Overview

URLsh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/
IP 202.172.26.38 (Japan)
ASN#37907 DigiRock, Inc.
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-01-17 09:34:59 UTC
StatusLoading report..
IDS alerts2
Blocklist alert5
urlquery alerts No alerts detected
Tags None

Domain Summary (11)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-01-17 04:09:25 UTC 35.241.9.150
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-01-17 04:09:25 UTC 34.117.237.239
sh.rize.nu (7) 0 2019-06-06 10:01:34 UTC 2022-11-18 21:50:46 UTC 202.172.26.38 Unknown ranking
cdnjs.cloudflare.com (1) 235 2012-05-23 12:49:49 UTC 2023-01-17 04:09:06 UTC 104.17.24.14
meine.postbank.de (4) 318679 2017-09-20 10:11:14 UTC 2023-01-13 09:31:44 UTC 185.157.32.20
r3.o.lencr.org (6) 344 2020-12-02 08:52:13 UTC 2023-01-17 04:09:06 UTC 95.101.11.115
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-01-17 04:09:26 UTC 34.160.144.191
ocsp.digicert.com (11) 86 2012-05-21 07:02:23 UTC 2023-01-17 04:37:06 UTC 93.184.220.29
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-01-17 04:09:26 UTC 52.25.78.204
img-getpocket.cdn.mozilla.net (7) 1631 2017-09-01 03:40:57 UTC 2023-01-17 04:09:10 UTC 34.120.237.76
www.postbank.de (3) 270635 2012-05-24 09:12:10 UTC 2023-01-17 05:01:22 UTC 54.230.111.31

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2023-01-17 09:34:47 UTC 2 Client IP  192.169.69.26 ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain 
2023-01-17 09:34:48 UTC 2 Client IP  192.169.69.26 ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-01-17 2 sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/ Phishing
2023-01-17 2 sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/jquery-3.6.0 (...) Phishing
2023-01-17 2 sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/assets/fonts (...) Phishing
2023-01-17 2 sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/assets/fonts (...) Phishing
2023-01-17 2 sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/svg-icon-spr (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 202.172.26.38
Date UQ / IDS / BL URL IP
2023-01-24 14:35:36 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/bce5aabcd2f936e217de16 (...) 202.172.26.38
2023-01-18 18:37:44 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/bce5aabcd2f936e217de16 (...) 202.172.26.38
2023-01-17 15:55:06 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/bce5aabcd2f936e217de16 (...) 202.172.26.38
2023-01-17 12:35:13 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/bce5aabcd2f936e217de16 (...) 202.172.26.38
2023-01-17 11:45:43 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/41a52dfc3a3e3917edc61b (...) 202.172.26.38


Last 5 reports on ASN: DigiRock, Inc.
Date UQ / IDS / BL URL IP
2023-03-25 07:46:51 +0000 0 - 2 - 0 ogawaya.cc/ 202.172.28.20
2023-03-22 07:29:43 +0000 0 - 4 - 0 adflex.biz/ 202.172.26.33
2023-03-22 06:52:49 +0000 0 - 4 - 0 development.orangegarden.work/dormyplan/HOTEL (...) 202.172.25.106
2023-03-22 06:42:43 +0000 0 - 2 - 0 j-page.biz/uslugi-ekskavatora.ru 202.172.25.3
2023-03-16 04:13:59 +0000 0 - 0 - 0 www.sushi-muramatsu.co.jp 183.90.183.20


Last 5 reports on domain: rize.nu
Date UQ / IDS / BL URL IP
2023-01-24 14:35:36 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/bce5aabcd2f936e217de16 (...) 202.172.26.38
2023-01-18 18:37:44 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/bce5aabcd2f936e217de16 (...) 202.172.26.38
2023-01-17 15:55:06 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/bce5aabcd2f936e217de16 (...) 202.172.26.38
2023-01-17 12:35:13 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/bce5aabcd2f936e217de16 (...) 202.172.26.38
2023-01-17 11:45:43 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/41a52dfc3a3e3917edc61b (...) 202.172.26.38


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-14 11:03:43 +0000 0 - 0 - 8 u14178730.ct.sendgrid.net/ls/click?upn=5wGz-2 (...) 167.89.123.16
2023-03-14 11:00:01 +0000 0 - 0 - 8 u14178730.ct.sendgrid.net/ls/click?upn=rZx0zE (...) 167.89.115.54
2023-03-13 15:34:13 +0000 0 - 0 - 1 0ecdf01.wcomhost.com/de-de/us/ 206.188.192.47
2023-01-27 04:48:45 +0000 0 - 0 - 5 nasxishs.blogspot.com/ 142.250.74.65
2023-01-24 14:35:36 +0000 0 - 0 - 5 sh.rize.nu/postbank.de/bce5aabcd2f936e217de16 (...) 202.172.26.38

JavaScript

Executed Scripts (2)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (44)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "FAAC4E0D123F2112B58953C104EA746CD53047FC1ADA0EF5D669FEECF78DDFFF"
Last-Modified: Sat, 14 Jan 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6640
Expires: Tue, 17 Jan 2023 11:25:28 GMT
Date: Tue, 17 Jan 2023 09:34:48 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3A10790C397A419450AC2C90B941FD20BC49AF1DBAEB34678836306DE8FEBFCE"
Last-Modified: Mon, 16 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5669
Expires: Tue, 17 Jan 2023 11:09:17 GMT
Date: Tue, 17 Jan 2023 09:34:48 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 17 Jan 2023 08:42:16 GMT
age: 3152
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3FF822EB56D2218AD6244FD013A82E0D27450AE21D47E08F1E3FDF4C82A8AAD7"
Last-Modified: Mon, 16 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4115
Expires: Tue, 17 Jan 2023 10:43:23 GMT
Date: Tue, 17 Jan 2023 09:34:48 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: TT7XWhIxSbDalCQdb7K2TBX+a/+OgyFzeu0K1FiZeYOkV8eCVRLeieCAPTt+bm9PjZ5eIyuKQCY=
x-amz-request-id: 0E55X2GTCV52E9GA
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 17 Jan 2023 08:44:56 GMT
age: 2992
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Tue, 17 Jan 2023 09:34:48 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Pragma, Content-Length, Alert, Expires, ETag, Last-Modified, Backoff, Content-Type, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 17 Jan 2023 09:17:25 GMT
age: 1043
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1219
Cache-Control: max-age=85944
Date: Tue, 17 Jan 2023 09:34:48 GMT
Etag: "63c513ad-1d7"
Expires: Wed, 18 Jan 2023 09:27:12 GMT
Last-Modified: Mon, 16 Jan 2023 09:06:53 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: juGIPCP5ZBslI7O92f594A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.25.78.204
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3iAYf/T5b5Emi9PDBMLXXGhO298=

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8804
Expires: Tue, 17 Jan 2023 12:01:34 GMT
Date: Tue, 17 Jan 2023 09:34:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8804
Expires: Tue, 17 Jan 2023 12:01:34 GMT
Date: Tue, 17 Jan 2023 09:34:50 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         95.101.11.115
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "94B31F7663E4917E8E97079202EF9FA340766F1EBFC2601360618D947F7DABC9"
Last-Modified: Sun, 15 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8804
Expires: Tue, 17 Jan 2023 12:01:34 GMT
Date: Tue, 17 Jan 2023 09:34:50 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F93fda3d0-f25d-4038-bce9-349d25d63a74.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7847
x-amzn-requestid: 15cc6d5b-0805-4828-9bdc-5067a2d542d0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: evbCYETXoAMFVqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c2d875-5ff79c917007ccbd40957aa3;Sampled=0
x-amzn-remapped-date: Sat, 14 Jan 2023 16:29:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4MTdWQGgqXhGjGRJbtMqJPn__CZJyfhtbDU81Ay-SaZE2CGJ55s8Lw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 12:04:57 GMT
age: 77393
etag: "0a67ed30b7b9c66a6ccd2a72cd0de27b0fd38509"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7847
Md5:    dd54f560a77956e0ffb9645ba786c193
Sha1:   0a67ed30b7b9c66a6ccd2a72cd0de27b0fd38509
Sha256: 359fd1bdac8f7106b2d1dc71136ddca2bb70e95fab441af114e24d04fa69afe7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F385b83d3-24b4-4a2f-b857-c5ad36c6c6f1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 3027
x-amzn-requestid: 9599f603-0ef7-40c7-aa0e-699a82057dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tr0GvUoAMFfmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c318-3d11e6404c85fcb737852aaf;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:35:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: w9U7jKrDbganO37QtU-I_g8A9G3XEHtsj-z6s0UF419IdEj_Zw1-uw==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
age: 42515
etag: "fde259440056930606a16b88e6d87e2edc420bd6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3027
Md5:    dcaf94e244d0b492c26d4964836f4913
Sha1:   fde259440056930606a16b88e6d87e2edc420bd6
Sha256: 6cc207b89ceda6a27a0c9905a3284044984af07cdf5eb91a84b93bc56e414806
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a57f270-98a9-442f-9239-76f1b01be9ae.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9186
x-amzn-requestid: dcfb9d55-6741-4ac3-afb6-d6fcc316c305
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tvYHw6oAMFnwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c32f-237ef8a2086f859b7b49b006;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:35:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jU1UPGJjz6GgxfBnK1alPLb4ltxnFyWU29tfI7DH6FERqQSggFZwrg==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:56:51 GMT
age: 41879
etag: "178546ab6c6779129e49f2a7bd80560cf08fbf7c"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9186
Md5:    11978fd8515619467879303c76a11092
Sha1:   178546ab6c6779129e49f2a7bd80560cf08fbf7c
Sha256: 3f4bd577a740e0b2fcfb38ba4edd72cef3d2a8da7b5949eef33b2c04d417dca8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f84f3a0-4f01-4cfe-bde0-a7d64664f3d7.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10660
x-amzn-requestid: ac5d6edc-5228-4318-a99f-c08d3265aa87
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3HXpH4PoAMF78Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5ec30-044bf7c40e44de637c0c2dba;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 00:30:40 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FkEloLsB0trkJ9t_rqIbVsZmUi9ytfJ9JdQ-zjs7ZM5smU4xVwvkxA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 00:31:58 GMT
age: 32572
etag: "acd84e057b6c618fd3b31915983998c00fe21dc4"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10660
Md5:    ec0e283376914297c3fb2464ed15a31b
Sha1:   acd84e057b6c618fd3b31915983998c00fe21dc4
Sha256: 3d02b82d8f6a00703de7594f5b34baf0010294c1a7023818344ca341e4ac203c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad391a3-52d8-4a92-ab46-4ad076c43cf8.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9529
x-amzn-requestid: 56f2b9a5-91c6-421a-ad84-165376e23dcf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2tm6Fm-oAMFrDQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c5c2f8-67a0c1fe6aad6e6b71e50463;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 21:34:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mzmFGVDfMuZte5CJUmchEQIVAuDUKdGfUpm7PRTUqnsP44IcDmbl8A==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 21:46:15 GMT
age: 42515
etag: "e4badc3fbca9913bc11d968dac5cad1f900ff492"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9529
Md5:    ad210f0ba6ce6930724549cbba76e83d
Sha1:   e4badc3fbca9913bc11d968dac5cad1f900ff492
Sha256: ad5f754d5dbe870feabfe090a46838614e96d72e78b9a2a8010ab339c67130be
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe32b9b2c-d57e-40ba-bdaa-0cad85d59f33.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8488
x-amzn-requestid: 5e260260-bd4b-44a5-919a-a6085a057c0e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: eq1xkHSiIAMF9zA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c1033d-2e4e00dd43f10f0e0a3e0ac4;Sampled=0
x-amzn-remapped-date: Fri, 13 Jan 2023 07:07:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jMMpXVZv5S99cInAAttvwEAoUcEDjzHChJMj1dJdVeQFOQEtX5C-cA==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 17 Jan 2023 00:27:28 GMT
age: 32842
etag: "38f5261653926d95074fa5550af5d77a25ebd74e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8488
Md5:    e29bab4151d6c143d3cf16e7a34b0390
Sha1:   38f5261653926d95074fa5550af5d77a25ebd74e
Sha256: 84bbdf1850d2d76ebb06c7a84446e4723e62a9d9b8e459ec6b833e5892ef66fb
                                        
                                            GET /postbank.de/bce5aabcd2f936e217de1697b3a9c872/ HTTP/1.1 
Host: sh.rize.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         202.172.26.38
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 17 Jan 2023 09:34:48 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=ad9ts64ildh9gvot4vmrvh9202; path=/
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (579), with CRLF line terminators
Size:   3927
Md5:    3e2b3aba3b9a1468d7c079a3d67b2f45
Sha1:   ee0cfb0e032d158bffb995bbf63b410fa59ab907
Sha256: 0580aa5f0d5455d6a53fd289d863a218c48061986b825777144028fdae408b41

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /ajax/libs/font-awesome/6.0.0-beta2/css/all.min.css HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sh.rize.nu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.17.24.14
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Tue, 17 Jan 2023 09:34:51 GMT
content-length: 14374
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "61498362-3826"
last-modified: Tue, 21 Sep 2021 07:01:54 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 14828009
expires: Sun, 07 Jan 2024 09:34:51 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9W9mpQ7UD6k4wtHYivTJwghu8n9752wRDBbccWO3OWrGGDrNY0Gevy79SG9wWfX5%2F0%2FMnGzthd1NAvPA0VJVAJIxsnR19nzsPqqXPaHKuQbDXnBGFuJzxJnchgWv2AtekrIZfEBd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 78ae18f3aa55b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65345)
Size:   14374
Md5:    642445b86596bdeaa98e92faa2064fc6
Sha1:   6c5539660bf533d34e37b917973c941d1c963374
Sha256: 4a5a39e9f325c5578dccd880c1d516eae190ee39f7539f4a6c6c52d2eee4cbdf
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6355
Cache-Control: max-age=172107
Date: Tue, 17 Jan 2023 09:34:51 GMT
Etag: "63c65033-1d7"
Expires: Thu, 19 Jan 2023 09:23:18 GMT
Last-Modified: Tue, 17 Jan 2023 07:37:23 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6355
Cache-Control: max-age=172107
Date: Tue, 17 Jan 2023 09:34:51 GMT
Etag: "63c65033-1d7"
Expires: Thu, 19 Jan 2023 09:23:18 GMT
Last-Modified: Tue, 17 Jan 2023 07:37:23 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5117
Cache-Control: 'max-age=158059'
Date: Tue, 17 Jan 2023 09:34:51 GMT
Last-Modified: Tue, 17 Jan 2023 08:09:34 GMT
Server: ECS (amb/6BB5)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 998
Cache-Control: 'max-age=158059'
Date: Tue, 17 Jan 2023 09:34:51 GMT
Last-Modified: Tue, 17 Jan 2023 09:18:14 GMT
Server: ECS (amb/6B7D)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3478
Cache-Control: max-age=142941
Date: Tue, 17 Jan 2023 09:34:51 GMT
Etag: "63c5e983-1d7"
Expires: Thu, 19 Jan 2023 01:17:12 GMT
Last-Modified: Tue, 17 Jan 2023 00:19:15 GMT
Server: ECS (amb/6BB5)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/file1.css HTTP/1.1 
Host: sh.rize.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/
Cookie: PHPSESSID=ad9ts64ildh9gvot4vmrvh9202

search
                                         202.172.26.38
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 17 Jan 2023 09:34:51 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2023 08:17:48 GMT
ETag: "86e-5f27155c91b97-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 612
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (2158), with no line terminators
Size:   612
Md5:    691d0b55e6aa60311e120f0fbd93659e
Sha1:   f4dfb1ae1d5e38e2b612b6f7ffc3b4d2707df433
Sha256: 31de51165ebc7389acd0237cdc7cfebf1edc2c302c3b7aa882740e3ccd9fbf77
                                        
                                            GET /dam/postbank/bilder/iob5/login-alte-anmeldung.jpg HTTP/1.1 
Host: www.postbank.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sh.rize.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.31
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 15471
date: Tue, 17 Jan 2023 09:34:51 GMT
server: Apache
x-dispatcher: dispatcher3eucentral1
x-dispatcher-version: 1.4.25
x-vhost: postbank
vary: Host
last-modified: Tue, 20 Oct 2020 14:38:35 GMT
etag: "3c6f-5b21b2f8a30c0"
accept-ranges: bytes
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-methods: GET,HEAD,OPTIONS,POST
access-control-allow-credentials: true
content-disposition: inline
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y6zr9SKcZ-G98wCHdqqsmENnyatzHNs9T9I_JygzKeo0nURY3t-OaA==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1080x666, components 3\012- data
Size:   15471
Md5:    71d7f159b3c4e1fb3b7e59ad8c956207
Sha1:   96294325a7ae20f048a3407f96afad53c0d77680
Sha256: 2afc1ff4a798ce317d694abd9ecb5dc5f7e1211f80e3864902c0f6da65746c14
                                        
                                            GET /dam/postbank/bilder/iob5/sicherheitshinweis.jpg HTTP/1.1 
Host: www.postbank.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sh.rize.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.31
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 115626
date: Tue, 17 Jan 2023 09:34:51 GMT
server: Apache
x-dispatcher: dispatcher4eucentral1
x-dispatcher-version: 1.4.25
x-vhost: postbank
vary: Host
last-modified: Wed, 06 Apr 2022 14:11:27 GMT
etag: "1c3aa-5dbfcefebc1c0"
accept-ranges: bytes
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-methods: GET,HEAD,OPTIONS,POST
access-control-allow-credentials: true
content-disposition: inline
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9PlMNguWptdWrB4C0OUbUOObMHgFpHQ84hgWpgz2rgUrFhkqY1BNMg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1374x610, components 3\012- data
Size:   115626
Md5:    6fff8c1d662e9fd475d8f0907ab0f23b
Sha1:   0d6b947c37a47ef640bcd29439a72354cd87f857
Sha256: b6fee381207d08fa8d029741f93662cf29622bb040a5d875bab0d68a1e93e6df
                                        
                                            GET /dam/postbank/bilder/iob5/passtbank-privatkredit-kueche-login.jpg HTTP/1.1 
Host: www.postbank.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sh.rize.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         54.230.111.31
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 161040
date: Tue, 17 Jan 2023 09:34:51 GMT
server: Apache
x-dispatcher: dispatcher2eucentral1
x-dispatcher-version: 1.4.25
x-vhost: postbank
vary: Host
last-modified: Wed, 23 Jun 2021 20:27:00 GMT
etag: "27510-5c574ba896d00"
accept-ranges: bytes
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-methods: GET,HEAD,OPTIONS,POST
access-control-allow-credentials: true
content-disposition: inline
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JoGHqBVZmX7v6LkbM9Fp1tqz8xwdkA7QZ7wnBybTnZc8HUcUZ0nRUg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1080x666, components 3\012- data
Size:   161040
Md5:    cd3780ffb5aebcb23172edaea7ccabcd
Sha1:   73ba1617d2156e16ec2e4e41600bc92fe7f5c431
Sha256: e006145488a9df2c511a1c4f2db044819cf0e2f539f2c62ea964fc51c38c073f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=139464
Date: Tue, 17 Jan 2023 09:34:51 GMT
Etag: "63c5e983-1d7"
Expires: Thu, 19 Jan 2023 00:19:15 GMT
Last-Modified: Tue, 17 Jan 2023 00:19:15 GMT
Server: nginx
Content-Length: 471

                                        
                                            GET /postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/file2.css HTTP/1.1 
Host: sh.rize.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/
Cookie: PHPSESSID=ad9ts64ildh9gvot4vmrvh9202

search
                                         202.172.26.38
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Tue, 17 Jan 2023 09:34:51 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2023 08:17:48 GMT
ETag: "5b402-5f27155c90bf7-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 45861
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   45861
Md5:    ab3fd37ae894f16550faf7155d859132
Sha1:   bfd7a553531ab86a565c8f52a340b2a2e0ca8a2e
Sha256: 286ec1e6b5bf3b767ee6cc54f053d5e5631802335c6b99ac8d773a026d907998
                                        
                                            GET /postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/jquery-3.6.0.min.js HTTP/1.1 
Host: sh.rize.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/
Cookie: PHPSESSID=ad9ts64ildh9gvot4vmrvh9202

search
                                         202.172.26.38
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Tue, 17 Jan 2023 09:34:51 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2023 08:17:48 GMT
ETag: "15d9d-5f27155c91b97-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 30905
Keep-Alive: timeout=15, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with very long lines (65446), with CRLF line terminators
Size:   30905
Md5:    5c9be68fc77842021ef0cc49b85bf798
Sha1:   cda55672211fa73c458014c61598aa97c52eb430
Sha256: 2664c2cafdeba32970a06ad15374ee1cf022e87bd5737c2328dc5600958317b7

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/assets/fonts/Frutiger/FrutigerLTW02-55Roman.woff2 HTTP/1.1 
Host: sh.rize.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/file2.css
Cookie: PHPSESSID=ad9ts64ildh9gvot4vmrvh9202

search
                                         202.172.26.38
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Tue, 17 Jan 2023 09:34:52 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2023 08:17:48 GMT
ETag: "561c-5f27155c90bf7"
Accept-Ranges: bytes
Content-Length: 22044
Vary: User-Agent
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22044, version 1.0\012- data
Size:   22044
Md5:    69ab8b03b8d3d1b10ab427d6fe54170c
Sha1:   f442d9cea16b501be170c8ddd7b267648fefb675
Sha256: 0f66f8ce126c929397fa9ac166cf8b46c2f250272c321008913168fb1902212e

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/assets/fonts/Frutiger/FrutigerLTW02-65Bold.woff2 HTTP/1.1 
Host: sh.rize.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/file2.css
Cookie: PHPSESSID=ad9ts64ildh9gvot4vmrvh9202

search
                                         202.172.26.38
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Date: Tue, 17 Jan 2023 09:34:52 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2023 08:17:48 GMT
ETag: "a418-5f27155c90bf7"
Accept-Ranges: bytes
Content-Length: 42008
Vary: User-Agent
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 42008, version 1.0\012- data
Size:   42008
Md5:    66a825d0bc3b78c378dadbfa19b8ac02
Sha1:   7fb3f4f2d17526585b8440a42eca6d98dbc6ccf6
Sha256: 33f227be2f5d1077c023bf5bfaa69f4498c74c3771d820ac23e2e2ca2a2bcd0d

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /postbank.de/bce5aabcd2f936e217de1697b3a9c872/assets/svg-icon-sprite.svg HTTP/1.1 
Host: sh.rize.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sh.rize.nu/postbank.de/bce5aabcd2f936e217de1697b3a9c872/
Cookie: PHPSESSID=ad9ts64ildh9gvot4vmrvh9202

search
                                         202.172.26.38
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Tue, 17 Jan 2023 09:34:52 GMT
Server: Apache
Last-Modified: Tue, 17 Jan 2023 08:17:48 GMT
ETag: "b71c-5f27155c91b97"
Accept-Ranges: bytes
Content-Length: 46876
Vary: User-Agent
Keep-Alive: timeout=15, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (46876), with no line terminators
Size:   46876
Md5:    b1f6150fc612fea368eb25458e8d46b7
Sha1:   7fed1e815a9c2d2270abe0bfe0fd8eeedddd45ec
Sha256: fc003d223a8876c13e6a99710847a62db755abe3761e12fa7d083a0cc716ba65

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3603
Cache-Control: max-age=127943
Date: Tue, 17 Jan 2023 09:34:53 GMT
Etag: "63c5ae71-1d7"
Expires: Wed, 18 Jan 2023 21:07:16 GMT
Last-Modified: Mon, 16 Jan 2023 20:07:13 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1695
Cache-Control: 'max-age=158059'
Date: Tue, 17 Jan 2023 09:34:53 GMT
Last-Modified: Tue, 17 Jan 2023 09:06:38 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 768
Cache-Control: max-age=125108
Date: Tue, 17 Jan 2023 09:34:53 GMT
Etag: "63c5ae71-1d7"
Expires: Wed, 18 Jan 2023 20:20:01 GMT
Last-Modified: Mon, 16 Jan 2023 20:07:13 GMT
Server: ECS (amb/6BB1)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5261
Cache-Control: max-age=129601
Date: Tue, 17 Jan 2023 09:34:53 GMT
Etag: "63c5ae71-1d7"
Expires: Wed, 18 Jan 2023 21:34:54 GMT
Last-Modified: Mon, 16 Jan 2023 20:07:13 GMT
Server: ECS (amb/6BB5)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /assets/images/favicons/apple-touch-icon.png HTTP/1.1 
Host: meine.postbank.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sh.rize.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.157.32.20
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 17 Jan 2023 09:34:53 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: origin
X-Frame-Options: deny
Content-Security-Policy: default-src 'self'; connect-src 'self' https://bankapi-public.postbank.de https://bankapi.postbank.de https://smoke-api.postbank.de https://smoke-api-public.postbank.de https://www.postbank.de https://collect.tealiumiq.com https://collect-eu-central-1.tealiumiq.com https://visitor-service-eu-central-1.tealiumiq.com https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://assets.adobedtm.com https://*.usercentrics.eu; img-src 'self' https://www.postbank.de https://tp.postbank.de https://meine.postbank.de https://smoke-meine.postbank.de https://anlagemanager.postbank.de https://smoke-anlagemanager.postbank.de https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://*.usercentrics.eu data: blob:; script-src 'self' https://pb.media01.eu https://tags.tiqcdn.com https://www.postbank.de https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://assets.adobedtm.com https://*.usercentrics.eu 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org 'unsafe-inline'
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload;
Last-Modified: Wed, 14 Dec 2022 09:18:16 GMT
ETag: "1471-5efc6376ce600"
Accept-Ranges: bytes
Content-Length: 5233
Cache-Control: private, max-age=15552000, must-revalidate
Expires: Sun, 16 Jul 2023 09:34:53 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: authorization
Keep-Alive: timeout=10, max=385
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Size:   5233
Md5:    0bddf20e953d1c21bf018dbe4b1d9851
Sha1:   f936532773127f93421c57d0db0ad2dd6e61c4f2
Sha256: 193666adf1dd29973731f290efc41f08ab468e14597996162a3d793aed8b9584
                                        
                                            GET /bundles/@pbs/patternlib_pb/lib/runtime/assets/images/logo-claim.svg HTTP/1.1 
Host: meine.postbank.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sh.rize.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.157.32.20
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Tue, 17 Jan 2023 09:34:53 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: origin
X-Frame-Options: deny
Content-Security-Policy: default-src 'self'; connect-src 'self' https://bankapi-public.postbank.de https://bankapi.postbank.de https://smoke-api.postbank.de https://smoke-api-public.postbank.de https://www.postbank.de https://collect.tealiumiq.com https://collect-eu-central-1.tealiumiq.com https://visitor-service-eu-central-1.tealiumiq.com https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://assets.adobedtm.com https://*.usercentrics.eu; img-src 'self' https://www.postbank.de https://tp.postbank.de https://meine.postbank.de https://smoke-meine.postbank.de https://anlagemanager.postbank.de https://smoke-anlagemanager.postbank.de https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://*.usercentrics.eu data: blob:; script-src 'self' https://pb.media01.eu https://tags.tiqcdn.com https://www.postbank.de https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://assets.adobedtm.com https://*.usercentrics.eu 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org 'unsafe-inline'
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload;
Vary: Accept-Encoding
Last-Modified: Wed, 14 Dec 2022 09:18:17 GMT
ETag: "4fd-5efc6377c2840"
Accept-Ranges: bytes
Content-Length: 1277
Cache-Control: private, max-age=15552000, must-revalidate
Expires: Sun, 16 Jul 2023 09:34:53 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: authorization
Content-Encoding: gzip
Keep-Alive: timeout=10, max=348
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2317)
Size:   1277
Md5:    a9305d547d547cbde0a1cc873ff8fa6f
Sha1:   4e82b2e353551a60749155246f86f07e25dceeaf
Sha256: 0289165424f427650177a96197719c4adfebfd4249d30fe9fca77cd6aa40f4d4
                                        
                                            GET /assets/images/favicons/favicon-16x16.png HTTP/1.1 
Host: meine.postbank.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sh.rize.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.157.32.20
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 17 Jan 2023 09:34:53 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: origin
X-Frame-Options: deny
Content-Security-Policy: default-src 'self'; connect-src 'self' https://bankapi-public.postbank.de https://bankapi.postbank.de https://smoke-api.postbank.de https://smoke-api-public.postbank.de https://www.postbank.de https://collect.tealiumiq.com https://collect-eu-central-1.tealiumiq.com https://visitor-service-eu-central-1.tealiumiq.com https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://assets.adobedtm.com https://*.usercentrics.eu; img-src 'self' https://www.postbank.de https://tp.postbank.de https://meine.postbank.de https://smoke-meine.postbank.de https://anlagemanager.postbank.de https://smoke-anlagemanager.postbank.de https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://*.usercentrics.eu data: blob:; script-src 'self' https://pb.media01.eu https://tags.tiqcdn.com https://www.postbank.de https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://assets.adobedtm.com https://*.usercentrics.eu 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org 'unsafe-inline'
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload;
Last-Modified: Wed, 14 Dec 2022 09:18:16 GMT
ETag: "2fb-5efc6376ce600"
Accept-Ranges: bytes
Content-Length: 763
Cache-Control: private, max-age=15552000, must-revalidate
Expires: Sun, 16 Jul 2023 09:34:53 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: authorization
Keep-Alive: timeout=10, max=411
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size:   763
Md5:    7928dcbd4ef94be62d92d6218e8b917d
Sha1:   93768c3b84bc447a0f4b3449f93e386001106431
Sha256: 705e422f4c2ca8ff8521e6ca5bedf071785a13505c4cfe90693f539cead2b1f7
                                        
                                            GET /bundles/@pbs/patternlib_pb/lib/runtime/assets/images/logo.svg HTTP/1.1 
Host: meine.postbank.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sh.rize.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.157.32.20
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Date: Tue, 17 Jan 2023 09:34:53 GMT
Server: Apache
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: origin
X-Frame-Options: deny
Content-Security-Policy: default-src 'self'; connect-src 'self' https://bankapi-public.postbank.de https://bankapi.postbank.de https://smoke-api.postbank.de https://smoke-api-public.postbank.de https://www.postbank.de https://collect.tealiumiq.com https://collect-eu-central-1.tealiumiq.com https://visitor-service-eu-central-1.tealiumiq.com https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://assets.adobedtm.com https://*.usercentrics.eu; img-src 'self' https://www.postbank.de https://tp.postbank.de https://meine.postbank.de https://smoke-meine.postbank.de https://anlagemanager.postbank.de https://smoke-anlagemanager.postbank.de https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://*.usercentrics.eu data: blob:; script-src 'self' https://pb.media01.eu https://tags.tiqcdn.com https://www.postbank.de https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org https://assets.adobedtm.com https://*.usercentrics.eu 'unsafe-inline' 'unsafe-eval'; style-src 'self' https://delivery.1tag.dentsu.de https://cdn.1tag.dentsu.de https://dan.mgr.consensu.org https://cdn.dan.mgr.consensu.org 'unsafe-inline'
Strict-Transport-Security: max-age=63072000; includeSubdomains; preload;
Vary: Accept-Encoding
Last-Modified: Wed, 14 Dec 2022 09:18:17 GMT
ETag: "568-5efc6377c2840"
Accept-Ranges: bytes
Content-Length: 1384
Cache-Control: private, max-age=15552000, must-revalidate
Expires: Sun, 16 Jul 2023 09:34:53 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: authorization
Content-Encoding: gzip
Keep-Alive: timeout=10, max=427
Connection: Keep-Alive


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2718), with no line terminators
Size:   1384
Md5:    ae0ebbd23a8d7ac447bdce5fb61b8140
Sha1:   c5750ae19cea91e80f0438a9ed938b2044655ffe
Sha256: 1ce20d037aed5fec6d8b1493c55e892c8e1f0d71452b4c52338bf8e8137ca054
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2a588566-7d22-4b47-96ce-ee6bb56e4898.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7800
x-amzn-requestid: eac845c9-b10c-4fce-b2ff-01b4111b506e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e2OjhHp_IAMFeyA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c59149-0058376c385a7bf91e07a395;Sampled=0
x-amzn-remapped-date: Mon, 16 Jan 2023 18:02:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: OJvk4N80rrZjzks6MsuDc3XXdRIBAmoEQLVkvN6TXISBtWwXHYDJ_A==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 16 Jan 2023 18:44:18 GMT
etag: "db4cd956ba7e1e6b43174c250b7d4f1193277be9"
age: 53439
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7800
Md5:    57828b7affae7633b38d0fb6057b894d
Sha1:   db4cd956ba7e1e6b43174c250b7d4f1193277be9
Sha256: 26d83d511af9583a8f0a9ef1bd2ce3deab3ca42fa2c2ae141b61cd123afa9625