Overview

URL api.xmlrtb-stats.rtb.me/v1/index.html#[email%C2%A0protected]
IP163.172.113.77
ASNOnline S.a.s.
Location France
Report completed2022-09-28 22:35:44 UTC
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blocklists

OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-28 2 api.xmlrtb-stats.rtb.me/v1/index.html Phishing
mnemonic secure dns  No alerts detected
Quad9 DNS  No alerts detected


Files

No files detected



Passive DNS (14)

Passive DNS Source Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
mnemonic passive DNS firefox.settings.services.mozilla.com (2) 867 2020-05-28 17:26:30 UTC 2022-09-28 12:06:36 UTC 143.204.55.36
mnemonic passive DNS status.geotrust.com (6) 3662 2017-12-01 08:55:31 UTC 2022-09-28 04:46:07 UTC 93.184.220.29
mnemonic passive DNS frontend-services.ionos.com (3) 129619 2018-10-29 08:54:14 UTC 2022-09-28 09:43:31 UTC 217.160.86.61
mnemonic passive DNS mail.ionos.com (3) 354481 2018-11-01 15:06:23 UTC 2022-09-28 10:34:37 UTC 74.208.255.201
mnemonic passive DNS img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-28 08:06:38 UTC 34.120.237.76
mnemonic passive DNS contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-28 04:36:06 UTC 34.117.237.239
mnemonic passive DNS api.xmlrtb-stats.rtb.me (1) 0 2020-10-05 14:02:06 UTC 2022-09-28 22:10:17 UTC 163.172.113.77 Domain (rtb.me) ranked at: 266388
mnemonic passive DNS ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2022-09-28 18:52:26 UTC 93.184.220.29
mnemonic passive DNS content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-28 05:13:47 UTC 143.204.55.110
mnemonic passive DNS cdnjs.cloudflare.com (1) 235 2020-10-20 10:17:36 UTC 2022-09-28 05:34:56 UTC 104.17.24.14
mnemonic passive DNS ce1.uicdn.net (6) 136303 2017-02-01 08:42:04 UTC 2022-09-28 10:35:22 UTC 213.165.66.58
mnemonic passive DNS r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2022-09-28 04:36:09 UTC 23.36.77.32
mnemonic passive DNS ias.uicdn.net (1) 261608 2018-10-01 10:38:24 UTC 2022-09-28 20:16:53 UTC 217.160.86.27
mnemonic passive DNS push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-28 05:02:28 UTC 44.242.3.166


Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 163.172.113.77

Date UQ / IDS / BL URL IP
2022-09-28 22:35:44 +0000
0 - 0 - 1 api.xmlrtb-stats.rtb.me/v1/index.html#[email% (...) 163.172.113.77

Last 5 reports on ASN: Online S.a.s.

Date UQ / IDS / BL URL IP
2022-12-03 19:56:16 +0000
0 - 0 - 3 soustons-standup.com/--/Postale/Dir/Identific (...) 62.210.16.61
2022-12-03 17:39:40 +0000
0 - 0 - 1 dl.clubic.com/generate/xwx7qw5x3eyorunxsfe-cq (...) 51.159.14.59
2022-12-03 17:29:03 +0000
0 - 0 - 1 descargas.downloadspg.com/v2/3dlivepool265.exe 163.172.102.119
2022-12-03 17:23:14 +0000
0 - 0 - 4 a.top4top.io/f_bbf3vhmhbuuxyiraduck-w/1670241 (...) 51.159.64.45
2022-12-03 16:55:27 +0000
0 - 0 - 4 g.top4top.io/f_pxk5iibuzuv6tsoveofuna/1670247 (...) 163.172.24.234

Last 1 reports on domain: rtb.me

Date UQ / IDS / BL URL IP
2022-09-28 22:35:44 +0000
0 - 0 - 1 api.xmlrtb-stats.rtb.me/v1/index.html#[email% (...) 163.172.113.77

Last 5 reports with similar screenshot

Date UQ / IDS / BL URL IP
2022-11-30 21:51:24 +0000
0 - 0 - 3 dev7129.d2qmcnsgj0y7oj.amplifyapp.com/ 54.230.111.35
2022-11-25 21:27:43 +0000
0 - 0 - 6 dev2590.d157ved2i0yloi.amplifyapp.com/ 143.204.55.67
2022-11-24 17:42:02 +0000
0 - 0 - 6 dev2753.d2xvn6nqq3i7sx.amplifyapp.com/ 143.204.55.13
2022-11-23 06:04:41 +0000
0 - 0 - 12 telecom-ionos.d2dxs487cdupyy.amplifyapp.com/ 54.230.111.99
2022-11-10 23:28:16 +0000
0 - 0 - 6 dev3263.d3c482e8n16jul.amplifyapp.com/ 54.230.111.91


JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (41)


Request Response
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 28 Sep 2022 22:15:44 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: oKdZETTiDAIv0P-L7GFbkCcloD1uHxD9WSliS0TBymczvyFVGJZx5Q==
Age: 1189


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    2d12f67fe57a87e7366b662d153a5582
Sha1:   d7b02d81cc74f24a251d9363e0f4b0a149264ec1
Sha256: 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "2A40F957A6B1734AA3F87CFF51B673F0536732DB15B09033DD604879692DF349"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3643
Expires: Wed, 28 Sep 2022 23:36:17 GMT
Date: Wed, 28 Sep 2022 22:35:34 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.110
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: I5HS6uU8XduAGY3Uu8V_qWluvx4cOw2ntPT18mtcdT8AGRfqSjPIuQ==
age: 61628
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    6113f8408c59aebe188d6af273b90743
Sha1:   7398873bf00f99944eaa77ad3ebc0d43c23dba6b
Sha256: b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4F42851F2E01E69E50748DCCCF8303D2247FF142F375D6193651998658011E93"
Last-Modified: Wed, 28 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 29 Sep 2022 04:35:34 GMT
Date: Wed, 28 Sep 2022 22:35:34 GMT
Connection: keep-alive

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Wed, 28 Sep 2022 22:35:34 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/index.html HTTP/1.1 
Host: api.xmlrtb-stats.rtb.me
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                         
                                         163.172.113.77
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Tue, 27 Sep 2022 14:14:47 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"63330557-608d"
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12318), with CRLF line terminators
Size:   8808
Md5:    b5f8b21f8c4ccfd37577719d827906d2
Sha1:   7ed4ca801cc02326555fcce25690ede9c7922ef1
Sha256: 745f7cb2b2c36eee5d91b9c4ad2c79808f180b5a7b977184543c83619977ab31

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 589
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Wed, 28 Sep 2022 22:25:45 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /ajax/libs/jquery/3.2.1/jquery.min.js HTTP/1.1 
Host: cdnjs.cloudflare.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.xmlrtb-stats.rtb.me/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         104.17.24.14
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Wed, 28 Sep 2022 22:35:34 GMT
content-length: 27277
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-15283"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 73164
expires: Mon, 18 Sep 2023 22:35:34 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h0efNfnB3UHsD8wxuSakC4oYpiwKoPKzxOYPPCmNM4m2VeLTMjJALysPGGVXY1FOgYnF7bVe4%2FHzEOYKNQ%2ByWupAaiPZ6m7AsADLSIxKx6HsMSk4GUyacghUZgg5kX6iBOU8lvlm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 751ff3f47c9ab4f4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (32058)
Size:   27277
Md5:    b51f9d778be466703e73aceee13d836d
Sha1:   cc5cd9dd2b48712dcf90f14a1ff19d729c43e378
Sha256: f1e36d8f99614eef048fe3cb4275f3234536bff3e3b1b8f763f14a8a0cadab45
                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5314
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Wed, 28 Sep 2022 21:07:00 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1306
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Wed, 28 Sep 2022 22:13:49 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 589
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Wed, 28 Sep 2022 22:25:45 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 807
Cache-Control: max-age=142721
Date: Wed, 28 Sep 2022 22:35:34 GMT
Etag: "63345390-1d7"
Expires: Fri, 30 Sep 2022 14:14:15 GMT
Last-Modified: Wed, 28 Sep 2022 14:00:48 GMT
Server: ECS (amb/6B85)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1306
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Wed, 28 Sep 2022 22:13:49 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1306
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Wed, 28 Sep 2022 22:13:49 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /exos/framework/1.1/ionos.min.css?v=1633679538720 HTTP/1.1 
Host: ce1.uicdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.xmlrtb-stats.rtb.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         213.165.66.58
HTTP/2 200 OK
content-type: text/css
                                        
date: Wed, 28 Sep 2022 22:35:34 GMT
content-length: 32819
set-cookie: DPX=v1:B6f+Tjjf5T:rid9IZrA:6334da4b:gb; Path=/; Expires=Wed, 28-Sep-22 23:35:34 GMT; HttpOnly; Secure
server: Apache
last-modified: Mon, 21 Mar 2022 11:53:00 GMT
vary: Accept-Encoding
content-encoding: br
cache-control: max-age=43200, public
expires: Thu, 28 Sep 2023 12:03:56 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65474)
Size:   32819
Md5:    47b81d10acfc46325e6128d3f57f2742
Sha1:   44d161e6211a0a341e4705b20344e0a4d90960d0
Sha256: 09acc2fbd9bc200f89deef940d5504842a4f943c9e75412adde433d0ede64023
                                        
                                            GET /t/statuspage/css/statuspage.css?v=1.6.0 HTTP/1.1 
Host: frontend-services.ionos.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.xmlrtb-stats.rtb.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         217.160.86.61
HTTP/1.1 200 200
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 22:35:34 GMT
Server: Apache
Cache-Control: public, max-age=86400, s-maxage=900
Accept-Ranges: bytes
ETag: W/"4701-499158900000-gzip"
Last-Modified: Sat, 26 Oct 1985 07:15:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines (4604)
Size:   1032
Md5:    25f5751ca41e93a19d140c5656acaad6
Sha1:   c875d9b2ced1ff40b8cfdcc401f091695d4707ca
Sha256: 670e43a2355513d4b6f5dcfd68f98371e2cd3bc186f7be9aef4c861f8b502a5b
                                        
                                            GET /t/inpagelayer/css/inpagelayer.css?v=2.7.1 HTTP/1.1 
Host: frontend-services.ionos.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.xmlrtb-stats.rtb.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         217.160.86.61
HTTP/1.1 200 200
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 22:35:34 GMT
Server: Apache
Cache-Control: public, max-age=86400, s-maxage=900
Accept-Ranges: bytes
ETag: W/"20207-499158900000-gzip"
Last-Modified: Sat, 26 Oct 1985 07:15:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (20142)
Size:   3999
Md5:    b3d10967afc5c511bded1c537a418b31
Sha1:   73d91f61aa36ffb72c0f4131f17880a10804fe74
Sha256: a9b9963566a780a1cfe0ba047468dbdc86f9a484ba656c60e7c4ca628f870950
                                        
                                            GET /t/navi/css/navigation.css?v=3.17.10-20200622-163115 HTTP/1.1 
Host: frontend-services.ionos.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.xmlrtb-stats.rtb.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         217.160.86.61
HTTP/1.1 200 200
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 22:35:34 GMT
Server: Apache
Cache-Control: public, max-age=86400, s-maxage=900
Accept-Ranges: bytes
ETag: W/"121968-499158900000-gzip"
Last-Modified: Sat, 26 Oct 1985 07:15:00 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65436)
Size:   29420
Md5:    42d0edf0a1ce8339d21993fe068c433d
Sha1:   7fc263cc0d7600cc89329e98025dba91a612e846
Sha256: 5f8ee34b267e5bda7b302163b85997d99e13a26a2c42f67a3c7fe606303dd5a0
                                        
                                            GET /fileadmin/IONOS/user_upload/email-marketing.svg?h=0fbfd484b7052efe457d3090b4c14a657e1f366d HTTP/1.1 
Host: ias.uicdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.xmlrtb-stats.rtb.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                         
                                         217.160.86.27
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Wed, 28 Sep 2022 22:35:34 GMT
content-length: 3036
set-cookie: DPX=v1:/Ts9dL/Ale:0QB2mrlL:6334da4b:gb; Path=/; Expires=Wed, 28-Sep-22 23:35:34 GMT; HttpOnly; Secure
server: Apache
strict-transport-security: max-age=31536000
last-modified: Sun, 08 Sep 2019 15:29:49 GMT
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   3036
Md5:    4fda4bae2411451b53496c748d7ede3f
Sha1:   a1219698cb73ab1e7db261f9c32a913199676342
Sha256: 78f9e806217f3b98fc6672e98f37b826f6335b8a835c1017dafeb4423fac50cd
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5460
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Wed, 28 Sep 2022 21:04:34 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.geotrust.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2028
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Wed, 28 Sep 2022 22:01:46 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         143.204.55.36
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Wed, 28 Sep 2022 22:29:33 GMT
Expires: Wed, 28 Sep 2022 22:32:54 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HOxpxeTrjKmKXBDXfDWkTAZXovnBy9Ci0qLtP1Fy0sX2aJ92-TxLbA==
Age: 361


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /css/login.min.css?v=1633679538720 HTTP/1.1 
Host: mail.ionos.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.xmlrtb-stats.rtb.me/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         74.208.255.201
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Wed, 28 Sep 2022 22:35:34 GMT
Content-Length: 6702
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: DPX=v1:bFWaT8mwiZ:tfuXR5Fq:6334da4b:us; Path=/; Expires=Wed, 28-Sep-22 23:35:34 GMT; HttpOnly; Secure
Server: Apache/2.4.38 (Debian)
Last-Modified: Mon, 07 Feb 2022 11:16:04 GMT
ETag: "3cd3-5d76bb9e7c500-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=86400
Expires: Thu, 29 Sep 2022 22:35:34 GMT
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' *.schlund.de *.uicdn.net *.statuspage.io *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; img-src data: 'self' *.schlund.de *.uicdn.net *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; frame-src 'self' *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; style-src 'self' 'unsafe-inline' *.schlund.de *.uicdn.net *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; object-src 'none';
Strict-Transport-Security: max-age=31556926


--- Additional Info ---
Magic:  ASCII text, with very long lines (15571), with no line terminators
Size:   6702
Md5:    4508358c2f8b385b886efe002c71fa7d
Sha1:   28bfaa1bc571f7a1e76210cb009dad312927b442
Sha256: 91af6504888930e917b75008819076f292ef3063908a58322cff8d50c9bd83dc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4174
Cache-Control: 'max-age=158059'
Date: Wed, 28 Sep 2022 22:35:34 GMT
Last-Modified: Wed, 28 Sep 2022 21:26:00 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /exos/icons/exos-icon-font.woff?v=13 HTTP/1.1 
Host: ce1.uicdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://api.xmlrtb-stats.rtb.me
Connection: keep-alive
Referer: https://frontend-services.ionos.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         213.165.66.58
HTTP/2 200 OK
content-type: application/font-woff
                                        
date: Wed, 28 Sep 2022 22:35:35 GMT
content-length: 50688
set-cookie: DPX=v1:J8fq1Ul49l:hztQmL5o:6334da4c:gb; Path=/; Expires=Wed, 28-Sep-22 23:35:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Fri, 05 Aug 2022 04:39:12 GMT
cache-control: max-age=31536000
expires: Tue, 19 Sep 2023 09:34:27 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 50688, version 1.0\012- data
Size:   50688
Md5:    f405f04cc9fd00b2b8f12d3657cd1b9d
Sha1:   a9eedef1924db8622319c87d4c436d47bba67398
Sha256: 35538b399f40d6db114f64b970fb8a612d88d833906f95f4cb8675c0277ecfb3
                                        
                                            GET /exos/fonts/overpass/overpass-regular.woff HTTP/1.1 
Host: ce1.uicdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://api.xmlrtb-stats.rtb.me
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         213.165.66.58
HTTP/2 200 OK
content-type: application/font-woff
                                        
date: Wed, 28 Sep 2022 22:35:35 GMT
content-length: 42580
set-cookie: DPX=v1:zRO4gXkwGa:nQct4VxS:6334da4c:gb; Path=/; Expires=Wed, 28-Sep-22 23:35:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:06 GMT
cache-control: max-age=31536000
expires: Tue, 19 Sep 2023 09:34:13 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 42580, version 0.0\012- data
Size:   42580
Md5:    ff37bc2bf376202dde890cc12b0fd0f9
Sha1:   f30c16ece8af43a25a46d7bd4e3ec95199fa6a55
Sha256: d78e7ad4838a9fb4db11451b1db78ccd0b0c7b28f5787684ce2870918ce27bb5
                                        
                                            GET /exos/fonts/open-sans/opensans-regular.woff HTTP/1.1 
Host: ce1.uicdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://api.xmlrtb-stats.rtb.me
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         213.165.66.58
HTTP/2 200 OK
content-type: application/font-woff
                                        
date: Wed, 28 Sep 2022 22:35:35 GMT
content-length: 63712
set-cookie: DPX=v1:Dn/Ls1jB+0:dMthAdEK:6334da4c:gb; Path=/; Expires=Wed, 28-Sep-22 23:35:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:07 GMT
cache-control: max-age=31536000
expires: Tue, 19 Sep 2023 09:34:13 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 63712, version 1.0\012- data
Size:   63712
Md5:    ac327c4db6284ef64ebe872b6308f5da
Sha1:   7dd17593d3947f4ea10be937634ef8f553443e5a
Sha256: 2e1587380141daff4e10a8e3db8f7ae5887102ab7576bff43049590f637ac20b
                                        
                                            GET /exos/fonts/overpass/overpass-bold.woff HTTP/1.1 
Host: ce1.uicdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://api.xmlrtb-stats.rtb.me
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         213.165.66.58
HTTP/2 200 OK
content-type: application/font-woff
                                        
date: Wed, 28 Sep 2022 22:35:35 GMT
content-length: 42092
set-cookie: DPX=v1:XwRw0R64+O:xAbdpe0k:6334da4c:gb; Path=/; Expires=Wed, 28-Sep-22 23:35:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:06 GMT
cache-control: max-age=31536000
expires: Tue, 19 Sep 2023 09:34:13 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 42092, version 0.0\012- data
Size:   42092
Md5:    998074293ec8cdc0e43e3d3add3b523e
Sha1:   c6b7b07672e36062a9d647295d85644b170ba5b2
Sha256: 7afccd9150b0fcbf1a1056e6cc6051c9b6d85a55da7bf1a7fb0f475c0b22facc
                                        
                                            GET /exos/fonts/open-sans/opensans-bold.woff HTTP/1.1 
Host: ce1.uicdn.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://api.xmlrtb-stats.rtb.me
Connection: keep-alive
Referer: https://ce1.uicdn.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         213.165.66.58
HTTP/2 200 OK
content-type: application/font-woff
                                        
date: Wed, 28 Sep 2022 22:35:35 GMT
content-length: 63564
set-cookie: DPX=v1:vneLFgktBx:ImAFEZMN:6334da4c:gb; Path=/; Expires=Wed, 28-Sep-22 23:35:35 GMT; HttpOnly; Secure
server: Apache
last-modified: Tue, 12 Jun 2018 09:26:07 GMT
cache-control: max-age=31536000
expires: Tue, 19 Sep 2023 09:34:13 GMT
access-control-allow-origin: *
x-cache-status: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format, TrueType, length 63564, version 1.0\012- data
Size:   63564
Md5:    892667349c5cff6fcf7e40439596b97c
Sha1:   7956fd048338c3c6253aa58f65442441866d4b4e
Sha256: 7d7a1a8ec55f31a6674fd2e2c41bcc6421a9aeb5cf161c6e93363f31347160f9
                                        
                                            GET /img/apple-touch-icon.png HTTP/1.1 
Host: mail.ionos.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.xmlrtb-stats.rtb.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         74.208.255.201
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Wed, 28 Sep 2022 22:35:35 GMT
Content-Length: 11489
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: DPX=v1:Qr6440La3i:HxjgZWMl:6334da4c:us; Path=/; Expires=Wed, 28-Sep-22 23:35:35 GMT; HttpOnly; Secure
Server: Apache/2.4.38 (Debian)
Last-Modified: Wed, 02 Feb 2022 14:11:12 GMT
ETag: "2ce1-5d70997064000"
Accept-Ranges: bytes
Cache-Control: max-age=0
Expires: Wed, 28 Sep 2022 22:35:35 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' *.schlund.de *.uicdn.net *.statuspage.io *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; img-src data: 'self' *.schlund.de *.uicdn.net *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; frame-src 'self' *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; style-src 'self' 'unsafe-inline' *.schlund.de *.uicdn.net *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; object-src 'none';
Vary: User-Agent
Strict-Transport-Security: max-age=31556926


--- Additional Info ---
Magic:  PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Size:   11489
Md5:    255127267ab12ff21f4a867a7f630ba9
Sha1:   5f60c766f2a6e2e4e92f971d4dba8893a0f69f40
Sha256: 8720afa83ef8034ef267e45b1a803ae64aed42bd7b317c4bbadc1845e6fc6927
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xjKfIM/bRTjAbDCD6IKK3A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                         
                                         44.242.3.166
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rzRG1I5A/4MjrT1pd5jZ0AcntSU=

                                        
                                            GET /img/favicon.ico HTTP/1.1 
Host: mail.ionos.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://api.xmlrtb-stats.rtb.me/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                         
                                         74.208.255.201
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Wed, 28 Sep 2022 22:35:35 GMT
Content-Length: 36636
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: DPX=v1:kupVxYybPA:4afhdb06:6334da4c:us; Path=/; Expires=Wed, 28-Sep-22 23:35:35 GMT; HttpOnly; Secure
Server: Apache/2.4.38 (Debian)
Last-Modified: Wed, 02 Feb 2022 14:11:12 GMT
ETag: "8f1c-5d70997064000"
Accept-Ranges: bytes
Cache-Control: max-age=0
Expires: Wed, 28 Sep 2022 22:35:35 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Security-Policy: default-src 'self' *.schlund.de *.uicdn.net *.statuspage.io *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; img-src data: 'self' *.schlund.de *.uicdn.net *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; frame-src 'self' *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; style-src 'self' 'unsafe-inline' *.schlund.de *.uicdn.net *.ionos.de *.ionos.co.uk *.ionos.com *.ionos.es *.ionos.mx *.ionos.fr *.ionos.it *.ionos.ca; object-src 'none';
Vary: User-Agent
Strict-Transport-Security: max-age=31556926


--- Additional Info ---
Magic:  MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 24 bits/pixel, 64x64, 24 bits/pixel\012- data
Size:   36636
Md5:    ec45e26109c2b8978ffc1d7fadf308cf
Sha1:   27a20472ef3c5110ce73cf29cc847bd549325cb0
Sha256: 9ebcfbf81c3d5f9091755b45dbfa0a929754e217e694222fdbe98f6049aa6174
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6373
Expires: Thu, 29 Sep 2022 00:21:49 GMT
Date: Wed, 28 Sep 2022 22:35:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6373
Expires: Thu, 29 Sep 2022 00:21:49 GMT
Date: Wed, 28 Sep 2022 22:35:36 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6449BF062DBB79683071F367CA142C175EF304485CB4D3711FEB4763146E4FA7"
Last-Modified: Wed, 28 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6373
Expires: Thu, 29 Sep 2022 00:21:49 GMT
Date: Wed, 28 Sep 2022 22:35:36 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d393f81-26d4-4afa-b6ba-940a54002d7f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6795
x-amzn-requestid: 20067932-e2e5-410a-8c7a-a5f623f33454
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZDCs6FbooAMFyHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633117ec-65749cd04e48e49a46b4c215;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 03:09:32 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: o1q8r6PSQDQyLs4xfhCSXu4q8fFi3zIoAIMlwNznvOsEtORfuVumCA==
via: 1.1 6a63e853422f3197776fb098fab5a416.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 06:18:03 GMT
age: 58653
etag: "7057c6707c7299ac386c6b2164240eff241db294"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6795
Md5:    9f94853ffae41ec3c0e002bc152da1c4
Sha1:   7057c6707c7299ac386c6b2164240eff241db294
Sha256: 818f3ff90d7b7923b4af4e423dbb01388795490ac2097e1d58d70608b95618f4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48e2707b-f3b2-4e52-99ae-03c359b698de.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8754
x-amzn-requestid: 175fc592-ed89-44fb-8cf7-8a4404f59d4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZC5OcHKkIAMFafA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633108c2-2c0c36007bc8bcb56a54e8a1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 02:04:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -AhTOJwgY3-DnA_pYXdBL18wPP_fNeyDmZjkdkQ2J-xrBZSyRcdK3Q==
via: 1.1 71e7943ea0729c284a06faa05a567236.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 19:10:22 GMT
age: 12314
etag: "ba797da9b2d6942161fa02a0e431de4868b84327"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8754
Md5:    556ea631652cbb77ff38dbe3bbc8c4d1
Sha1:   ba797da9b2d6942161fa02a0e431de4868b84327
Sha256: 130dab67cb6d80c741a7f2dadfd536bd6900204880dc3b68b2afbfa53dd3d781
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd156c6a4-51d8-498f-ac66-df71d14dc199.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7229
x-amzn-requestid: 5746281b-76dd-4f5d-aae0-6e81d115afba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y5eyoGymIAMFqWw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632d44dd-113b11d4740415f2712d85aa;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 05:32:13 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Xet9obEGz9ToJADlhIi7dokSdNVfqCU04_6_pKBQv0ggB-zlPxC8Sg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 04:35:22 GMT
age: 64814
etag: "8c73e318a79c74a980108bb3d79c89d00c35af57"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7229
Md5:    f5d602deb76fb578e19f56ab7ded2070
Sha1:   8c73e318a79c74a980108bb3d79c89d00c35af57
Sha256: d212b5cfea23e349471702c7a79f464ef012bc644ab7ab60caed6a7f7395a049
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F99f26bb4-2c5c-44ef-86d3-90fd05ec1ce0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9654
x-amzn-requestid: 7961f184-9476-43de-bf35-8ccb50ee1760
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGVYsHA6oAMFvRA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63326904-05f567f7606462ac44f89987;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: XaB4TwXv4xy0Sy3dncNYZWEPEnHY5BkEHR7fZDK59APYkzH9DPdT7A==
via: 1.1 a4fe306096165bb1e86e69365dc8fac2.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 03:53:01 GMT
age: 67355
etag: "44cc19b21912d07f82a88af5b2fa6d3e370459bf"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9654
Md5:    36ae9444071dd70dcf86802c370ffda9
Sha1:   44cc19b21912d07f82a88af5b2fa6d3e370459bf
Sha256: 99984d108bf31d733414f7f1352e17225ac21ac2dbfb4b1e7fa7ae80e5b6b822
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F75de31dd-bbf0-4a21-bfac-94f0062f4da4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10023
x-amzn-requestid: 0cb6b9a1-0707-4094-b197-5a0add2df717
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK4dHJLIAMFWmg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be9c-2d8bbb17157900f126c5bb3c;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wZ2hBqHAdwimAVV3p-CJFrb9zQ-CTN5ar9CB-cu0mZoENYUFTKKPWQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 22:04:58 GMT
age: 1838
etag: "e1067a2dfbc22e7eb196046d57bd1e17604dba75"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10023
Md5:    f4505f57697072468da82e0b536d0d5b
Sha1:   e1067a2dfbc22e7eb196046d57bd1e17604dba75
Sha256: b5e79054f165f38b99f93a8128284f82076523988aeb102b85dd8ff1a2870d00
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e97b5ce-1b94-4a15-a121-825f38a9d7d9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                         
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9034
x-amzn-requestid: 20199dff-cd75-4f47-9395-9fdab045638c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZGVYtHROoAMFQ6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63326904-6a77e2d438ae887e4cd54ec6;Sampled=0
x-amzn-remapped-date: Tue, 27 Sep 2022 03:07:48 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: z92zeMKTSVmpz2TYok8XpBUxuY4ZzN3Z_w32gQgjX1QGb26YDxnfdQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 04:18:58 GMT
age: 65798
etag: "927d5a375d9607b23caadae148566fdff10147b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9034
Md5:    2054ae778a3079d8233ee33045127df6
Sha1:   927d5a375d9607b23caadae148566fdff10147b1
Sha256: 6b33c83c2b78b413ae375966860e1a9c8aa8e28dee107f9dd5bb8ceb221e607a