL HTTP/2 www.hct-busvermietung.de/templates/purity_iii/js/waypoints-sticky.min.js
IP
ASN #24940 Hetzner Online GmbH
File type ASCII text, with very long lines (944), with no line terminators
Hash 517877a7644c891e883e0ca10b2fe63b
8468f12da375eb9e187eba21ae6714049e95dd3c
c848127049ddbd363cec5ce77b6ca54cf63b4c6280ae13ccb9936bf95bff3bb0
GET /templates/purity_iii/js/waypoints-sticky.min.js HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 15:38:15 GMT
etag: "3b0-5e78b4910908f-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 480
content-type: application/javascript
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/templates/purity_iii/js/css/owl.theme.css
200 OK 606 B URL HTTP/2 www.hct-busvermietung.de/templates/purity_iii/js/css/owl.theme.css
IP
ASN #24940 Hetzner Online GmbH
Hash 7153bc3a86860f6f15d1692a533065ce
87d1535b7fa4ee23c1dd8976ef115c2603a3d74a
6be2a352cfebf5b9a6c730341fed8644fd21d8c373834cda6bf4b651275b9872
GET /templates/purity_iii/js/css/owl.theme.css HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 15:38:25 GMT
etag: "681-5e78b499d1228-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 606
content-type: text/css
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/templates/purity_iii/js/owl.carousel.js
200 OK 8.8 kB URL HTTP/2 www.hct-busvermietung.de/templates/purity_iii/js/owl.carousel.js
IP
ASN #24940 Hetzner Online GmbH
Hash 39c690419159637e1f3977c8dfb5718d
202b2d75966f313aec83f414d0845154e2d9384b
04a284e3609cc5cc5be472faf440515595190574f61b9f46c5c6fbec298a684f
GET /templates/purity_iii/js/owl.carousel.js HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Wed, 31 Aug 2022 15:38:17 GMT
etag: "ce3d-5e78b4922efcc-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 8751
content-type: application/javascript
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
maps.googleapis.com/maps/api/js?libraries=places&sensor=true_or_false&key=AIzaSyAfpf8DChlv9tCurGQ-vlhDsunmYILjnbg
200 OK 56 kB URL HTTP/2 maps.googleapis.com/maps/api/js?libraries=places&sensor=true_or_false&key=AIzaSyAfpf8DChlv9tCurGQ-vlhDsunmYILjnbg
IP
File type ASCII text, with very long lines (2458)
Hash 768a828eedac4e559d14de5ee04877f1
60e3035d1176bf8444c620ce6b88d82e75d6e4a1
93e27f7b5cc533fa7ddabbd62d3c6b5cf787876d0abff8c26e4e0a1caad0d24a
GET /maps/api/js?libraries=places&sensor=true_or_false&key=AIzaSyAfpf8DChlv9tCurGQ-vlhDsunmYILjnbg HTTP/1.1
Host: maps.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
date: Sat, 04 Feb 2023 05:54:24 GMT
expires: Sat, 04 Feb 2023 06:24:24 GMT
cache-control: public, max-age=1800
vary: Accept-Language
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
content-encoding: gzip
server: mafe
content-length: 55698
x-xss-protection: 0
x-frame-options: SAMEORIGIN
server-timing: gfet4t7; dur=43
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7d482750bf7fdfcaa38c0efd583ef4dc
a4f68a124e4be130bc838e70f23fd4c6d2f4ef2d
5e6f1cadf4bc425664bb26fa2b384cf13900461b689c77d0916b1d2edd41337c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.hct-busvermietung.de/images/HCT/slider/Erstklassiger-Service.jpg
200 OK 14 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Erstklassiger-Service.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash ff69d3249201f93e1e35297a1056752e
67c9bf8856c4617fef2b619750e63201fffd4e65
a31682de765c4b84d62a635074da3084775aa4e63d85cb2d1b4e62f62e474f2d
GET /images/HCT/slider/Erstklassiger-Service.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "3898-5e79c6c8bcdc7"
accept-ranges: bytes
content-length: 14488
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Moderne-Busflotte.jpg
200 OK 16 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Moderne-Busflotte.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash 926e3dede50bda208674281099779b49
98451f751264b1af2ed494846a7ac7d3ce26f93a
00d914dd26b77baa2dc998173aab9979d25df67c99a62f6a11dc0afe5d57b8e0
GET /images/HCT/slider/Moderne-Busflotte.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "3d92-5e79c6c896c63"
accept-ranges: bytes
content-length: 15762
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Limousinen-MiniVans.jpg
200 OK 17 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Limousinen-MiniVans.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash fc88271b3561a140713a68d56e44800a
35d1365685d079f4aa49f26c976168d3141e7dca
20763a23fd5d6bd4ae1fc98f6338cdb66baff9c9c3f445f7177f4a69139755b2
GET /images/HCT/slider/Limousinen-MiniVans.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "42f9-5e79c6c88dfc3"
accept-ranges: bytes
content-length: 17145
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Komfortables-Reisen.jpg
200 OK 19 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Komfortables-Reisen.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash 86e7476c3838ac796744701f31e1c665
3d4c9a0a56c521f4f9c8615902c75c7f4d7eda28
caca84c3c9eaf90db13052e59030479601d5415d672714f251448779bb0b1e6f
GET /images/HCT/slider/Komfortables-Reisen.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "4aeb-5e79c6c86209e"
accept-ranges: bytes
content-length: 19179
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Event-Logistik.jpg
200 OK 19 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Event-Logistik.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash 75608355ab4e22f19e96e2d3c99e1204
7395fd5c1012068800d5f0e0fa1e3eb0a03d4981
899bc90c44b5b12238f5be4a3b3ec697f343ca187276cf91a9140ed91f5dfa2b
GET /images/HCT/slider/Event-Logistik.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "4974-5e79c6c87b6e1"
accept-ranges: bytes
content-length: 18804
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Neue-Perspektiven.jpg
200 OK 21 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Neue-Perspektiven.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash 3af790ad37bde02d8484df7d6870d6d5
36f94babac7b29c1f616e2425a4d4bb79acca5ac
92815941dbc3fef1a04c4c4ea5b30f0e1bee4ac3da5590966ea4aa8c55686e27
GET /images/HCT/slider/Neue-Perspektiven.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "51bb-5e79c6c8af306"
accept-ranges: bytes
content-length: 20923
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Event-Koordination.jpg
200 OK 21 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Event-Koordination.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash 090eaed245e862eb23e3939309f8549a
5fb9de989695e85082c534b7a8a7679179c2ad0d
5844a6f52636164d3a7b98e4a70a4c0e2d54a1c511bcc4459e971d2c0ac07fce
GET /images/HCT/slider/Event-Koordination.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "51ae-5e79c6c8a4725"
accept-ranges: bytes
content-length: 20910
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Gesch%C3%A4ftsreisen.jpg
200 OK 22 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Gesch%C3%A4ftsreisen.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash 34572da898e74d7672aa38e8ccfad502
e7072b195723bc15e60b4a0844b5428cc0177203
f1fc00cbc1a91bacd0dc8f7fcc8ea5a741fa9d6f63994f74f764de713606f580
GET /images/HCT/slider/Gesch%C3%A4ftsreisen.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "5671-5e79c6c8593fd"
accept-ranges: bytes
content-length: 22129
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Kongresse-Messen.jpg
200 OK 22 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Kongresse-Messen.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash 2c0fe5582b0e8958a3d154716215e75c
5fee7f61624c2a095f76ff318c99e7ff478e0d14
3220fe35e07681591385203cd48de04c28d0c0236942bcdc11b308735b374719
GET /images/HCT/slider/Kongresse-Messen.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "5608-5e79c6c8c8948"
accept-ranges: bytes
content-length: 22024
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/paypal-t.png
200 OK 23 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/paypal-t.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 238 x 92, 8-bit/color RGBA, non-interlaced\012- data
Hash 634af9b02ed4e7dc83c61439f71dcc15
b40868c4bb3627d19a6a8ecef5eb968da6153644
ca95420083048f6a1b2b597fd8ddb3422e3e5cab0938f811649b806556010928
GET /images/HCT/paypal-t.png HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:02:42 GMT
etag: "5aa7-5e79c63fd5297"
accept-ranges: bytes
content-length: 23207
content-type: image/png
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Sympathisches-Fahrpersonal.jpg
200 OK 23 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Sympathisches-Fahrpersonal.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash 11e4fbe076390a6072afee15067b560c
a757607704b7215bec0a11dbe2861d3be2e2b3cb
4d5187713d16f7fe5756949c2d088f99e3d15f4d3b4416f9b86a98905f5280b5
GET /images/HCT/slider/Sympathisches-Fahrpersonal.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "5aed-5e79c6c84a99c"
accept-ranges: bytes
content-length: 23277
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/slider/Gruppenreisen.jpg
200 OK 26 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/slider/Gruppenreisen.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=3, software=paint.net 4.0.6], baseline, precision 8, 287x191, components 3\012- data
Hash 24dded2d5d3fc6132680542974dcf7cf
7401b5fa9171fe9f72236c27b1c59189041d310e
2697a2152005ca32cb15b15565c646fbdbff6bc72ed968df4687a9128be692be
GET /images/HCT/slider/Gruppenreisen.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:05 GMT
etag: "6744-5e79c6c872a40"
accept-ranges: bytes
content-length: 26436
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/media/system/css/system.css
200 OK 549 B URL HTTP/2 www.hct-busvermietung.de/media/system/css/system.css
IP
ASN #24940 Hetzner Online GmbH
Hash 09bdb0f77d434024138c13bf7b431989
7725a4d1205abc67ae5c9c3e0403ceb5dac8717f
d768fe7147ee69f6a1cb0ddeaf9298537392aee0c4da5e21c03da28e5830abb8
GET /media/system/css/system.css HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/media/plg_jchoptimize/assets/gz/30/0/7763cd124048b8f311b531a4d84c3341.css
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE; _gcl_au=1.1.584619340.1675490099
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:07:26 GMT
etag: "5a6-5e79c74eeb474-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-length: 549
content-type: text/css
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 55EZ0UKrF7sTcZ4gjgJPfA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 8HJsl1+IfMMXKpjq8w6m9btjOrw=
www.hct-busvermietung.de/images/HCT/check_box.gif
200 OK 1.4 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/check_box.gif
IP
ASN #24940 Hetzner Online GmbH
File type GIF image data, version 89a, 26 x 26\012- data
Hash 8484b1759a630553fac4787ebb8e0833
af544deefb7373801551e15ecc73da556dcf2b7b
70322ad3c05b519c4ef18158cb96107f4c1c15b6df412fc764bae877fc6d9557
GET /images/HCT/check_box.gif HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/media/plg_jchoptimize/assets/gz/30/0/7763cd124048b8f311b531a4d84c3341.css
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE; _gcl_au=1.1.584619340.1675490099
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:02:41 GMT
etag: "583-5e79c63fbdb94"
accept-ranges: bytes
content-length: 1411
content-type: image/gif
date: Sat, 04 Feb 2023 05:54:25 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/HCT/header/home-neu.jpg
200 OK 153 kB URL HTTP/2 www.hct-busvermietung.de/images/HCT/header/home-neu.jpg
IP
ASN #24940 Hetzner Online GmbH
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x762, components 3\012- data
Size 153 kB (152642 bytes)
Hash 1130018cb052fbb2636f49e8452f4cc4
fb7e5d5218518490cbfb420903c755e711aaa4d7
5d98f5001bc228cd5205582ba35c766e542908459c709a9af2b17121d68df985
GET /images/HCT/header/home-neu.jpg HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/media/plg_jchoptimize/assets/gz/30/0/7763cd124048b8f311b531a4d84c3341.css
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE; _gcl_au=1.1.584619340.1675490099
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:05:12 GMT
etag: "25442-5e79c6cf9f991"
accept-ranges: bytes
content-length: 152642
content-type: image/jpeg
date: Sat, 04 Feb 2023 05:54:25 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/plugins/system/t3/base-bs3/fonts/font-awesome/font/fontawesome-webfont.woff
200 OK 44 kB URL HTTP/2 www.hct-busvermietung.de/plugins/system/t3/base-bs3/fonts/font-awesome/font/fontawesome-webfont.woff
IP
ASN #24940 Hetzner Online GmbH
File type Web Open Font Format, TrueType, length 43572, version 1.0\012- data
Hash b683029bafe0305ac2234038a03e1541
12f8c193902e99348493ace32e498031bf79b654
18e6b5ff511b90edf098e62ac45ed9d6673a3eee10165d0de4164d4d02a3a77f
GET /plugins/system/t3/base-bs3/fonts/font-awesome/font/fontawesome-webfont.woff HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/media/plg_jchoptimize/assets/gz/30/0/7763cd124048b8f311b531a4d84c3341.css
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE; _gcl_au=1.1.584619340.1675490099
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:18:44 GMT
etag: "aa34-5e79c9d57bc48"
accept-ranges: bytes
content-length: 43572
content-type: font/woff
date: Sat, 04 Feb 2023 05:54:25 GMT
server: Apache
X-Firefox-Spdy: h2
sw-assets.ekomiapps.de/static_resources/widget.js
200 OK 346 B URL HTTP/2 sw-assets.ekomiapps.de/static_resources/widget.js
IP
File type ASCII text, with very long lines (346), with no line terminators
Hash 87cc6c5e2b6611d43a3e35da657e4751
061fea9f18a3b3f8ac0efa04ed9a41286a7142c1
f51590d5dc8f61cfc0c025dfc89f35c726bef31ec33664ff8bebbb73e4fae660
GET /static_resources/widget.js HTTP/1.1
Host: sw-assets.ekomiapps.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 346
date: Wed, 04 Jan 2023 06:52:32 GMT
last-modified: Wed, 02 Nov 2022 08:19:32 GMT
etag: "87cc6c5e2b6611d43a3e35da657e4751"
cache-control: max-age=31536000,public
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 bdba42cf1410fb617eeb4ffd3e0b9cb6.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: CYUeLKlYXyTqlVnhMFYFpETPNudAD-WYZvKxkISDx1hezuY05CKOpw==
age: 2674914
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/apple_touch_icon_114.png
200 OK 6.1 kB URL HTTP/2 www.hct-busvermietung.de/images/apple_touch_icon_114.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 114 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash 09eb4d4a55925ff87a0876d15f2ed778
1ba5a3ed50bc59954057b00b7f72ba05fdd80a55
7193dfe3be2e93f9fd0b7623b8a07cb1f7d9fd5c36263acc463294174bbf48e5
GET /images/apple_touch_icon_114.png HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE; _gcl_au=1.1.584619340.1675490099
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:01:34 GMT
etag: "17cc-5e79c5ff9c587"
accept-ranges: bytes
content-length: 6092
content-type: image/png
date: Sat, 04 Feb 2023 05:54:25 GMT
server: Apache
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sat, 04 Feb 2023 05:44:08 GMT
expires: Sat, 04 Feb 2023 07:44:08 GMT
cache-control: public, max-age=7200
age: 617
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
smart-widget-assets.ekomiapps.de/static_resources/f-widget.js
200 OK 13 kB URL HTTP/2 smart-widget-assets.ekomiapps.de/static_resources/f-widget.js
IP
Hash ed4e09d08858d752598b41baa5c468ec
bbe58eab7855d4645cccb5f7cd95ac2ce08397a9
0c5b4b9cc4dd86ca4c2647d16001bd503bcc2b3b77700656328f302485105a1a
GET /static_resources/f-widget.js HTTP/1.1
Host: smart-widget-assets.ekomiapps.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 19 Jan 2023 13:18:02 GMT
last-modified: Thu, 19 Jan 2023 13:17:30 GMT
etag: W/"c0e489b6016b2504a245f6f0ff562f06"
cache-control: max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bdba42cf1410fb617eeb4ffd3e0b9cb6.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: Yz6Jv1v1y1Sd2KHCeTouFgRPqZWlHjoTQTdajwlyfm-fywuEo6OREQ==
age: 1355784
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 994e21b70c95eb7dd513bcc9fb3cb36e
30265438e8ccb5c0b74c2b9c673e18fdcd210a33
660ebe5cefd5ac620b17399879db991ffecefe28d5b209cda648eec005e0ec83
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d3e050cf67675c3c19014a74517e3747
9931fd6a416e220e15ef5eccad6d0cb12edf3995
8411e23b7bfeba91b6252f15de6ed18b8cff1f752af0efc4f5429b54fccb0da4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2394
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:25 GMT
Last-Modified: Sat, 04 Feb 2023 05:14:32 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/de_DE/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/de_DE/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash c014e2d06b29796b82b9700b8fd35d1e
516c011489de760534fd29a06e8ed5a2d68ec82e
92c95fa937646f005fa558c6c93ed36fc397811654d3ec133be237fadc3a0321
GET /de_DE/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 3ef69bc285ca656bee55ee564f776983
etag: "fd6c61893e14b6688dcdf8882b39d55c"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 04 Feb 2023 06:07:10 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: wBTi0GspeWuCuXALj9NdHg==
x-fb-debug: TY9DporZdyPX/8trlXjPKaHXuaEho3nm8gMyn/j5TPxTR0fYJJNm4kiF3gTBdPwJ6xHD8jFB0/Eh/D3ryoNfxA==
content-length: 1687
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:25 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png
200 OK 3.4 kB URL HTTP/2 maps.gstatic.com/mapfiles/api-3/images/autocomplete-icons.png
IP
File type PNG image data, 34 x 280, 8-bit/color RGBA, non-interlaced\012- data
Hash 9e9dd969ceb057a228067a1c539127f9
fb2da26959858054157960bb7f8e6c145648eaac
db209390b90b70f4b1ef3540cb581e4ec8edbba21980971b68e4aef5c5d352fb
GET /mapfiles/api-3/images/autocomplete-icons.png HTTP/1.1
Host: maps.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/png
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/geo-tactile
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="geo-tactile"
report-to: {"group":"geo-tactile","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/geo-tactile"}]}
content-length: 3351
date: Sat, 04 Feb 2023 05:54:25 GMT
expires: Sat, 04 Feb 2023 05:54:25 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 18 May 2021 19:15:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (1429)
Hash f8971f3ad662af35a2ca6871f8c78482
35a0b814d6ecec8deacc9aea87ce9be62b15d92b
a438d380bab44504b1ff13673a0e041c6ac6645d03926e7f076465d1fe049765
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Sat, 04 Feb 2023 05:54:25 GMT
expires: Sat, 04 Feb 2023 05:54:25 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "9dea963ca1c75dde"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/collect?v=1&_v=j99&aip=1&a=1438079123&t=pageview&_s=1&dl=https%3A%2F%2Fwww.hct-busvermietung.de%2Findex.php&ul=en-us&de=UTF-8&dt=Mieten%20Sie%20ihren%20Bus%20zu%20besten%20Preisen%20-%20HCT-Busvermietung&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBAgAABAAAAAAAAI~&jid=1440170428&gjid=1534919573&cid=1906882832.1675490100&tid=UA-51860981-1&_gid=1960008174.1675490100&z=1111617014
200 OK 35 B URL HTTP/2 www.google-analytics.com/collect?v=1&_v=j99&aip=1&a=1438079123&t=pageview&_s=1&dl=https%3A%2F%2Fwww.hct-busvermietung.de%2Findex.php&ul=en-us&de=UTF-8&dt=Mieten%20Sie%20ihren%20Bus%20zu%20besten%20Preisen%20-%20HCT-Busvermietung&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBAgAABAAAAAAAAI~&jid=1440170428&gjid=1534919573&cid=1906882832.1675490100&tid=UA-51860981-1&_gid=1960008174.1675490100&z=1111617014
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /collect?v=1&_v=j99&aip=1&a=1438079123&t=pageview&_s=1&dl=https%3A%2F%2Fwww.hct-busvermietung.de%2Findex.php&ul=en-us&de=UTF-8&dt=Mieten%20Sie%20ihren%20Bus%20zu%20besten%20Preisen%20-%20HCT-Busvermietung&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YGBAgAABAAAAAAAAI~&jid=1440170428&gjid=1534919573&cid=1906882832.1675490100&tid=UA-51860981-1&_gid=1960008174.1675490100&z=1111617014 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
pragma: no-cache
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 35
date: Fri, 03 Feb 2023 07:52:55 GMT
expires: Mon, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
age: 79290
last-modified: Sun, 17 May 1998 03:00:00 GMT
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash d3e050cf67675c3c19014a74517e3747
9931fd6a416e220e15ef5eccad6d0cb12edf3995
8411e23b7bfeba91b6252f15de6ed18b8cff1f752af0efc4f5429b54fccb0da4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2394
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:25 GMT
Last-Modified: Sat, 04 Feb 2023 05:14:32 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
200 OK 53 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (1448)
Hash 0352bb776d2cb7e28ed4294ef240bc8e
8a00fccf1aa5746c76e7c9053a9d64d0be917de5
3f6a4eab3c990f88af494e19777e6f8131065e9d2a412806579eaeb7c8e51fa7
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 52558
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 06:39:41 GMT
expires: Wed, 31 Jan 2024 06:39:41 GMT
cache-control: public, max-age=31536000
age: 342884
last-modified: Sat, 07 Jan 2023 15:19:07 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8176ac8bbb8fa05f36bdfa163da09e0c
b936c84c5fa7e781b12a17952c82bca546ca0575
1aa7e39fd02514a4023036a8a100d7e7898ee220063ebfb41c509264c81ed727
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 23287a0337047631e479bb3cbe8b0fcd
15ec24f5ee1990ee456a6fd3bbcbdbe27bf62c99
da05b381eec3589d2689bc5fab2b89eb5d65f9a5652f9254f3353e30a4540034
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42f7bb86070a306c0902a2947bfd5db1
679751d86f7520d1e5e30b5bc050015450de75a7
ebccfef4e98d659e8e275dd6b2797b1154e42572695aefc916825bc0819e96dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-51860981-1&cid=1906882832.1675490100&jid=1440170428&gjid=1534919573&_gid=1960008174.1675490100&_u=YGBAgAABAAAAAEAAI~&z=1760419609
200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-51860981-1&cid=1906882832.1675490100&jid=1440170428&gjid=1534919573&_gid=1960008174.1675490100&_u=YGBAgAABAAAAAEAAI~&z=1760419609
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j99&tid=UA-51860981-1&cid=1906882832.1675490100&jid=1440170428&gjid=1534919573&_gid=1960008174.1675490100&_u=YGBAgAABAAAAAEAAI~&z=1760419609 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.hct-busvermietung.de
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.hct-busvermietung.de
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 04 Feb 2023 05:54:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
connect.facebook.net/de_DE/sdk.js?hash=42b8ec3b055d828aa2914d9ebae47f56
200 OK 88 kB URL HTTP/2 connect.facebook.net/de_DE/sdk.js?hash=42b8ec3b055d828aa2914d9ebae47f56
IP
File type ASCII text, with very long lines (18530)
Hash 47bcdc383cc4dc35a6be99346e8495a3
aeefa1f90f5a6fae43989accd35eb01f1ac0815e
2d36425bfbf920a737ed5b9f42d02627242531307220d23565434940adb0e3b9
GET /de_DE/sdk.js?hash=42b8ec3b055d828aa2914d9ebae47f56 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.hct-busvermietung.de
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: b231336197ced81906d5277644b7938a
etag: "3baf4f9725885f5a96cb1c5dce30fc56"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 04 Feb 2024 05:47:11 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: R7zcODzE3DWmvpk0boSVow==
x-fb-debug: p3QNBV/2Q1yAbx2vtkOxE/sCnrdbz18ycoOJXNGGkF/haYL5t8+gqUxVUT2Uhc8h7CIvQTmmEUTLawG4q+4wlA==
content-length: 88519
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:25 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42f7bb86070a306c0902a2947bfd5db1
679751d86f7520d1e5e30b5bc050015450de75a7
ebccfef4e98d659e8e275dd6b2797b1154e42572695aefc916825bc0819e96dd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 05:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3995
Expires: Sat, 04 Feb 2023 07:01:01 GMT
Date: Sat, 04 Feb 2023 05:54:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3995
Expires: Sat, 04 Feb 2023 07:01:01 GMT
Date: Sat, 04 Feb 2023 05:54:26 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3995
Expires: Sat, 04 Feb 2023 07:01:01 GMT
Date: Sat, 04 Feb 2023 05:54:26 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa139f02-bb4d-4058-8a17-82e241e61bf2.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa139f02-bb4d-4058-8a17-82e241e61bf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75b9c67fbf2d207afec78eb14b95d7ec
c0b7e9e9ca9ee71761489e738a3a308ff0b6e5c8
42ddfef2fc1e0200a1ff3d615fd6da42fd8bdea4551344580c13af07092d401f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa139f02-bb4d-4058-8a17-82e241e61bf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5917
x-amzn-requestid: 095185b4-b608-4ac8-9041-6e5fcf9033d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEW_EA4IAMFxVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd80f9-1d780a2a58fcc30613bdfdab;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:47:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -4TwLeMENj7WdI_QQWKgwxTj9MldN5z7qmo7_OX_eXIVba9zjDEoaA==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:17:42 GMT
age: 27404
etag: "c0b7e9e9ca9ee71761489e738a3a308ff0b6e5c8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6661b7263315f5eb3cd2465f671e1fcd
b7b5831c6b3ccc41d7a980b6088adc10ff8785f1
eb25507950d81db4b54a1af7fadaceee1bcff780eb28b6a04dbfb3886785f5b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a6c7026-85a2-4419-bd6b-ba1bac463dda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8527
x-amzn-requestid: f95a2821-ae89-4ea9-93b2-43e570285df3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEC3FyboAMFe0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8078-7e2177f11d5715d4092cad2c;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: dcFgY5x3Ef0J__7wGn3llTjZ9as5nX1H4HErIT3VlKfeQaQTjymW2g==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:33 GMT
etag: "b7b5831c6b3ccc41d7a980b6088adc10ff8785f1"
content-type: image/jpeg
age: 27833
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e5b4e4f15da3323c73974c3f1cdb5d74
1f14971d0cf979cc34ff191849dc43d86e8ac463
5893d7e5b2fd9de92829b303c42d0c07ff32b3f6b8705b6f5b4a784315c8808e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2ec84086-8ac2-4887-bc81-86003255ab99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5174
x-amzn-requestid: 35630c70-3bad-47b4-94bb-09c873632194
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD7EFAHIAMFQQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8046-317b1fbb3bee0f377697bf3d;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: OD5cy75AkNMwTIvIool2nKbKgr5Jpo1Plm_X_YPr3rdPbg86_V2fdA==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 27845
etag: "1f14971d0cf979cc34ff191849dc43d86e8ac463"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9ab97f766ee1ed6ebbb2b3889a9157b4
f87f165404dec4d65531e6e25146cb77601f3616
f3d0f76f956371b1733a526f10a8253fc3396a459d7af59380d8e8db7dee8ec2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5300360-6063-4d18-8dd2-28dbcf47d371.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14071
x-amzn-requestid: 40cb363f-2c4d-4361-9fe1-10e4c8b2fe29
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fiTo4Ek2oAMFs6g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d73305-6cb63d3c49f9f84e639467f6;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 03:01:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: b7r7phj8i49RMSuWufxF1L34K9udWa0mJ4dY12izM9ofwAuCFBGEZQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 21:48:05 GMT
age: 29181
etag: "f87f165404dec4d65531e6e25146cb77601f3616"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7afd5ce8fb9ec7b62e528bf97705e49
afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3
b2d93ba6c0ed2c858d91afba1c81251afbffa41c779be2e9203994dcfb7bbc9d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5c030376-7935-4601-969c-86a91f4f5e85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7249
x-amzn-requestid: 007ce521-ed5c-4074-a314-684ad0df2e22
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyD9GH5goAMF_ag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8053-7060f02b767c90371991a190;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:44:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5fTV_e56nzjiXo4Guu67WXDDvp3nrjB0Yfyy6ByjcDSx23J-8r0fmQ==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
age: 27845
etag: "afbf22f5d8f54adcb00e8980a9b22f2c5b6703c3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 65cd12302c9ca5468dbc9a98155970e0
a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1
8463155faca74f13ec4500fed98289d8bfbdc4a989d1cb7580736018eadf1000
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e245a51-5c03-4b84-b42a-29fa3a7806e9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7992
x-amzn-requestid: ba4f95d9-6081-4b34-955c-bbe8e7b2335c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fyEEjGsdIAMF84w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dd8083-7666baa66ccdec9b5fec8736;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 21:45:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: A3c6sSs_b8KkREPa26a8X9NTEZpHGDjElR9hT-NXwg6dYpeuRNZXfA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 03 Feb 2023 22:10:21 GMT
etag: "a0c63213c3021e40f8ea54f2da6a5c165ed5cfd1"
content-type: image/jpeg
age: 27845
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.hct-busvermietung.de/modules/mod_cookiesaccept/img/przez_b.png
200 OK 923 B URL HTTP/2 www.hct-busvermietung.de/modules/mod_cookiesaccept/img/przez_b.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash 9269561b7fc228540c7c1f82188d6844
8f89318307a2af9e1cb38adc0e2a6f235529a1bd
0b142741ee24dab128bc6ae909fb554e0a96cfc4d5cdfa7b5dd4638c20c76c9f
GET /modules/mod_cookiesaccept/img/przez_b.png HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE; _gcl_au=1.1.584619340.1675490099; _ga=GA1.2.1906882832.1675490100; _gid=GA1.2.1960008174.1675490100; _gat=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:03:51 GMT
etag: "39b-5e79c68283e03"
accept-ranges: bytes
content-length: 923
content-type: image/png
date: Sat, 04 Feb 2023 05:54:26 GMT
server: Apache
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
200 OK 830 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (724)
Hash d63a02ce87c07ffcfa869fef7fc5f233
cae745fef84088abe3525bb77f75c55cd1d4cc2c
bf9d4d71541a0a1f31b10be351add847ee935da6de355756314c8ca96512444d
GET /rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 26 Jan 2024 00:24:48 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 1joCzofAf/z6hp/vf8XyMw==
x-fb-debug: o8vhsU9XsRNzUsHEFcB/PYZ47w9eafX3mCego/vNp5DQ/F8ogrw6lOUxsWnuqxGrrV6o2kfFNo3m1CDVBAwopA==
content-length: 830
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y7/l/0,cross/XhLcFEqE8E_.css?_nc_x=Ij3Wp8lg5Kz
200 OK 4.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y7/l/0,cross/XhLcFEqE8E_.css?_nc_x=Ij3Wp8lg5Kz
IP
File type assembler source, ASCII text, with very long lines (2642)
Hash c7916a2005360f2e905afce8fbf07e8f
7a32683070a012da34c4fb48401a591436bbf667
d2e3590e4227f66267033166bc65aa90bf49ebb6915bd2102bc0b7431940791a
GET /rsrc.php/v3/y7/l/0,cross/XhLcFEqE8E_.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 01 Feb 2024 19:55:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: x5FqIAU2Dy6QWvzo+/B+jw==
x-fb-debug: i/IEVb/0Jl6EN6bFssWIXXvFVhZh7HtlHx2ck5Ejv8lHmGVBhv6c70oazBdMgJHef2ZevXIqdu67TfOdZOdKjA==
content-length: 4736
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yx/l/0,cross/d46KJqw3tYa.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.0 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yx/l/0,cross/d46KJqw3tYa.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4431)
Hash 3d09a071383b17a8692450e63e1e2380
745b775cc1f4c6a43d3a9b2761744f8150e91ffe
840d56510c3fe897eaf52cab7329889830b0e6b2a40fd6bf241bee8c59255472
GET /rsrc.php/v3/yx/l/0,cross/d46KJqw3tYa.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 18:28:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: PQmgcTg7F6hpJFDmPh4jgA==
x-fb-debug: ED/yQkqShfMChSbmvGyHW9NRp+b6EMEFROd+3yuYJk/KB1XTuy6bXCUM3YiP8Q/9PJqvNg3FUoBlrtp148ThAw==
priority: u=2
content-length: 5006
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/cwBc1FhMd71.css?_nc_x=Ij3Wp8lg5Kz
200 OK 4.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yb/l/0,cross/cwBc1FhMd71.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (10262)
Hash 42a4a3e1cf28058bc22eb837b4f7d394
94a1e3b3ef7b5b78bc4212044f67677eb3b91c48
4b8a4e5210ff0605bf57f43ea41b0ca2af6ca9aac060626a5457150810db8f2a
GET /rsrc.php/v3/yb/l/0,cross/cwBc1FhMd71.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 01 Feb 2024 22:39:52 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: QqSj4c8oBYvCLrg3tPfTlA==
x-fb-debug: ByQERkJghRn3L3bcpNv7XZU89zYcdo+CgOy4j6tiC96GtskyukMrxsTzsjp+T3pulNCfLF86X/8wFswqE5d2tA==
content-length: 4392
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yO/l/0,cross/dIeog4kQ8bz.css?_nc_x=Ij3Wp8lg5Kz
200 OK 8.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yO/l/0,cross/dIeog4kQ8bz.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (14181)
Hash 625c5c9893c3972649d43a20f9738673
da24d5abb35691cc5561b2a87a1c78a885ce571e
ecd0eff287c09fa25a7b6f43a24af9298cd556e419a2a4ae6f6f88d9cc0c5cd2
GET /rsrc.php/v3/yO/l/0,cross/dIeog4kQ8bz.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 01 Feb 2024 21:04:29 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: YlxcmJPDlyZJ1Dog+XOGcw==
x-fb-debug: AtwPGI85nNrjalrm8E8z/ntHm1zZHEJi7TrKu3MQvG9LjTLn7lwpmmVcf0np2i9Drp5tGeVgEsYKVrDHWNKAnw==
priority: u=3,i
content-length: 8228
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yN/l/0,cross/SUS6h8gx25-.css?_nc_x=Ij3Wp8lg5Kz
200 OK 4.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yN/l/0,cross/SUS6h8gx25-.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4583)
Hash ab65bac2c7279039d3e5c2c6ad049d61
3b2a18103aa62d91b9b13f098472d463b9938b8c
fe0b50ec4976f19fd6dc3a32fd3f14212db4cb5331498350e04dd33e60524495
GET /rsrc.php/v3/yN/l/0,cross/SUS6h8gx25-.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 18:53:57 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: q2W6wscnkDnT5cLGrQSdYQ==
x-fb-debug: Q1K8cf2h/+LJO7TdJzDu0WaqeTcNT93ZBk+JvhC69CZZ8AkDoO49linyifnvx8UbSdGd0x8uz9YcHuJok4ASPA==
content-length: 4625
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yt/r/uR54Z36ozn1.js?_nc_x=Ij3Wp8lg5Kz
200 OK 85 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yt/r/uR54Z36ozn1.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18622)
Hash 1e5ea6e1f1a9be8d41c1878d67d96255
13604433733135a91274c754a6b3148822458480
78f6be70e64f8cb49715f286f4bf814a05e6fced4fd575b69c60fc29e44c8908
GET /rsrc.php/v3/yt/r/uR54Z36ozn1.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 19:43:43 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: Hl6m4fGpvo1BwYeNZ9liVQ==
x-fb-debug: kZjpJj0TSHMG4aVJQk+3LZNbJiEz3+IlwmT4OTi5qSuUiT7f7ki6766wGkiD9SfaTN/LK6yrvgrJeOP2xbqJ1w==
content-length: 85121
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5542)
Hash 1ad15afc034f310427c81b0759603a2b
e5efd1d029dccf5fa8128c84aadb6544a4ab60e0
fedf63f655f9eef24c517c3d6762fb07b142213ba623d4a0b06614fb5d9754bd
GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 31 Jan 2024 06:01:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: GtFa/ANPMQQnyBsHWWA6Kw==
x-fb-debug: DNp4HLoo5qFXDFXv6nhmUc1faBUTKjQsYrdr151EegnG850QGHK21N3VcaVIkS/eV4VhMBbq4U0HQ0ebYFsRzQ==
priority: u=3,i
content-length: 12334
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yM/r/rVKGFNFAcp8.js?_nc_x=Ij3Wp8lg5Kz
200 OK 17 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yM/r/rVKGFNFAcp8.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (10595)
Hash 28148b8f5ce407c1663403d659ac4b17
e91b1efcaeaff30e7c1efad6dee9d15ecbc9bca6
ea4645f74fd8ba239b8847a159345fa1b248e1c86aa9cf391a6c29ea33989b2c
GET /rsrc.php/v3/yM/r/rVKGFNFAcp8.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 18:28:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KBSLj1zkB8FmNAPWWaxLFw==
x-fb-debug: ULa1ifkifaw4AVtjgBivk6DCnXiP6qSeMDZIWXKM+QedGiQsay69FjDKoFz0wvJrO7AEEHadxpfpaSJO1iO4hA==
priority: u=2
content-length: 17399
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yD/r/GL3fwyPuftm.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.6 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yD/r/GL3fwyPuftm.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1984)
Hash 6e9da4ca37bd91ed4b55bdfd94d641e6
581d1c986cf5809cd2fc1859f732d936b53708a8
b24defbd5bcb2f39db991c8361c62e39b0f199d8d72fa9f023739defee55dbd3
GET /rsrc.php/v3/yD/r/GL3fwyPuftm.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 24 Jan 2024 19:05:30 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: bp2kyje9ke1LVb39lNZB5g==
x-fb-debug: GqtmctLOYD61RjC+Uq2pneimWyxmbcnDnE7sR3gGlrEpAvIp2044/Ujt+uGz8f1jJGKglOZafWz7hswFVwvmOA==
priority: u=3,i
content-length: 1649
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y2/r/hWOdyLOhufr.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y2/r/hWOdyLOhufr.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4057)
Hash 4542c58795523351cacfecdb315eba00
e44e00242137798121e12b6cb4353fac2e127af3
ecb041648adda0cdbf6d2b01eed61e1cc22a1f3d33026ee58c3b89b4ca2e40e1
GET /rsrc.php/v3/y2/r/hWOdyLOhufr.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 02 Feb 2024 01:29:02 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: RULFh5VSM1HKz+zbMV66AA==
x-fb-debug: 4Mpfo78T4kNebuVY3UYtNuZ9c7jrpkc+l9tBks7jcJYq1ClucnjDdFDPYMoo/cnLLQFF5a7priqBhckn6j/wZA==
content-length: 7168
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
200 OK 293 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (327)
Hash 2f913d812811ef7e6fca30334c5972e2
d17caaa167443dc08696c672380f237e0db3fb02
ee8918a2f5d163099104b70f79065abc8fd309e69add57170546f2706956eef8
GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 30 Jan 2024 20:54:02 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: L5E9gSgR735vyjAzTFly4g==
x-fb-debug: yCTNeV6mdHmJj5EipATBBGGRhJiKB8VO6yutiXidW+bTCHUmmKVWeqlJ8ojgwhLE0uToREMWV73oYMzoD7Iqtw==
content-length: 293
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yr/r/9-l4Ncxxlm6.js?_nc_x=Ij3Wp8lg5Kz
200 OK 56 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yr/r/9-l4Ncxxlm6.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (48918)
Hash 5f226f67ed36dc1dd4455594cbd197c7
9b55c32afdeaa9e8f8d911817a41be674558241b
956be2f71f383056f11c2b255abf20dbe9e6b99ed3583522b91119f3fe8262ef
GET /rsrc.php/v3/yr/r/9-l4Ncxxlm6.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 04 Feb 2024 00:01:38 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: XyJvZ+023B3URVWUy9GXxw==
x-fb-debug: bhDq0SyPPknISLEb7mXbMCz4NZHUY3xV/o8a2Ia5czikzDe4tHyHQj0wUig0b5AanIQ2IE6xN3W0mYp54uBTpQ==
priority: u=3,i
content-length: 56414
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yM/r/uQ-GLcR3h5F.js?_nc_x=Ij3Wp8lg5Kz
200 OK 4.8 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yM/r/uQ-GLcR3h5F.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (9258)
Hash 52b76f9ae9008cf3e3f0163f4ce7a320
2c4d99ad86049eac02bdcbecc17eee94c9a98f1b
f69abfed963cbf1533665e6a86169d6af99c436136e8dbea9d4cad2702148cf9
GET /rsrc.php/v3/yM/r/uQ-GLcR3h5F.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 27 Jan 2024 05:01:57 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: UrdvmukAjPPj8BY/TOejIA==
x-fb-debug: NfyxklbsXHEyYCrCffLKVEpsYmaYZUZdXjzNuhMlERqtW1BBfv7IOOT8LINJ/sBNmLYgiIVk0sb/WSqWK2IFsw==
priority: u=3,i
content-length: 4792
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yd/r/TL4D9INH6MR.js?_nc_x=Ij3Wp8lg5Kz
200 OK 183 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yd/r/TL4D9INH6MR.js?_nc_x=Ij3Wp8lg5Kz
IP
Hash 283a9068415bc01d8d2855349cf2be5d
98ba5f5dc7a688bc5c8270a4e536b477a847b30b
f7ffaaf13d6ce34bfa339769c87f33a1a4bb23a51f82a6534cca26e7dc871746
GET /rsrc.php/v3/yd/r/TL4D9INH6MR.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 25 Jan 2024 22:15:37 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KDqQaEFbwB2NKFU0nPK+XQ==
x-fb-debug: ZuW47C6CnpSKKHYqvz0QQ4YgHQYUX1mhzIOnivvmSdt9f26IPQFvUybb/GTFLgfiDWfZ2L/pfOBejIXzllYA0g==
priority: u=3,i
content-length: 183
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yU/r/O4UmSNWin4E.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yU/r/O4UmSNWin4E.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (8848)
Hash 40fab775b9d5c0cd37478bb98c8d3fd4
3a47077aff06f1dcb1c7f15371f717bcc0501ddf
15bda90227b20a41920214b955645583399f5231147f10d3dee099fe91b442e4
GET /rsrc.php/v3/yU/r/O4UmSNWin4E.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 05:38:20 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: QPq3dbnVwM03R4u5jI0/1A==
x-fb-debug: b4tvWsQW4Kw/RPpLS/jwdIs5QlSAyESmzCRfWqTdEtrKjbGIldtXaPmG7/7kynH/7CfNoIkWpFM2WgGUkZ32Dw==
content-length: 16342
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yM/r/AvVGWB2t0Jj.js?_nc_x=Ij3Wp8lg5Kz
200 OK 16 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yM/r/AvVGWB2t0Jj.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (15192)
Hash c96703b4d0ca2d1b8d7df3ae88bb2b3b
6907f7a5edae7886da011b42e70bfd0d1efb9df5
851ce616191fde18f868bf473224bf7a913ca304ed19f043a82649a46f3ad8c1
GET /rsrc.php/v3/yM/r/AvVGWB2t0Jj.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 31 Jan 2024 02:58:45 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: yWcDtNDKLRuNffOuiLsrOw==
x-fb-debug: 6rlHwCTDb1T4puzbYHCE2ZChrr+oYr/odJU6/jxED1GtAEB37jVssdW4UCWLKPZX9At9PvN1j5b51+zwfuR1/A==
content-length: 16142
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yQ/r/3wX2w-O_9zc.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yQ/r/3wX2w-O_9zc.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (1491)
Hash b95ec91a00eb9acc4ca4e48a770f98f5
a704edf62ce2d8a1508be31eb6c41aa2c1955a7e
b3624c76af91730fbcd365fdd8936512f4ea21a7dc1211cd12758e288821dd38
GET /rsrc.php/v3/yQ/r/3wX2w-O_9zc.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 23 Jan 2024 21:32:00 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: uV7JGgDrmsxMpOSKdw+Y9Q==
x-fb-debug: 0huusC5h8qORPZtYK67HlkZJ887KnsSf5Zey+EjQD4s/81eeI1rCteZk9c5O6wK/y/909tTr4SIZ0RWwlOLmgQ==
content-length: 1243
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iUY_4/ya/l/de_DE/SV0HgmB8RsT.js?_nc_x=Ij3Wp8lg5Kz
200 OK 9.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iUY_4/ya/l/de_DE/SV0HgmB8RsT.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5962)
Hash e3a5366d6b7c396bbe7d0ce9d90b47c7
e9b6e8457d8c38f4bbeedfbcc9683ce494e2fea3
d7816aea1b826412883c779fa47edc24ea53ecf3faba5f0f500a1a05c8435f7e
GET /rsrc.php/v3iUY_4/ya/l/de_DE/SV0HgmB8RsT.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 01 Feb 2024 21:05:04 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 46U2bWt8OWu+fQzp2QtHxw==
x-fb-debug: oshe8jvUKN5Pbap3NBKQmCwd0ssb8sQhWPInklVwiZliWq7KdWbVARFfNHR1uh5qeLnkLpmeKKxdcX4Ji71eKg==
content-length: 9061
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yy/r/2f61oWyjOj5.js?_nc_x=Ij3Wp8lg5Kz
200 OK 5.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yy/r/2f61oWyjOj5.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (4643)
Hash 2f3bd3f5da2acb55828c5dcefde8a274
00f21373747009968870397a243322c067466c97
fae6708a549046751d2ec4b001dd8402482494ec07a924132775332ac354f2a1
GET /rsrc.php/v3/yy/r/2f61oWyjOj5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 30 Jan 2024 20:02:42 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: LzvT9doqy1WCjF3O/eiidA==
x-fb-debug: +V1RZwcW/i6eQWrklYh7235a7Q/8kl9V3qVs521hxv0r3fywlEm1FxN3rSFohjEu4KCnU2rqcCPaU6ZTw+KoPg==
priority: u=3,i
content-length: 5358
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yr/r/QkiwnAlh1Fu.js?_nc_x=Ij3Wp8lg5Kz
200 OK 4.1 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yr/r/QkiwnAlh1Fu.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (2992)
Hash 05071013c25ee2e73dc8a862d447e248
abfcbacf1e5f570c373f02c3089611af74d64cb5
45a4f7d0abb6e0de07b16d782cb8f5eaf3c3308ac06ccb1c0a1e4870e3182462
GET /rsrc.php/v3/yr/r/QkiwnAlh1Fu.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 26 Jan 2024 18:30:51 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: BQcQE8Je4uc9yKhi1EfiSA==
x-fb-debug: lId+ebGGq0N2qRNQ1DM5fWIacQ7Kvzz1MmwGzcXYuSIPcgar3CtLp+37D813tOsYMDoxxzJ2DozAxgqy0RpOCA==
priority: u=3,i
content-length: 4129
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3ih0C4/yM/l/de_DE/LXOQN0stQO4.js?_nc_x=Ij3Wp8lg5Kz
200 OK 44 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3ih0C4/yM/l/de_DE/LXOQN0stQO4.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (11517)
Hash 53546fc608bc6d9893fc4f27442c1705
3206c9da634cdaea8e87512aa77c298d4dbb0b81
dad84f8644881cabffd88ea9e64e7ecf575f199cb9e1ea208259559c0ca1f5b9
GET /rsrc.php/v3ih0C4/yM/l/de_DE/LXOQN0stQO4.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 25 Jan 2024 19:10:42 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: U1Rvxgi8bZiT/E8nRCwXBQ==
x-fb-debug: 5O9qoil3OC/oCbwqAE0EEV20o5kIPvYwi8F4KJQJHVE6J9eYL9n6Xt+NTI2McMuCROI9Ap2xJvHx8ZKZSzjEdg==
priority: u=3,i
content-length: 44337
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3i2aq4/yo/l/de_DE/cDcOw13Y5VI.js?_nc_x=Ij3Wp8lg5Kz
200 OK 5.5 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3i2aq4/yo/l/de_DE/cDcOw13Y5VI.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (2905)
Hash 09373b79162d77e9334934d576382da5
52cdaa754fcdd0d236fb1b70d3e1b1df18f227d5
ab3714ac3406f1b52f14c8a3cef0d7f61c66e0af8f66464ca341e396fc797fa0
GET /rsrc.php/v3i2aq4/yo/l/de_DE/cDcOw13Y5VI.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 02 Feb 2024 02:26:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: CTc7eRYtd+kzSTTVdjgtpQ==
x-fb-debug: 0YGvgn95xzEL6GamnlhyLW83ltal6fjme7Htmkc8bhTu9Qye/NDK9wTDD5l/DFG+UgxUk56fQLefq1c2yT92qw==
priority: u=3,i
content-length: 5470
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yG/r/h8ulkmpky8f.js?_nc_x=Ij3Wp8lg5Kz
200 OK 15 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yG/r/h8ulkmpky8f.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (56522)
Hash 95b85ba6147504d3f15ba46a0c98a2a3
7c252e33f9efe655e2a989ab7c306dee04650cb2
c7e30ff750f116558ed9dff6bf802e914624409873f0be3f319bd8289bec8b36
GET /rsrc.php/v3/yG/r/h8ulkmpky8f.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 30 Jan 2024 18:56:21 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: lbhbphR1BNPxW6RqDJiiow==
x-fb-debug: 9KoYbO0tioCsZco1atT0DS+hnViUDdau9eynMOVTlrcr+3TqK/2PeN2b72rU5YX0MwMNh8QB9kH5utvXX8lrzw==
content-length: 15174
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yp/r/HPeUx8Up7h9.js?_nc_x=Ij3Wp8lg5Kz
200 OK 41 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yp/r/HPeUx8Up7h9.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (5085)
Hash df7d9d2d45718490d3caee957447882c
8a2f8eb0b8647b2db8685432e779fa6efc5d0b99
1f7f84b641e5a789962c48adc487149a7bfda1362e264d4f19fbf53fe7ea3d32
GET /rsrc.php/v3/yp/r/HPeUx8Up7h9.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 01 Feb 2024 21:14:54 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 332dLUVxhJDTyu6VdEeILA==
x-fb-debug: j8Cvhp74aq/SOCuyk2eqmymDctpWy2WQxnhMAaK3dVpfHjEQyQXARphpyaq2Uem8VhDeP/917QZF2ENwlg3PVw==
priority: u=3,i
content-length: 41116
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yW/r/xU8FOAK8MgS.js?_nc_x=Ij3Wp8lg5Kz
200 OK 252 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yW/r/xU8FOAK8MgS.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (457)
Hash 5730a2e6c10bcf208d109be28afae730
a0c2fbf95dfc382f47192e46d65a22636db17e5b
cf30fd0c3fcd422552f1adc1e41e8a20d19bc66e12a94c5a82221b263fac9952
GET /rsrc.php/v3/yW/r/xU8FOAK8MgS.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 25 Jan 2024 21:30:07 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: VzCi5sELzyCNEJviivrnMA==
x-fb-debug: YpmNNs0qejP4vrUP12zSKCu+d3qh6M5vBtxlyCt9NrUwDuHF8XNat+dh960KvXZ1Ze9oQ43Ulkl0+RjdwKtzTA==
priority: u=3,i
content-length: 252
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=0&byteend=947
200 OK 948 B URL HTTP/2 video.xx.fbcdn.net/o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=0&byteend=947
IP
File type ISO Media, MP4 Base Media v5 \012- data
Hash 86ba96ad8f80f4d750ac6b1c6bbe1405
ee3dd173b9cbed54ce67f83a013596dd9f986e30
6d8844a0b6814599da77e1f16c18e8f462f42f9c43d8b905dc8e2c1c7b26ccb3
GET /o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=0&byteend=947 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: video/mp4
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-length: 948
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Sat, 04 Feb 2023 05:54:27 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ys/r/HQ21UiKSWkB.js?_nc_x=Ij3Wp8lg5Kz
200 OK 12 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ys/r/HQ21UiKSWkB.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (27906)
Hash bd20c2af18b5d87d50d340a85b5583ef
25c7ef5a92a42ad27e52f530bc58e9785f06f012
c0e5a2c68bf7e4a63d71c105c5d5ad3e845f3c94d1e48497d03a902ae793f611
GET /rsrc.php/v3/ys/r/HQ21UiKSWkB.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 25 Jan 2024 19:42:47 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: vSDCrxi12H1Q00CoW1WD7w==
x-fb-debug: zfdOvipZT+ZXaYuFuvzBLu4TaC9yAH995pPYOXJ/m6+6z3Lfv5DgRAQ4buVqyis6uu3FiJsqWTsYaRuvlwMK1Q==
content-length: 12445
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y9/r/ie38mp0O07P.js?_nc_x=Ij3Wp8lg5Kz
200 OK 10 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y9/r/ie38mp0O07P.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (18915)
Hash 084615819834e23edead2d2e6fbb0db2
656c5c532f295c4c3a788ea0a719da7686c05bfe
41c35b99b989e96dd40bfbbfb44fe26556a062069ec4e05ad67f51e2259d295e
GET /rsrc.php/v3/y9/r/ie38mp0O07P.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 02 Feb 2024 00:25:47 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: CEYVgZg04j7erS0ub7sNsg==
x-fb-debug: 1jugfSHogxBt2cL/NhbasRQv3+IYi7EAY1ycc8hl/TX7sWk7c3MkD7rDUAk9B18U76B3jNWxDfS9wsg9oWFujA==
content-length: 10390
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yz/l/0,cross/358PKF8lngq.css?_nc_x=Ij3Wp8lg5Kz
200 OK 6.4 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yz/l/0,cross/358PKF8lngq.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (8976)
Hash 46d17c189fd6fc014ab2d1f51c1a2e07
da141f81ad1389a71e61ade8f79748c80db692ad
5948ea00ea3ddd9815cb52c800908afaff80549366cb6d295fa02711221eb270
GET /rsrc.php/v3/yz/l/0,cross/358PKF8lngq.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 01 Feb 2024 22:06:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: RtF8GJ/W/AFKstH1HBouBw==
x-fb-debug: R07mNxZALD8jI/Q++YyhMZnAfNRr3NEj7eb3qBMLD7TfqoAy9k8GPZOx/qtmuO0SoyI4TuY/WQhGidMrTCrR4A==
priority: u=3,i
content-length: 6371
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=948&byteend=1351
200 OK 404 B URL HTTP/2 video.xx.fbcdn.net/o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=948&byteend=1351
IP
Hash 700edfd744431bb09ece63824f5c1be9
a2b490e663ad38772ec8fc5730480f60d7fb3e5c
e2327813a7546b8bcf2b1e2bd0dd81deb6ee730f53b04b56964550a6492d0143
GET /o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=948&byteend=1351 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: video/mp4
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-length: 404
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Sat, 04 Feb 2023 05:54:27 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=1352&byteend=53547
200 OK 52 kB URL HTTP/2 video.xx.fbcdn.net/o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=1352&byteend=53547
IP
Hash 4522956e7df15992fac8378343705743
890a50a1616ccb236df56dd4224ffefdc09b40c2
b09465b725db2dca58dde3e7ccd5aa070bd2dc0fff32c0c617dc4638be45f76d
GET /o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=1352&byteend=53547 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: video/mp4
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-length: 52196
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Sat, 04 Feb 2023 05:54:27 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=0&byteend=907
200 OK 908 B URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=0&byteend=907
IP
File type ISO Media, MP4 Base Media v5 \012- data
Hash 7aa97e06536820d1ababa31bb5042dc5
d3c862770d52b4c3aeac88070cbc674b40fad9ff
28d62dea39870caf9219dea59ce66964b978d3db9b5ff7662117da61f902f6f3
GET /v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=0&byteend=907 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 16 Mar 2022 14:28:57 GMT
content-type: video/mp4
x-haystack-needlechecksum: 2144329829
x-needle-checksum: 949076142
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=949076142
content-length: 908
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Sat, 04 Feb 2023 05:54:27 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=908&byteend=1323
200 OK 416 B URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=908&byteend=1323
IP
Hash 5990eda31ea1d2e230ff0b5c0d73cb48
32f84f20aa4235c7ab1aa0601a9f17ac74ee5ca4
e02ca999463f3746a4cfe4b5c5c1ecb23efb177820a10ca3da5af3ea0b096e3f
GET /v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=908&byteend=1323 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 16 Mar 2022 14:28:57 GMT
content-type: video/mp4
x-haystack-needlechecksum: 2144329829
x-needle-checksum: 949076142
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=949076142
content-length: 416
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Sat, 04 Feb 2023 05:54:27 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=1324&byteend=18000
200 OK 17 kB URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=1324&byteend=18000
IP
File type Maple something\012- data
Hash 3410eaf1bf596e5e3ee39c5d84d27188
37f8f30ab965f62a1b3c3dc6ae3c819d1cf18571
d30d8d81520fd4caf5f1da6dc3e3f52287145bc5b6b4421a6a059186a4067782
GET /v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=1324&byteend=18000 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 16 Mar 2022 14:28:57 GMT
content-type: video/mp4
x-haystack-needlechecksum: 2144329829
x-needle-checksum: 949076142
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=949076142
content-length: 16677
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Sat, 04 Feb 2023 05:54:27 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y0/r/EBIXEtYgzdb.js?_nc_x=Ij3Wp8lg5Kz
200 OK 1.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y0/r/EBIXEtYgzdb.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (2185)
Hash e4938d18a8ad67240177babbde09ff0d
01882054963126dc49be8cee0c98a0ea4a2d595f
47bad3ab04697a53dcc7a2ca3e76b0b105ca4f0ed486f117efc00bacbb6ddcc3
GET /rsrc.php/v3/y0/r/EBIXEtYgzdb.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 30 Jan 2024 20:54:33 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: 5JONGKitZyQBd7q73gn/DQ==
x-fb-debug: ak/JkAGcR752N7Q8CENk/xpRxN/cqS95kkaBeGjGHAkNOfMwutY4ULQmJlPooWewrZIZrNkOwFApuvIOVXhqxQ==
priority: u=3,i
content-length: 1336
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=18001&byteend=34612
200 OK 17 kB URL HTTP/2 video.xx.fbcdn.net/v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=18001&byteend=34612
IP
File type Maple something\012- data
Hash e06c7dc47b7597aeaa2c935bfdffbc6b
6f85dedaa3e1edde0181b59ced4d45da1162399a
95c72182183bf766b530f80d98527f4b6645661178706da5ef38637381c8ae71
GET /v/t42.1790-2/275877392_539795064082324_1545888292363200632_n.mp4?_nc_cat=100&ccb=1-7&_nc_sid=5aebc0&efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfYXVkaW9fYWFjcF82NF9mcmFnXzJfYXVkaW8ifQ%3D%3D&_nc_ohc=Uaq7wRmasyoAX8okXdb&_nc_ht=video.xx&edm=AItmks8EAAAA&oh=00_AfDpwzKs7ULi9-JYB5A5uY9j7MZ_QuYc_-KM7JO3Msw9_A&oe=63DE1359&bytestart=18001&byteend=34612 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ERANGE_SUCCESS
last-modified: Wed, 16 Mar 2022 14:28:57 GMT
content-type: video/mp4
x-haystack-needlechecksum: 2144329829
x-needle-checksum: 949076142
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-digest: adler32=949076142
content-length: 16612
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Sat, 04 Feb 2023 05:54:27 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
video.xx.fbcdn.net/o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=53548&byteend=98759
200 OK 45 kB URL HTTP/2 video.xx.fbcdn.net/o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=53548&byteend=98759
IP
Hash 1852393120aa5fc7990d9122da278f5a
45591abfc258f34392aead2a2ceaec8604168516
f98009567f1a793503f632e554c0dbdba8b474d9f1793c623ffeb938cee2e064
GET /o1/v/t2/f1/m21/1651647468516672.mp4?efg=eyJ2ZW5jb2RlX3RhZyI6ImRhc2hfdjRfcGFzc3Rocm91Z2hfZnJhZ18yX3ZpZGVvIn0&_nc_ht=video.xx.fbcdn.net&_nc_cat=101&strext=1&ccb=9-4&oh=00_AfDN6hZRm8ZC1ykxlHs689x3bGpqL-eyDh38AdLBPW-IRA&oe=63DFD75D&_nc_sid=57d5c5&bytestart=53548&byteend=98759 HTTP/1.1
Host: video.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: video/mp4
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-length: 45212
accept-ranges: bytes
x-fb-trip-id: 436667874
date: Sat, 04 Feb 2023 05:54:27 GMT
cache-control: max-age=1209600, no-transform
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3ir9E4/yW/l/de_DE/Yk9McB-zTBm.js?_nc_x=Ij3Wp8lg5Kz
200 OK 74 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3ir9E4/yW/l/de_DE/Yk9McB-zTBm.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (6676)
Hash ebb8c85afec448a33fb5a7d0722fa563
cf96dab34a703b9c8f2287c36a46086776ff57e6
8cbea23f394655731e72908b31ddf52e546d7f8a525db4d1d2578237949eddae
GET /rsrc.php/v3ir9E4/yW/l/de_DE/Yk9McB-zTBm.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 23:15:42 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: 67jIWv7ESKM/tafQci+lYw==
x-fb-debug: 97yB/CwJmVP9JMoUm9UkmZQi1YoIpt0bYS4RqEyFUOPatbSoNrZwaM7QJAi9LbQa1nkA4qk2UEer5tiL0AyPVw==
priority: u=3,i
content-length: 74330
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y3/r/qZ4UZhFRWH_.js?_nc_x=Ij3Wp8lg5Kz
200 OK 7.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y3/r/qZ4UZhFRWH_.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (13362)
Hash 3b4bbbbb6c4d3fcb9587d0bc8229dde1
88728c121e0bc642dca35944a85d99d09fce97f4
a14772b3d6c008bc7d36294c40d87a1be13642cbda4a3a75dc3bf2e4fb4a1dc5
GET /rsrc.php/v3/y3/r/qZ4UZhFRWH_.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 18:31:19 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: O0u7u2xNP8uVh9C8gind4Q==
x-fb-debug: 5L9qHNsc1q/mEMqbc7hOaxSdYAQsC1bMWy/9m5+ML/kADvCjIIVYiJ0OLQl7hiHqFVr0oiOy/oJLQD3XzR5DSA==
content-length: 7242
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yv/l/0,cross/DG7U0M2cyIn.css?_nc_x=Ij3Wp8lg5Kz
200 OK 711 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yv/l/0,cross/DG7U0M2cyIn.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (967)
Hash ad02c7c15cbd2a0d1f8c23237321648e
9d551ad3749b64e23e304d70662adaaf4b15c394
e01ca7596c7ee939b33d03b84633dfe01e81620e1e0ddabf36a6f3bbb19c568d
GET /rsrc.php/v3/yv/l/0,cross/DG7U0M2cyIn.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 30 Jan 2024 18:48:52 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: rQLHwVy9Kg0fjCMjcyFkjg==
x-fb-debug: 24iHGyCWClMv4uvOoPgomY46FVMgUEGFXCMGEowNxqxwYIJSjHqtEasVNs+3ecwGnykt35AVuExiOE9bZSnEMw==
priority: u=3,i
content-length: 711
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iY6z4/yu/l/de_DE/Lfq00GjIqJK.js?_nc_x=Ij3Wp8lg5Kz
200 OK 4.3 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iY6z4/yu/l/de_DE/Lfq00GjIqJK.js?_nc_x=Ij3Wp8lg5Kz
IP
File type C source, ASCII text, with very long lines (8313)
Hash 521f550c38cc1d3a4dc2af5ba2558ef4
9b323d9c0db38555c82394722ee41a11a5d7a8c2
a2bdbf9c6b1e21bb317ed2711498c88fe4b96ad0ae985e61a8a940cd1906ad4a
GET /rsrc.php/v3iY6z4/yu/l/de_DE/Lfq00GjIqJK.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 01 Feb 2024 21:57:01 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
content-md5: Uh9VDDjMHTpNwq9bolWO9A==
x-fb-debug: CNsh561OHKKe8uFRVBM5ZKgaJKrcUF+69zjxEniG+EOOynaEMQ9yPgMuPY01EbJhpCSCdLTZ5xl1M8X9C1MDSw==
content-length: 4267
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iRUb4/y3/l/de_DE/n_IX6FDFvxX.js?_nc_x=Ij3Wp8lg5Kz
200 OK 11 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iRUb4/y3/l/de_DE/n_IX6FDFvxX.js?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (16965)
Hash ca064c729bc161472c39628fc6b71621
eb58b9c404731b239fb8080f8e413906997bad37
039b5051a76d53dead047929a1eb954e0916476d6ad2dd67eea8337d3837cc68
GET /rsrc.php/v3iRUb4/y3/l/de_DE/n_IX6FDFvxX.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 26 Jan 2024 20:02:19 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: ygZMcpvBYUcsOWKPxrcWIQ==
x-fb-debug: QyxumPBMPgNRRDveqjaKQLSUR/7EOsWlZcCWFFvmB80MmwHFVAcl0TVaSWIa7wsTQoFAJlVBdccS8JSWqykAYA==
content-length: 10841
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/y2/l/0,cross/pOn9-uxrtDo.css?_nc_x=Ij3Wp8lg5Kz
200 OK 3.8 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y2/l/0,cross/pOn9-uxrtDo.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (3357)
Hash 2933e4d4e448622ec057f79e36e02662
30f65f90d7411f4d3cdd66b170182d8444931867
1050f2389c77c5c20868450ea3ef5a8689c8d9892297a38dc9664bcd12756126
GET /rsrc.php/v3/y2/l/0,cross/pOn9-uxrtDo.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 18:55:57 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: KTPk1ORIYi7AV/eeNuAmYg==
x-fb-debug: Yjc/yUmbDcoiH1a6lt5aSejKEH6/iLxgY0CbuqRzC6ZKjtAKULRw8vCLPsxwcC5hEexNsbV9UYbwyUKsiMkE6w==
content-length: 3798
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/ye/l/0,cross/otw00Zri-_k.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/ye/l/0,cross/otw00Zri-_k.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (6018)
Hash 45fe1f2b5fe014654a8808c9d2bf7032
13f594256b670d9082adc56f3a7bc91881855126
2099ac623fbc4c750de04bc7c43811a1cb23afee5460c31e1986d1d7977c93ea
GET /rsrc.php/v3/ye/l/0,cross/otw00Zri-_k.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 18:55:57 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: Rf4fK1/gFGVKiAjJ0r9wMg==
x-fb-debug: fQZeFDXzJhLPIL4evr62vto0MUs2bAEjc/tZqAGY3zwg2SkrDEROwBwwsc8FwaswmhXRPQnkG0WkiCjMirRrxA==
priority: u=2
content-length: 5193
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yt/r/ag-Kz-WMvnK.png
200 OK 965 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yt/r/ag-Kz-WMvnK.png
IP
Hash 261f7d5481d66c0b00301c699d2dc075
46f4c19630ec405104bdf4fb5da062459947d414
1d487a90990d7faa30584e586b5ac2fb7f67faf15d7afc37fe024131088fdc82
GET /rsrc.php/v3/yt/r/ag-Kz-WMvnK.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yO/l/0,cross/dIeog4kQ8bz.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: eAFd0hA109+Saq2CKxwDiw==
expires: Thu, 01 Feb 2024 06:50:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
x-fb-debug: w9TZiONPZ7QTmlXbS9OO/4/4B6zHO2tddxHtPB+rUlVHliRChcoIiOr/gJTjLzsXKLn2AE9mNrnCMoPXYeOpVA==
priority: u=3,i
content-length: 330
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yN/r/LW0MdURtWli.png
200 OK 17 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yN/r/LW0MdURtWli.png
IP
File type PNG image data, 49 x 605, 8-bit/color RGBA, non-interlaced\012- data
Hash 14772b13b0b7e7b4906f782861d9f59d
33527aeeef006a787f88ac299dc1e5d8c8a342c8
4598e542af21a4851e6d529a0441077c56e1edbcb2d4e05f2b33eb40f89c6b9d
GET /rsrc.php/v3/yN/r/LW0MdURtWli.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yO/l/0,cross/dIeog4kQ8bz.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: FHcrE7C357SQb3goYdn1nQ==
expires: Thu, 01 Feb 2024 04:43:11 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-fb-debug: KgPezvKwkhJgLI90n9K1KV+rzsz39Z7Gd0j6s5+VG9mTZdAhk1yPycWBvgmtJUdAWExO7sP0l7a+X7/YD+JRqA==
content-length: 16804
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yj/r/PkV8_5hF_8w.png
200 OK 1.7 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yj/r/PkV8_5hF_8w.png
IP
File type PNG image data, 21 x 131, 8-bit/color RGBA, non-interlaced\012- data
Hash 5de0f70bf3dcdc1fd7bab13739da5fcc
2764b75ee66ec1db3c9a930c77adbcea36b6d6e1
e3260cf1bffdd623bbcca489370b3e8ecfa08aca876bb6d8fa5379bb9543686b
GET /rsrc.php/v3/yj/r/PkV8_5hF_8w.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yv/l/0,cross/DG7U0M2cyIn.css?_nc_x=Ij3Wp8lg5Kz
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: XeD3C/Pc3B/XurE3OdpfzA==
expires: Thu, 01 Feb 2024 03:53:33 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
x-ua-compatible: IE=edge
x-fb-debug: Im1R3ne2yuhZL3svTNQrtr3WjA9v6Dwd1RyWk+LIho6QUzrg26UR+4G6sl382O8W3vVTPgOeNLIZcJoh0fzb+Q==
priority: u=3,i
content-length: 1706
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3i2dl4/yx/l/de_DE/Jsf3Ygv-T7J.js?_nc_x=Ij3Wp8lg5Kz
200 OK 0 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3i2dl4/yx/l/de_DE/Jsf3Ygv-T7J.js?_nc_x=Ij3Wp8lg5Kz
IP
GET /rsrc.php/v3i2dl4/yx/l/de_DE/Jsf3Ygv-T7J.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 03 Feb 2024 03:06:57 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: OMQN/x4tAZgbVhZjpu9NMw==
x-fb-debug: lRSnXRPHn0kiUfF0u4GxrypAm0VIfDkhSX+7z7XbyranCjQZi9TkNsRvtIn/mbJWK+JjoHGoSfn1ya59wfuC3Q==
priority: u=3,i
content-length: 80088
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3iBf-4/yW/l/de_DE/hCZ6KejT1fQ.js?_nc_x=Ij3Wp8lg5Kz
200 OK 0 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3iBf-4/yW/l/de_DE/hCZ6KejT1fQ.js?_nc_x=Ij3Wp8lg5Kz
IP
GET /rsrc.php/v3iBf-4/yW/l/de_DE/hCZ6KejT1fQ.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: br
content-type: application/x-javascript; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sun, 04 Feb 2024 02:03:16 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: mKiTzeepa0LncUVzhTlZjw==
x-fb-debug: 1k9sJwHzBpZqczNM34D2mHhk2qP0MoUqdJFbk869AQafXl7HpTn2641+otzeY/zyC3/i3wg6TiskWfSFw6eDIA==
priority: u=3,i
content-length: 350820
x-fb-trip-id: 1679558926
date: Sat, 04 Feb 2023 05:54:27 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.hct-busvermietung.de/index.php
200 OK 0 B URL HTTP/2 www.hct-busvermietung.de/index.php
IP
ASN #24940 Hetzner Online GmbH
GET /index.php HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
p3p: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"
content-encoding: gzip
expires: Mon, 1 Jan 2001 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; path=/; HttpOnly
474d34055f4bac50e70963951e35f40c=de-DE; path=/; secure
last-modified: Sat, 04 Feb 2023 05:54:24 GMT
content-type: text/html; charset=utf-8
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/media/plg_jchoptimize/assets/gz/30/0/7f7d0dd7c2c5700a58a1a5e6f1c60713.js
200 OK 0 B URL HTTP/2 www.hct-busvermietung.de/media/plg_jchoptimize/assets/gz/30/0/7f7d0dd7c2c5700a58a1a5e6f1c60713.js
IP
ASN #24940 Hetzner Online GmbH
GET /media/plg_jchoptimize/assets/gz/30/0/7f7d0dd7c2c5700a58a1a5e6f1c60713.js HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
expires: Mon, 31 Oct 2022 13:01:15 GMT
accept-ranges: bytes
cache-control: Public
vary: Accept-Encoding
content-encoding: gzip
last-modified: Sat, 01 Oct 2022 13:01:15 GMT
content-type: application/javascript
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.hct-busvermietung.de/media/plg_jchoptimize/assets/gz/30/0/7763cd124048b8f311b531a4d84c3341.css
200 OK 0 B URL HTTP/2 www.hct-busvermietung.de/media/plg_jchoptimize/assets/gz/30/0/7763cd124048b8f311b531a4d84c3341.css
IP
ASN #24940 Hetzner Online GmbH
GET /media/plg_jchoptimize/assets/gz/30/0/7763cd124048b8f311b531a4d84c3341.css HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
expires: Mon, 31 Oct 2022 13:01:15 GMT
accept-ranges: bytes
cache-control: Public
vary: Accept-Encoding
content-encoding: gzip
last-modified: Sat, 01 Oct 2022 13:01:15 GMT
content-type: text/css;charset=utf-8
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
www.facebook.com/v2.3/plugins/page.php?adapt_container_width=true&app_id=511926995622995&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df274af7ca746be8%26domain%3Dwww.hct-busvermietung.de%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.hct-busvermietung.de%252Ff28d8695f34697e%26relation%3Dparent.parent&container_width=1140&height=281&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fhctbusvermietung&locale=de_DE&sdk=joey&show_facepile=true&show_posts=true&small_header=true&width=500
200 OK 0 B URL HTTP/2 www.facebook.com/v2.3/plugins/page.php?adapt_container_width=true&app_id=511926995622995&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df274af7ca746be8%26domain%3Dwww.hct-busvermietung.de%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.hct-busvermietung.de%252Ff28d8695f34697e%26relation%3Dparent.parent&container_width=1140&height=281&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fhctbusvermietung&locale=de_DE&sdk=joey&show_facepile=true&show_posts=true&small_header=true&width=500
IP
GET /v2.3/plugins/page.php?adapt_container_width=true&app_id=511926995622995&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df274af7ca746be8%26domain%3Dwww.hct-busvermietung.de%26is_canvas%3Dfalse%26origin%3Dhttps%253A%252F%252Fwww.hct-busvermietung.de%252Ff28d8695f34697e%26relation%3Dparent.parent&container_width=1140&height=281&hide_cover=false&href=https%3A%2F%2Fwww.facebook.com%2Fhctbusvermietung&locale=de_DE&sdk=joey&show_facepile=true&show_posts=true&small_header=true&width=500 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
facebook-api-version: v9.0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: VmgVKWhkuTgE4ZwNY8nTwra0wuDcUUzlh9fm+2X2Qys1c1df6n0rOdtPpkERSQC9/JsXlS55dXxoEIBs5Wb6EQ==
date: Sat, 04 Feb 2023 05:54:26 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.hct-busvermietung.de/images/T%C3%9CV_Saarland_neu_high-res.png
200 OK 0 B URL HTTP/2 www.hct-busvermietung.de/images/T%C3%9CV_Saarland_neu_high-res.png
IP
ASN #24940 Hetzner Online GmbH
GET /images/T%C3%9CV_Saarland_neu_high-res.png HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:01:35 GMT
etag: "b376-5e79c60050098"
accept-ranges: bytes
content-length: 45942
content-type: image/png
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
sw-assets.ekomiapps.de/static_resources/jquery.min.js
200 OK 0 B URL HTTP/2 sw-assets.ekomiapps.de/static_resources/jquery.min.js
IP
GET /static_resources/jquery.min.js HTTP/1.1
Host: sw-assets.ekomiapps.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
date: Wed, 04 Jan 2023 08:05:16 GMT
last-modified: Tue, 19 Nov 2019 20:26:08 GMT
etag: W/"a15c0a89a27a8a9a8f01d2383c8aa86b"
cache-control: max-age=31536000,public
server: AmazonS3
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bdba42cf1410fb617eeb4ffd3e0b9cb6.cloudfront.net (CloudFront)
x-amz-cf-pop: AMS1-C1
x-amz-cf-id: bszeAZGwT_VZbViUUqmjA-ZAJ2fEeyoxCzD0x0h4HU7qOuvIMJuoCA==
age: 2670550
X-Firefox-Spdy: h2
www.hct-busvermietung.de/media/mod_languages/images/de_de.gif
200 OK 0 B URL HTTP/2 www.hct-busvermietung.de/media/mod_languages/images/de_de.gif
IP
ASN #24940 Hetzner Online GmbH
GET /media/mod_languages/images/de_de.gif HTTP/1.1
Host: www.hct-busvermietung.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.hct-busvermietung.de/index.php
Cookie: 6b641c1c2d80877fea4f8f1b317af201=b380728bafc457c9fc140d7d836a6493; 474d34055f4bac50e70963951e35f40c=de-DE
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 01 Sep 2022 12:07:02 GMT
etag: "3e-5e79c7384d1a6"
accept-ranges: bytes
content-length: 62
content-type: image/gif
date: Sat, 04 Feb 2023 05:54:24 GMT
server: Apache
X-Firefox-Spdy: h2
78.47.185.214
65.9.86.9
157.240.205.11
31.13.72.14
93.184.220.29
23.36.77.32
0.0.0.0