oxbkp.track4ref.com/redirect/index?type=script&to=aHR0cDovL294YmtwLnRyYWNrNHJlZi5jb20=&data=aHR0cHM6Ly9nZG10cmNrLmNvbS8/YT0xMTc1NjcmYz0yNzcyMjcmczE9JnMyPWduenVjNjMxY2YxMDQwMDBiNGNhNSZzMz0mczQ9JnM1PSZzNj0=&action=action_tmp
200 OK 243 B URL HTTP/1.1 oxbkp.track4ref.com/redirect/index?type=script&to=aHR0cDovL294YmtwLnRyYWNrNHJlZi5jb20=&data=aHR0cHM6Ly9nZG10cmNrLmNvbS8/YT0xMTc1NjcmYz0yNzcyMjcmczE9JnMyPWduenVjNjMxY2YxMDQwMDBiNGNhNSZzMz0mczQ9JnM1PSZzNj0=&action=action_tmp
IP
File type HTML document, ASCII text, with no line terminators
Hash 57f921784f88f823181754445d490a77
d8529405ddfe3580da11877384af34cfaccdf816
4987dab0a78f38b9f1c58551ae0d36946417fde1651a107cea3f76eca46c0d7f
GET /redirect/index?type=script&to=aHR0cDovL294YmtwLnRyYWNrNHJlZi5jb20=&data=aHR0cHM6Ly9nZG10cmNrLmNvbS8/YT0xMTc1NjcmYz0yNzcyMjcmczE9JnMyPWduenVjNjMxY2YxMDQwMDBiNGNhNSZzMz0mczQ9JnM1PSZzNj0=&action=action_tmp HTTP/1.1
Host: oxbkp.track4ref.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Sep 2022 20:18:27 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 243
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13993
Expires: Sun, 11 Sep 2022 00:11:40 GMT
Date: Sat, 10 Sep 2022 20:18:27 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 10 Sep 2022 20:06:52 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: PYo7tIup6csWsA4dqbnN-oz5avwiQGM0eJg90Bz49lxMOk_6xV08dw==
Age: 695
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 10 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: zb1ai2R_aDuc9fU-OZWu2BDecXUYyh8nPC64V-00Iih5uRsmU-v7ww==
age: 46875
X-Firefox-Spdy: h2
oxbkp.track4ref.com/redirect/index?type=script&to=aHR0cDovL294YmtwLnRyYWNrNHJlZi5jb20=&data=aHR0cHM6Ly9nZG10cmNrLmNvbS8/YT0xMTc1NjcmYz0yNzcyMjcmczE9JnMyPWduenVjNjMxY2YxMDQwMDBiNGNhNSZzMz0mczQ9JnM1PSZzNj0=&action=action_final
200 OK 121 B URL HTTP/1.1 oxbkp.track4ref.com/redirect/index?type=script&to=aHR0cDovL294YmtwLnRyYWNrNHJlZi5jb20=&data=aHR0cHM6Ly9nZG10cmNrLmNvbS8/YT0xMTc1NjcmYz0yNzcyMjcmczE9JnMyPWduenVjNjMxY2YxMDQwMDBiNGNhNSZzMz0mczQ9JnM1PSZzNj0=&action=action_final
IP
File type HTML document, ASCII text, with no line terminators
Hash fb0240f4eea9945747e05bc687c643a0
f991ecbc1447d951e87ec4446800c519a2fa6e4d
34fa0a93c1bfe86d5dc23f973b47f91b19e04fc658fa78d5a5064d95a252cbc9
GET /redirect/index?type=script&to=aHR0cDovL294YmtwLnRyYWNrNHJlZi5jb20=&data=aHR0cHM6Ly9nZG10cmNrLmNvbS8/YT0xMTc1NjcmYz0yNzcyMjcmczE9JnMyPWduenVjNjMxY2YxMDQwMDBiNGNhNSZzMz0mczQ9JnM1PSZzNj0=&action=action_final HTTP/1.1
Host: oxbkp.track4ref.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://oxbkp.track4ref.com/redirect/index?type=script&to=aHR0cDovL294YmtwLnRyYWNrNHJlZi5jb20=&data=aHR0cHM6Ly9nZG10cmNrLmNvbS8/YT0xMTc1NjcmYz0yNzcyMjcmczE9JnMyPWduenVjNjMxY2YxMDQwMDBiNGNhNSZzMz0mczQ9JnM1PSZzNj0=&action=action_tmp
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 10 Sep 2022 20:18:27 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 121
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 10 Sep 2022 20:18:27 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash fb974f95277d0645a18cd89caddec6cc
e1d134c5fadfc4c4d93d275f5006f59a9c47e2c3
bd5723fb79487077b8f7a26e4b3dd974bee61ddb482068795cd756bc7ddec176
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 10 Sep 2022 20:18:27 GMT
Last-Modified: Sat, 10 Sep 2022 18:41:24 GMT
Server: ECS (dcb/7ECA)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6tndvSSxclTAD-ceqVcyCT4VzO3VCMGrXZXewUpCVt0yMjudjI6mkg==
Age: 5823
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 10 Sep 2022 19:56:07 GMT
Cache-Control: max-age=3600
Expires: Sat, 10 Sep 2022 20:00:14 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Q_JlYki8uaC9HzvaZXH9tXhpyPljG-qneqmtAljXZpc6aza-oQHCWg==
Age: 1340
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ce3e7c8e24f35ab0cba9a4e8dc038e49
4560e1a843485c6629b259514815bd287ea6366c
4bf9372d35e055f55f5218e2c9593e4fabf4c85b6dd9c67b5a4ca03a93347898
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BF9372D35E055F55F5218E2C9593E4FABF4C85B6DD9C67B5A4CA03A93347898"
Last-Modified: Fri, 09 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17852
Expires: Sun, 11 Sep 2022 01:16:00 GMT
Date: Sat, 10 Sep 2022 20:18:28 GMT
Connection: keep-alive
www.jetzt-dabei-sein.com/de,flexfancy,zooloo_910.html?idPartner=85&idCampaignAd=0&subId=117567&subIdentifier=cd295ed36b1044f6b82c0f89e26101defff3&aps=&aps2=&rlmset=rbike2020_de
302 Found 0 B URL HTTP/2 www.jetzt-dabei-sein.com/de,flexfancy,zooloo_910.html?idPartner=85&idCampaignAd=0&subId=117567&subIdentifier=cd295ed36b1044f6b82c0f89e26101defff3&aps=&aps2=&rlmset=rbike2020_de
IP
ASN #29141 Bradler & Krantz GmbH & Co. KG
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /de,flexfancy,zooloo_910.html?idPartner=85&idCampaignAd=0&subId=117567&subIdentifier=cd295ed36b1044f6b82c0f89e26101defff3&aps=&aps2=&rlmset=rbike2020_de HTTP/1.1
Host: www.jetzt-dabei-sein.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://oxbkp.track4ref.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=t8mvr9jdf5jt31j346e3k5rcc4; path=/
coyoteTrackingCookie_910=441733648; expires=Mon, 10-Oct-2022 20:18:28 GMT; Max-Age=2592000; path=/;samesite=None; Secure
coyoteSimpleTrackingCookie=441733648; expires=Mon, 10-Oct-2022 20:18:28 GMT; Max-Age=2592000; path=/;SameSite=None; Secure
location: https://mubayiro.de/campaign_1173.html?coyoteAffiliTokenId=441733648&aps=&aps2=&rlmset=rbike2020_de&
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
date: Sat, 10 Sep 2022 20:18:28 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 36fe04277220227ba5ecfe7d2ff1d9d9
2eb9f6560336248cc45c1cd66d87505b5ebdf5d4
94f8f2f8f3b67db18825ea48740ff0ce218d7156fe851d6b023ef43b6bee4f7f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5516
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:18:28 GMT
Last-Modified: Sat, 10 Sep 2022 18:46:32 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 16de9056dfb7dba78851c495c2075a85
1ed16d5e57dd69302681bd882e546d2091c41eef
51f180489592ca57d20af405916d26c3ce4f58649be632350e397313301f1306
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51F180489592CA57D20AF405916D26C3CE4F58649BE632350E397313301F1306"
Last-Modified: Fri, 09 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19688
Expires: Sun, 11 Sep 2022 01:46:36 GMT
Date: Sat, 10 Sep 2022 20:18:28 GMT
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: i80y/M57SUr4GzKttPj5YA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /MCCqjZKJ9zUHAhLNgT68/aA1h4=
mubayiro.de/campaign_1173.html?coyoteAffiliTokenId=441733648&aps=&aps2=&rlmset=rbike2020_de&
200 OK 16 kB URL HTTP/2 mubayiro.de/campaign_1173.html?coyoteAffiliTokenId=441733648&aps=&aps2=&rlmset=rbike2020_de&
IP
ASN #29141 Bradler & Krantz GmbH & Co. KG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1905), with CRLF, LF line terminators
Hash 1880e05449fb27dbd7aea87b189b95f8
627deead32738419b0017c0e0d365c6cd54371e4
50b16d1183dfe6eda304a9104b1d61a62e021c8d82c185d436304a16e75c77de
GET /campaign_1173.html?coyoteAffiliTokenId=441733648&aps=&aps2=&rlmset=rbike2020_de& HTTP/1.1
Host: mubayiro.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://oxbkp.track4ref.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=m2ds9gi1npjdvaourobe8ekf7j; path=/
coyoteAffiliTokenId1173=441733648; expires=Sun, 11-Sep-2022 00:18:28 GMT; Max-Age=14400; path=/
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 16173
content-type: text/html; charset=UTF-8
date: Sat, 10 Sep 2022 20:18:28 GMT
server: Apache
X-Firefox-Spdy: h2
p2e9r4n9.stackpathcdn.com/__pbaseruv.min.js?ak=4419fb3582f78f4682e1fa79b67675582c6f9ece&dg=0&ci=1&gv=5&s1=85&s2=117567&s3=1173&s4=cd295ed36b1044f6b82c0f89e26101defff3&s5=rbike2020_de&s6=S6MACRO&s7=S7MACRO&s8=S8MACRO&s9=S9MACRO&s10=S10MACRO&s11=S11MACRO&s12=S12MACRO&s13=S13MACRO&s14=S14MACRO&s15=S15MACRO&s16=S16MACRO&s17=S17MACRO&s18=S18MACRO&s19=S19MACRO&s20=441733648
200 OK 7.0 kB URL HTTP/2 p2e9r4n9.stackpathcdn.com/__pbaseruv.min.js?ak=4419fb3582f78f4682e1fa79b67675582c6f9ece&dg=0&ci=1&gv=5&s1=85&s2=117567&s3=1173&s4=cd295ed36b1044f6b82c0f89e26101defff3&s5=rbike2020_de&s6=S6MACRO&s7=S7MACRO&s8=S8MACRO&s9=S9MACRO&s10=S10MACRO&s11=S11MACRO&s12=S12MACRO&s13=S13MACRO&s14=S14MACRO&s15=S15MACRO&s16=S16MACRO&s17=S17MACRO&s18=S18MACRO&s19=S19MACRO&s20=441733648
IP
File type ASCII text, with very long lines (21540)
Hash e80a23fefb099374167ad1009fea9745
8ff88527ec5a8381a5c2cc484f3b3610bcdb12b2
5c8ee1f58cbc23e451fb02bc780d8f9ac292340047093b3f90e4404f325d4e83
GET /__pbaseruv.min.js?ak=4419fb3582f78f4682e1fa79b67675582c6f9ece&dg=0&ci=1&gv=5&s1=85&s2=117567&s3=1173&s4=cd295ed36b1044f6b82c0f89e26101defff3&s5=rbike2020_de&s6=S6MACRO&s7=S7MACRO&s8=S8MACRO&s9=S9MACRO&s10=S10MACRO&s11=S11MACRO&s12=S12MACRO&s13=S13MACRO&s14=S14MACRO&s15=S15MACRO&s16=S16MACRO&s17=S17MACRO&s18=S18MACRO&s19=S19MACRO&s20=441733648 HTTP/1.1
Host: p2e9r4n9.stackpathcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:18:28 GMT
content-encoding: gzip
content-length: 6950
content-type: application/javascript
last-modified: Wed, 06 Apr 2022 08:52:13 GMT
accept-ranges: bytes
server: Apache/2.4.41 (Ubuntu)
etag: "5425-5dbf87a489dee-gzip"
access-control-allow-credentials: true
cache-control: max-age=84600, public
x-hw: 1662841108.cds212.sk1.hn,1662841108.cds257.sk1.c
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da7b1c24eee0db0c23872933557b7521
b8bc1215b4073784c048587e51a40152bd88c8ed
6ba38b5c68971135ed3f1fbe7afa658ce883240142a4244ce7d84fa251a64c3f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:18:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/css/spinner.css
200 OK 1.3 kB URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/css/spinner.css
IP
File type ASCII text, with CRLF line terminators
Hash 308609aca6938598a1390b47ec576e97
0555f403b451b7806d3e0db2d0959a5d4aab4421
54f7c8623cf0f0cf760385a22a4a5d20db7b2e3dfaecaab38ddf25ace848b171
GET /flexfancy/css/spinner.css HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 1295
Connection: keep-alive
x-amz-id-2: DV5zN7aMgmmtn6NehrcIokm/5RvNqBcePAqGfsY4WMgWn1icYC5FrFmsIxhJHNIswbL9Lpbw718=
x-amz-request-id: QWJ1WGMJ7369TM8C
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Wed, 14 Feb 2018 10:07:16 GMT
ETag: "308609aca6938598a1390b47ec576e97"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GBbcer_o4wcqQGN1AnKGxMbA79CERd1h9bhf0kD9_1EA2vThLVRvBQ==
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/css/balloon.min.css
200 OK 5.5 kB URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/css/balloon.min.css
IP
File type ASCII text, with very long lines (5489), with no line terminators
Hash acd37f0b3be30c6cefff2ed8117e5938
8f90458381edc16cd7b506f6025a75632d6b3355
4122f214f47bf170342826a86092121db1a8ac7cb3c0f899a1ede8b6b96f27c8
GET /flexfancy/css/balloon.min.css HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 5489
Connection: keep-alive
x-amz-id-2: s7QVTCgvd5BHdwmejg1jUgaRCiOZ+Pauj79GsIJvRHpLS33pZ+mEwXqkgr1V7za928AE/AGaqfU=
x-amz-request-id: QWJ5XMQSMVHX1XJR
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Wed, 14 Feb 2018 10:07:16 GMT
ETag: "acd37f0b3be30c6cefff2ed8117e5938"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: P4nkWZAmaj9fSiw4KwBR1E0_4HTa-EKGABsfxJsvBpYsiuJlO3xj6g==
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/lib/md5.min.js
200 OK 3.8 kB URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/lib/md5.min.js
IP
File type ASCII text, with very long lines (3730), with CRLF line terminators
Hash d42ff83c2d527cdab773855cfe523561
c27927a82941ba972c140abf26ad82e04c32d86a
9265ea6ee06a36211ef80e33821b309020e5c40c972cf70a07f10577c0cce549
GET /flexfancy/lib/md5.min.js HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 3767
Connection: keep-alive
x-amz-id-2: JNsab6W3KVj0AYzOw8jYULC/mbGCTq4B5aX+x/PD3WZ5ipqPtclmBhBTcXw21nyh8KNYUeGp+Zc=
x-amz-request-id: QWJAE3NKDTPEV93W
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Tue, 08 Oct 2019 09:23:31 GMT
ETag: "d42ff83c2d527cdab773855cfe523561"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: c12Wcbgb3MjSmC04sOI7Zew-qAoIx-5IVYvr8LkHcI3Kzx6Pt3ROoQ==
www.google.com/recaptcha/api.js?render=6LcqT0IcAAAAALs32boRiZGsltiXH8Guzkkdf3CM
200 OK 586 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6LcqT0IcAAAAALs32boRiZGsltiXH8Guzkkdf3CM
IP
File type ASCII text, with very long lines (884), with no line terminators
Hash b71a32b41d8223c100bef22b22456670
337dee22c0874886efa12ca7cc40365d76a5694a
36ab47241d3b25639756724d19b41a057bc56347c6dd032bd9a97763e77103be
GET /recaptcha/api.js?render=6LcqT0IcAAAAALs32boRiZGsltiXH8Guzkkdf3CM HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 10 Sep 2022 20:18:28 GMT
date: Sat, 10 Sep 2022 20:18:28 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 586
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e703f01a1bb017e21d8112e10d01acdc
4419affb4f0b031fbc5786f1981a2fd730d1cccf
9326af99ea8febd171e245d8e108376ba71ffd9df4e1fee94e640525a11601ee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9326AF99EA8FEBD171E245D8E108376BA71FFD9DF4E1FEE94E640525A11601EE"
Last-Modified: Sat, 10 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5061
Expires: Sat, 10 Sep 2022 21:42:49 GMT
Date: Sat, 10 Sep 2022 20:18:28 GMT
Connection: keep-alive
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/lib/jquery-3.4.1.js
200 OK 280 kB URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/lib/jquery-3.4.1.js
IP
Size 280 kB (280364 bytes)
Hash 11c05eb286ed576526bf4543760785b9
7faa15a054093f3b5d674e63b6567c835a6fa217
5a93a88493aa32aab228bf4571c01207d3b42b0002409a454d404b4d8395bd55
GET /flexfancy/lib/jquery-3.4.1.js HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 280364
Connection: keep-alive
x-amz-id-2: PbLL4CvuEQkKR/Q5lG+/iA8VoRLiPa11JQRF/gqwlbSqmB2cPwtiv5as94kfWsIGp0AZVZz0bWk=
x-amz-request-id: QWJ8QRZ118FKPDKT
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Wed, 28 Aug 2019 14:45:01 GMT
ETag: "11c05eb286ed576526bf4543760785b9"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _hi7JwcXbLpMMLFpdMrIdJOt58I-UcnEaFXOiH9HWV4diNJxqSTaPQ==
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/scripts/adressDeOrt.js
200 OK 9.8 kB URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/scripts/adressDeOrt.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash f27bf73696475a931df4f92fb97cae2f
f70e4dc543d6800dead734ec4851d0c07cc352c3
7b4088bfcf66aabe95d2781a1deda475fd2103fe9341916a2568b59bd9183de9
GET /flexfancy/scripts/adressDeOrt.js HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 9770
Connection: keep-alive
x-amz-id-2: uF/2C70GBHmTYR19nSdAtgDphRFUxHgabbMN0+IOrR+yRvwfVHkjF+TWLywB0yADK8JlV8sKogI=
x-amz-request-id: QWJ12H8KWFVPFPK8
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Thu, 20 Aug 2020 10:52:07 GMT
ETag: "f27bf73696475a931df4f92fb97cae2f"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Yb3GxiBN4R8tCskHcTfyHEu5f1t07AxU9c0EtiN1hwafkaQ_qZ33hw==
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/scripts/logic_new.js
200 OK 244 kB URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/scripts/logic_new.js
IP
File type Unicode text, UTF-8 text, with CRLF line terminators
Size 244 kB (243655 bytes)
Hash 178895ed599f4d5da86f99a64da9006f
53a00797b498268ff1eecff3f42ce517ff9a2998
8a3a7b082a5c56c652258fadf200df538c7a020009af8153668262db468c1bae
GET /flexfancy/scripts/logic_new.js HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 243655
Connection: keep-alive
x-amz-id-2: PEcSAvjdtQxVNxqELJxhOGNX5n9PFrlh4o7GZIbIsHgbz4n8CEIbZ08kTqA8cqOITEJGumRUbck=
x-amz-request-id: QWJ8GRCQ08CN762K
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Tue, 21 Jun 2022 07:42:49 GMT
ETag: "178895ed599f4d5da86f99a64da9006f"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zmqMC_CQZgdz7QrVeJJVMZzxMPDvoYeH6wTx71uquAlX2xfWO5S1yA==
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 90af7f9fc306540e02535db3d00dca64
9e05b003b35ed57277b6b295adde93add7c41b0b
64abd990305ef3f25ffb3fb2ccae04b76e178375752ecb2020411df8f7974fcf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:18:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4338fbac26cec68129aac462e641b0bd
8e03ba2eeea5fe2097b2e7e58c7b913288f97619
ab3a7509f7472f91572cc2a97d6dfd02c9b9f251d2619a342f8ee04aeaa885c9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AB3A7509F7472F91572CC2A97D6DFD02C9B9F251D2619A342F8EE04AEAA885C9"
Last-Modified: Fri, 09 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20047
Expires: Sun, 11 Sep 2022 01:52:35 GMT
Date: Sat, 10 Sep 2022 20:18:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 803a68d22c0ccbe7dff1a461bbba9f23
5602dbe648a29d053b9ca3a4dbf5338d4252947b
da823b04be8d9fa34056bee38517fd2b2556a268c4fe19cea06357e3970598e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DA823B04BE8D9FA34056BEE38517FD2B2556A268C4FE19CEA06357E3970598E5"
Last-Modified: Fri, 09 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17413
Expires: Sun, 11 Sep 2022 01:08:41 GMT
Date: Sat, 10 Sep 2022 20:18:28 GMT
Connection: keep-alive
rltools.de/rlm_analytics/scripts/rlm_stat.js
200 OK 2.9 kB URL HTTP/2 rltools.de/rlm_analytics/scripts/rlm_stat.js
IP
ASN #34788 Neue Medien Muennich GmbH
Hash dfd976d3120feb955a33887381715e89
758c2c901227120d71567ca29fb6b6de57968328
8a91c4418d5d29b657fe8ab816ede18c6f0487315622ef0e030440398d0e3daf
GET /rlm_analytics/scripts/rlm_stat.js HTTP/1.1
Host: rltools.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 21 Jul 2020 16:01:32 GMT
etag: "35fa-5aaf5bca2492e-br"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: br
content-length: 2918
content-type: application/javascript
date: Sat, 10 Sep 2022 20:18:28 GMT
server: Apache
X-Firefox-Spdy: h2
www.rlcontrol.de/ftp/flexblocks/scripts/lib/moment.min.js
200 OK 17 kB URL HTTP/2 www.rlcontrol.de/ftp/flexblocks/scripts/lib/moment.min.js
IP
ASN #29141 Bradler & Krantz GmbH & Co. KG
File type ASCII text, with very long lines (51679), with no line terminators
Hash 174f71b5e532bbee86b7e51ed2d11a82
abbec602df1ebf647b88d18cbd1dd162d7f1f6ad
34084291d4c3f11af71b71f00c969a81380daa917e3e90ad1a08e836ced4e5f9
GET /ftp/flexblocks/scripts/lib/moment.min.js HTTP/1.1
Host: www.rlcontrol.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Tue, 24 Jul 2018 14:05:29 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 10 Oct 2022 20:18:28 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 16804
content-type: application/javascript
date: Sat, 10 Sep 2022 20:18:28 GMT
server: Apache
X-Firefox-Spdy: h2
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/images/outer_slice_bottom.png
200 OK 143 B URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/images/outer_slice_bottom.png
IP
File type PNG image data, 1 x 33, 8-bit/color RGB, non-interlaced\012- data
Hash cdfb089c7a2ffb19106f0553ad115375
99f6ab0e088971a4d07a89f55a1d204e9164669a
c86ac9a90aafd6aa025eeb2d1d6de20c03df782ef151c9d2515b23407768f134
GET /flexfancy/images/outer_slice_bottom.png HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/css/style_new_zooloo.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 143
Connection: keep-alive
x-amz-id-2: pvHMupXGUsmmnSw1ID60pjtej8Nl3RhF2sBMQmhbYYSwcWt+h1cIZCbn7ocvJM38nANkaXIJEg0=
x-amz-request-id: QWJBP81EH2KXSR94
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Wed, 14 Feb 2018 10:07:18 GMT
ETag: "cdfb089c7a2ffb19106f0553ad115375"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ejf6SeCsh1cU5bJ223Rhoxjev6yFgbXkXIbZvMbCK1SqrtzsO_23_A==
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/images/outer_slice_top.png
200 OK 136 B URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/images/outer_slice_top.png
IP
File type PNG image data, 1 x 15, 8-bit/color RGB, non-interlaced\012- data
Hash b3cd71c3db91f48dfd8b00d472022dc0
5cff683bc4fe66eba2d2328f3ef9f812b6c974f0
bf37f0c405389fda13867faa69cf36ffe1b8764f3e0460f2caade056a36d2483
GET /flexfancy/images/outer_slice_top.png HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/css/style_new_zooloo.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 136
Connection: keep-alive
x-amz-id-2: mbnTVdAbceWyfHPWbiXSETIRGvj72SdtzbJQSGL75No89WJaSj/PJ849Fdn3amYGz5GC0WoCI4c=
x-amz-request-id: QWJC2PV0A7WVJDEE
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Wed, 14 Feb 2018 10:07:18 GMT
ETag: "b3cd71c3db91f48dfd8b00d472022dc0"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Givk62HUvRid2NRS7r7_kNLVAsN8skSg4y8s3bPg6eKwIImY1H74Cw==
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/fonts/Candal.woff
200 OK 25 kB URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/fonts/Candal.woff
IP
File type Web Open Font Format, TrueType, length 25000, version 1.0\012- data
Hash e29c6ae99d1f2dc8d6a607b46c082b74
9fe5da34238024f299a42910d7ef9882576bf7e3
80a2aa3ffeb789ffaa34b6a0b738e7baed24396c4656dd1224c8c0ba0f4ddf84
GET /flexfancy/fonts/Candal.woff HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://rlmgws-data.s3-accelerate.amazonaws.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/font-woff
Content-Length: 25000
Connection: keep-alive
x-amz-id-2: GyEdhhO3vVCRwP18QUrb2nIpre6rP8bxqI4lHRlZRAGx5QkPGGk9T5xYh5NEI08rpCx9fU/2Or8=
x-amz-request-id: DGFQJSGH07YRBQZD
Date: Sat, 10 Sep 2022 20:18:30 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Last-Modified: Wed, 14 Feb 2018 10:07:18 GMT
ETag: "e29c6ae99d1f2dc8d6a607b46c082b74"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0Y35Qp35D22pvc9_bVehB5SCRz6NEU83gLLb2Pha6fPhKYrK8fWDtQ==
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/fonts/Aileron-Bold.woff
200 OK 23 kB URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/fonts/Aileron-Bold.woff
IP
File type Web Open Font Format, TrueType, length 23108, version 1.0\012- data
Hash 317ed94a878c8d8ea413f51e575513f4
f1554d7cbd5c2937165c5b5f1c3028681264e2a5
ac249b9af121f1a9bf29b7c611b5986a5f1088da276a72a1e96b77fec1020aad
GET /flexfancy/fonts/Aileron-Bold.woff HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://rlmgws-data.s3-accelerate.amazonaws.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/font-woff
Content-Length: 23108
Connection: keep-alive
x-amz-id-2: Zr5Hr6Eh4qAAeMQXw1oHgdWJ689KLzQIW8iLMk9dHgVZKkmwINdHoO8pYkiUDBlAK0jc40zayyk=
x-amz-request-id: DGFP55BAVW9FSXVG
Date: Sat, 10 Sep 2022 20:18:30 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Last-Modified: Wed, 14 Feb 2018 10:07:17 GMT
ETag: "317ed94a878c8d8ea413f51e575513f4"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sIgBsIyj9pATqq0vaMsD8dQYBc9zxDP7g9L36iv90n9QLOPqJbXWBg==
gdmtrck.com/?a=117567&c=277227&s1=&s2=gnzuc631cf104000b4ca5&s3=&s4=&s5=&s6=
302 Found 22 kB URL HTTP/2 gdmtrck.com/?a=117567&c=277227&s1=&s2=gnzuc631cf104000b4ca5&s3=&s4=&s5=&s6=
IP
Hash 514b3f157d97105a6c5b32d0a1dca6c5
33670e15c5712c7059a08f3d86de8287d28608e9
284303186b0bc001044190c06d6b8b45b4ea91adc777b5841aa3468a736f6a61
GET /?a=117567&c=277227&s1=&s2=gnzuc631cf104000b4ca5&s3=&s4=&s5=&s6= HTTP/1.1
Host: gdmtrck.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://oxbkp.track4ref.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Sat, 10 Sep 2022 20:18:27 GMT
content-type: text/html;charset=ISO-8859-1
location: https://www.jetzt-dabei-sein.com/de,flexfancy,zooloo_910.html?idPartner=85&idCampaignAd=0&subId=117567&subIdentifier=cd295ed36b1044f6b82c0f89e26101defff3&aps=&aps2=&rlmset=rbike2020_de
server: nginx
set-cookie: gdm_click_adv_freq_v1_1_001=fLD5x/On/zUg7UtwirCWoK5UY9rAhqiRGMyZC4yjhpF3KSbhiXgETK0iFLbH6S39; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/
gdm_click_freq_v1_1_001=zqodihupMbW9oUMoWdwx1yHLGqy9M61SlXEiTaTh1N4gS9AwB+DpQyvqTITzMM+e; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/
gdm_sid_v2_3_001=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; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/; Secure; SameSite=None
gdm_uid_v2_1_001=cgBLx5Thbe5NQ2AHaTG1zoC3kvF8alrLLgBlztWskx7pbCGjxDOWyfIHGy3heYth; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/; Secure; SameSite=None
gdm_uid_v1_1_001=cgBLx5Thbe5NQ2AHaTG1zoC3kvF8alrLLgBlztWskx7pbCGjxDOWyfIHGy3heYth; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/
gdm_sid_v1_3_001=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; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/
gdm_click_adv_freq_v2_1_001=fLD5x/On/zUg7UtwirCWoK5UY9rAhqiRGMyZC4yjhpF3KSbhiXgETK0iFLbH6S39; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/; Secure; SameSite=None
gdm_click_freq_v2_1_001=zqodihupMbW9oUMoWdwx1yHLGqy9M61SlXEiTaTh1N4gS9AwB+DpQyvqTITzMM+e; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/; Secure; SameSite=None
gdm_suid_v2_1_001=HPfHs3OFxkaNOwO68jCjbQ==; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/; Secure; SameSite=None
gdm_suid_v1_1_001=HPfHs3OFxkaNOwO68jCjbQ==; Domain=.gdmtrck.com; Expires=Fri, 09-Dec-2022 20:18:27 GMT; Path=/
content-language: en-US
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS
access-control-allow-headers: Accept,Authorization,Cache-Control,Content-Type,DNT,If-Modified-Since,Keep-Alive,Origin,User-Agent,X-Requested-With,X-Auth,Pasha-Jlob
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f426357f1b8d20be8cb0660b80e38379
b99702652e50c45b0db6b93ea3b397f669438222
bee306cb96220e5d2a8367a7642247a1d818a62131f2f776385128f8e78fc00b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Sat, 10 Sep 2022 18:32:13 GMT
Server: ECS (nyb/1D27)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yvFTY0Ztcmw2JwG6ksiX-KZxHKIDgiHqJlQra9w1jeXCmB3fh2SKdw==
Age: 6376
mubayiro.de/ftp/flexfancy/services/resource.php?rlmset=rbike2020_de
200 OK 575 B URL HTTP/2 mubayiro.de/ftp/flexfancy/services/resource.php?rlmset=rbike2020_de
IP
ASN #29141 Bradler & Krantz GmbH & Co. KG
File type JSON data\012- , ASCII text, with very long lines (1121), with no line terminators
Hash 4fc37ac01eca153d8a031cb1fa33fc93
6c632c0b323d398cc8bfd92a68472c4b558917d0
cea2f687970af2c2cbca869884b47c38018a7ae678aac47845c2cfd65d7d19ac
GET /ftp/flexfancy/services/resource.php?rlmset=rbike2020_de HTTP/1.1
Host: mubayiro.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://mubayiro.de/campaign_1173.html?coyoteAffiliTokenId=441733648&aps=&aps2=&rlmset=rbike2020_de&
Cookie: PHPSESSID=m2ds9gi1npjdvaourobe8ekf7j; coyoteAffiliTokenId1173=441733648
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 575
content-type: application/json; charset=utf-8
date: Sat, 10 Sep 2022 20:18:29 GMT
server: Apache
X-Firefox-Spdy: h2
rlmgws-data.s3.eu-central-1.amazonaws.com/flexfancy/images/extra/gratis_teilnahme/hinweis.png
200 OK 14 kB URL HTTP/1.1 rlmgws-data.s3.eu-central-1.amazonaws.com/flexfancy/images/extra/gratis_teilnahme/hinweis.png
IP
File type PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced\012- data
Hash 3b9545828b1e7d248235f80fa36612f3
1110613fd01a1773609d573b457b8c22b2d92d3d
fd377e3b6033fd2a541887ad00bd9a47be285fa449acf0530b825e4d16c86590
GET /flexfancy/images/extra/gratis_teilnahme/hinweis.png HTTP/1.1
Host: rlmgws-data.s3.eu-central-1.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://rlmgws-data.s3-accelerate.amazonaws.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: rLSvW+0HU//gFfv7bdCgLZ5p4ttSSELxG3p6UIcH9243JOlaeEGbvLXkG4W1+C/1LM1Uhd2825o=
x-amz-request-id: DGFWK3HE6PQ71CFS
Date: Sat, 10 Sep 2022 20:18:30 GMT
Last-Modified: Wed, 28 Apr 2021 15:32:23 GMT
ETag: "3b9545828b1e7d248235f80fa36612f3"
Accept-Ranges: bytes
Content-Type: image/png
Server: AmazonS3
Content-Length: 14484
mubayiro.de/service-worker.js
200 OK 172 B URL HTTP/2 mubayiro.de/service-worker.js
IP
ASN #29141 Bradler & Krantz GmbH & Co. KG
File type ASCII text, with CRLF line terminators
Hash 9ac9d7b3b0017e5e9febf761c449b15c
c700c119d8d0f87e21777b6e7e1fe471ea820be0
460c9c03a91f7fb3c3ab7ab86fc015f1b691cbbcb35ced6bbbeedab8d71f05f1
Analyzer Verdict Alert fortinet Phishing
GET /service-worker.js HTTP/1.1
Host: mubayiro.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Service-Worker: script
Connection: keep-alive
Cookie: PHPSESSID=m2ds9gi1npjdvaourobe8ekf7j; coyoteAffiliTokenId1173=441733648
Sec-Fetch-Dest: serviceworker
Sec-Fetch-Mode: same-origin
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
last-modified: Thu, 31 Mar 2022 12:59:56 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 10 Oct 2022 20:18:29 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 172
content-type: application/javascript
date: Sat, 10 Sep 2022 20:18:29 GMT
server: Apache
X-Firefox-Spdy: h2
cleanleadsonly.com/h/4835109d48c9e17ffe?url=https%3A%2F%2Fmubayiro.de%2Fcampaign_1173.html%3FcoyoteAffiliTokenId%3D441733648%26aps%3D%26aps2%3D%26rlmset%3Drbike2020_de%26&response-opticks-version=v3&_t0=1662841098738&_t1=1662841099081&_t2=1662841099081&_optKaEreBAeKQDU=8d2d0d54&_m=1uc&coyoteAffiliTokenId=441733648&aps=&aps2=&rlmset=rbike2020_de&external_id=441733648&var1=85&subpublisher_id=117567&var2=cd295ed36b1044f6b82c0f89e26101defff3&var3=rbike2020_de&version=v3
200 OK 719 B URL HTTP/1.1 cleanleadsonly.com/h/4835109d48c9e17ffe?url=https%3A%2F%2Fmubayiro.de%2Fcampaign_1173.html%3FcoyoteAffiliTokenId%3D441733648%26aps%3D%26aps2%3D%26rlmset%3Drbike2020_de%26&response-opticks-version=v3&_t0=1662841098738&_t1=1662841099081&_t2=1662841099081&_optKaEreBAeKQDU=8d2d0d54&_m=1uc&coyoteAffiliTokenId=441733648&aps=&aps2=&rlmset=rbike2020_de&external_id=441733648&var1=85&subpublisher_id=117567&var2=cd295ed36b1044f6b82c0f89e26101defff3&var3=rbike2020_de&version=v3
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (719), with no line terminators
Hash 26ecab7a3f2174f2ca1112866124a6dc
21ae30873216077a75540f13f4989227ae9fcfb9
70a353b1df7853a8fa4e86a332de81e989b7202814461cfc55d653dd2785815e
POST /h/4835109d48c9e17ffe?url=https%3A%2F%2Fmubayiro.de%2Fcampaign_1173.html%3FcoyoteAffiliTokenId%3D441733648%26aps%3D%26aps2%3D%26rlmset%3Drbike2020_de%26&response-opticks-version=v3&_t0=1662841098738&_t1=1662841099081&_t2=1662841099081&_optKaEreBAeKQDU=8d2d0d54&_m=1uc&coyoteAffiliTokenId=441733648&aps=&aps2=&rlmset=rbike2020_de&external_id=441733648&var1=85&subpublisher_id=117567&var2=cd295ed36b1044f6b82c0f89e26101defff3&var3=rbike2020_de&version=v3 HTTP/1.1
Host: cleanleadsonly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1949
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 10 Sep 2022 20:18:29 GMT
Cache-Control: private, max-age=0, no-cache, no-store, must-revalidate
Pragma: no-cache
Access-Control-Allow-Origin: *
Content-Type: application/json
Vary: Accept-Encoding, User-Agent
Content-Length: 719
www.rltools.de/rlm_analytics/rlm_stat.php
200 OK 2.2 kB URL HTTP/2 www.rltools.de/rlm_analytics/rlm_stat.php
IP
ASN #34788 Neue Medien Muennich GmbH
File type JSON data\012- , ASCII text, with no line terminators
Hash 8e9a46f3a24d4479a3eeb3ace3ab4199
b7c2c1bd2ee7bb8393ccebbd8ad20e0a7c078465
1fd5f7651ec98f9d46c51341072bbed5d21e70e47718b5a8276a9574db88b80c
POST /rlm_analytics/rlm_stat.php HTTP/1.1
Host: www.rltools.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 16
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
access-control-max-age: 1000
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
vary: Accept-Encoding,User-Agent
content-encoding: br
content-type: application/json; charset=utf-8
date: Sat, 10 Sep 2022 20:18:29 GMT
server: Apache
X-Firefox-Spdy: h2
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/fonts/Aileron-Heavy.woff
200 OK 23 kB URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/fonts/Aileron-Heavy.woff
IP
File type Web Open Font Format, TrueType, length 23280, version 1.0\012- data
Hash 977a8badf138ba0183b618103fbea86a
5082997a0716920ac661563638bede0d529f4940
67bb015ac96fd86bc355f22829c7c4e7ed5c288176c2ec013c356eef07b1ae87
GET /flexfancy/fonts/Aileron-Heavy.woff HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://rlmgws-data.s3-accelerate.amazonaws.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/font-woff
Content-Length: 23280
Connection: keep-alive
x-amz-id-2: wgx71fZ0RA+9MdJ3b1JB0rjYNVKJUkQp+uMvQuo9yx7jhNh6sbP9mTrP1rIHD7jQvyOE2uCXuWo=
x-amz-request-id: DGFS48NGQDDW7V7T
Date: Sat, 10 Sep 2022 20:18:30 GMT
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method
Last-Modified: Wed, 14 Feb 2018 10:07:17 GMT
ETag: "977a8badf138ba0183b618103fbea86a"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MkgypMflsiwafCovlZw65fwXP-jzzzavTX9qEpv1W6b2ZfHVDG3xHA==
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash f7d6e3299b699ef0c80c2914cae20e70
570ab183c1753aaee8a706c5d2e87731e1c078b2
77e3d788c57820a951e2486a06ddea670837bd26642bcfd601aebc1367ad25f0
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Sat, 10 Sep 2022 18:38:41 GMT
Server: ECS (dcb/7F5D)
X-Cache: Miss from cloudfront
Via: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RtzZ6fcw1sWuvaiLjZKO5mIR8hFiKxSqKVplLGh0LJWjWHsmSLxVNA==
Age: 5988
www.rltools.de/rlm_analytics/rlm_stat.php
200 OK 160 kB URL HTTP/2 www.rltools.de/rlm_analytics/rlm_stat.php
IP
ASN #34788 Neue Medien Muennich GmbH
File type JSON data\012- , ASCII text, with no line terminators
Size 160 kB (160151 bytes)
Hash 583abb38ca3a7041094c62ac0d3a948d
df68d0136c4c777000ca1bf2cddffc783b8bb96b
2552f88c95d9ebac70631ca8542b6808f4ef0a35b43086a8efaccc042003b4b9
POST /rlm_analytics/rlm_stat.php HTTP/1.1
Host: www.rltools.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 73
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
access-control-max-age: 1000
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
vary: Accept-Encoding,User-Agent
content-encoding: br
content-type: application/json; charset=utf-8
date: Sat, 10 Sep 2022 20:18:29 GMT
server: Apache
X-Firefox-Spdy: h2
mubayiro.de/favicon.ico
200 OK 84 B IP
ASN #29141 Bradler & Krantz GmbH & Co. KG
File type MS Windows icon resource - 1 icon, 50x50, 32 bits/pixel\012- data
Hash 3f58b7b4a090d0afb6b738089e7e25ec
19bb030057cb00b6f0b33bed77c1007879bb6ef3
40dbfde76a354cfe446ea1b114bc30af0db7823e4b15b28a8c3a46f53af52322
GET /favicon.ico HTTP/1.1
Host: mubayiro.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/campaign_1173.html?coyoteAffiliTokenId=441733648&aps=&aps2=&rlmset=rbike2020_de&
Cookie: PHPSESSID=m2ds9gi1npjdvaourobe8ekf7j; coyoteAffiliTokenId1173=441733648
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 21 Jun 2022 04:37:46 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Mon, 10 Oct 2022 20:18:29 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 84
content-type: image/x-icon
date: Sat, 10 Sep 2022 20:18:29 GMT
server: Apache
X-Firefox-Spdy: h2
api.botman.ninja/ic.php?ak=4419fb3582f78f4682e1fa79b67675582c6f9ece&m=AF&f=RUV&fs=SCR&v=17&vis=NA&ifp=0&burl=https%3A%2F%2Fmubayiro.de%2Fcampaign_1173.html%3FcoyoteAffiliTokenId%3D441733648%26aps%3D%26aps2%3D%26rlmset%3Drbike2020_de%26&uq=rd6z5jM8zxGQ&ac=NA&purl=http%3A%2F%2Foxbkp.track4ref.com%2F&ih=939&iw=1280&ow=1280&oh=1024&plf=Linux%20x86_64&cpu=Linux%20x86_64&lst=234lj4kl4dXfsDfkJitY323f6d3&aver=5.0%20(X11)&uagt=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&cen=UTF-8&aname=Netscape&acod=Mozilla&cd=24&zi=NA&nlang=en-US&ndrv=false&win=true&dnt=undefined&hco=16&plg=true&layer=NA&nmt=0&nbo=UTC&fsa=false&ch=939&cw=1280&sh=1024&sw=1280&bld=24&actv=visible&acc=NA&gyro=undefined&pop=false&brl=NA&brt=NA&brh=NA&brb=NA&als=NA&cam=undefined&bt=undefined&ce=true&dlmax=undefined&ntype=undefined&ofw=NA&ofh=NA&s1=85&s2=117567&s3=1173&s4=cd295ed36b1044f6b82c0f89e26101defff3&s5=rbike2020_de&s6=s6macro&hless=false&s7=s7macro&s8=s8macro&s9=s9macro&s10=s10macro&s11=s11macro&s12=s12macro&s13=s13macro&s14=s14macro&s15=s15macro&s16=s16macro&s17=s17macro&s18=s18macro&s19=s19macro&s20=441733648
200 OK 41 B URL HTTP/2 api.botman.ninja/ic.php?ak=4419fb3582f78f4682e1fa79b67675582c6f9ece&m=AF&f=RUV&fs=SCR&v=17&vis=NA&ifp=0&burl=https%3A%2F%2Fmubayiro.de%2Fcampaign_1173.html%3FcoyoteAffiliTokenId%3D441733648%26aps%3D%26aps2%3D%26rlmset%3Drbike2020_de%26&uq=rd6z5jM8zxGQ&ac=NA&purl=http%3A%2F%2Foxbkp.track4ref.com%2F&ih=939&iw=1280&ow=1280&oh=1024&plf=Linux%20x86_64&cpu=Linux%20x86_64&lst=234lj4kl4dXfsDfkJitY323f6d3&aver=5.0%20(X11)&uagt=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&cen=UTF-8&aname=Netscape&acod=Mozilla&cd=24&zi=NA&nlang=en-US&ndrv=false&win=true&dnt=undefined&hco=16&plg=true&layer=NA&nmt=0&nbo=UTC&fsa=false&ch=939&cw=1280&sh=1024&sw=1280&bld=24&actv=visible&acc=NA&gyro=undefined&pop=false&brl=NA&brt=NA&brh=NA&brb=NA&als=NA&cam=undefined&bt=undefined&ce=true&dlmax=undefined&ntype=undefined&ofw=NA&ofh=NA&s1=85&s2=117567&s3=1173&s4=cd295ed36b1044f6b82c0f89e26101defff3&s5=rbike2020_de&s6=s6macro&hless=false&s7=s7macro&s8=s8macro&s9=s9macro&s10=s10macro&s11=s11macro&s12=s12macro&s13=s13macro&s14=s14macro&s15=s15macro&s16=s16macro&s17=s17macro&s18=s18macro&s19=s19macro&s20=441733648
IP
File type JSON data\012- , ASCII text
Hash 003c16bbd08f0467e727f68d625eb1aa
1df344f981fdf79ae77003797fde468ab0d74a9e
9e59beba092ee2e5ea034d3b3eeb54a9d78a17b9c7f0da3f79251ffdb9480d19
GET /ic.php?ak=4419fb3582f78f4682e1fa79b67675582c6f9ece&m=AF&f=RUV&fs=SCR&v=17&vis=NA&ifp=0&burl=https%3A%2F%2Fmubayiro.de%2Fcampaign_1173.html%3FcoyoteAffiliTokenId%3D441733648%26aps%3D%26aps2%3D%26rlmset%3Drbike2020_de%26&uq=rd6z5jM8zxGQ&ac=NA&purl=http%3A%2F%2Foxbkp.track4ref.com%2F&ih=939&iw=1280&ow=1280&oh=1024&plf=Linux%20x86_64&cpu=Linux%20x86_64&lst=234lj4kl4dXfsDfkJitY323f6d3&aver=5.0%20(X11)&uagt=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&cen=UTF-8&aname=Netscape&acod=Mozilla&cd=24&zi=NA&nlang=en-US&ndrv=false&win=true&dnt=undefined&hco=16&plg=true&layer=NA&nmt=0&nbo=UTC&fsa=false&ch=939&cw=1280&sh=1024&sw=1280&bld=24&actv=visible&acc=NA&gyro=undefined&pop=false&brl=NA&brt=NA&brh=NA&brb=NA&als=NA&cam=undefined&bt=undefined&ce=true&dlmax=undefined&ntype=undefined&ofw=NA&ofh=NA&s1=85&s2=117567&s3=1173&s4=cd295ed36b1044f6b82c0f89e26101defff3&s5=rbike2020_de&s6=s6macro&hless=false&s7=s7macro&s8=s8macro&s9=s9macro&s10=s10macro&s11=s11macro&s12=s12macro&s13=s13macro&s14=s14macro&s15=s15macro&s16=s16macro&s17=s17macro&s18=s18macro&s19=s19macro&s20=441733648 HTTP/1.1
Host: api.botman.ninja
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:18:29 GMT
content-type: text/html; charset=UTF-8
content-length: 41
server: Apache/2.4.41 (Ubuntu)
set-cookie: PHPSESSID=tvd7bjr9prbdh3r6h9tjv02scn; path=/
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
access-control-allow-origin: https://mubayiro.de
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-max-age: 86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13605
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 20:18:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13605
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 20:18:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13605
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 20:18:29 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 477fd76de0b69553430d504fe527cc06
88fe80a099e610212f27427ae6fd5b4e03b3df16
f27bc8051a23fbe811318b8d49f5d27e3e992962a0e72f5d30a4790fe4f42748
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F27BC8051A23FBE811318B8D49F5D27E3E992962A0E72F5D30A4790FE4F42748"
Last-Modified: Sat, 10 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13605
Expires: Sun, 11 Sep 2022 00:05:14 GMT
Date: Sat, 10 Sep 2022 20:18:29 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:18:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e8f11aeba65478b039cfb4100aa23435
88db17a82ea0207ccb4826c2961875c5106b427a
6f6ec5922ec54d824e7f933de87608c5a763da119ae9461d99c6525649b1a9af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8676
x-amzn-requestid: 64a58aa8-8321-4c91-98fe-dbf97996c513
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNiuZEjnIAMFRFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb18f-77b635593b202d7d3cd0ac84;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:11 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: VWwNSpFvcDq3nrn91QvYjrJX5hLjp96vrKgZzR-pOdrdHx7MlcagGQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:13:43 GMT
age: 79486
etag: "88db17a82ea0207ccb4826c2961875c5106b427a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d21a3e07583d9fad4104b6457f7915e7
fdc9453562f993e2545ca99731a7741e748b6082
8ea38264c82c6b544447079cc92eae70d0968a070ba39022af0e18c498916338
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb150ddb5-18a6-405d-8041-cdea0c0e6a85.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8266
x-amzn-requestid: 3411ec4b-ac18-4b4e-8876-c99b94d3a4a3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNitWEjhIAMFWpw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb188-4d9e496e7ff141b46748d850;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: vyV1_onImxuLNGp4UI1W5grcuVW3LHJFJjvmO0VXU-OYorF6RVcoDw==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:50:11 GMT
age: 80898
etag: "fdc9453562f993e2545ca99731a7741e748b6082"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp
IP
Hash abd758c730ce0912574213a3493a2699
3ab21d256b17443311441dc722e02232a7b41766
d3eb5cfe3e3b6af82ae70d94231fb7901ac2b27cb9c5878040c1669547614c81
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4477
x-amzn-requestid: bbdca46e-5628-4faf-a0fe-ea1b5b39ac2a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YNjzaHrIoAMF-iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631bb348-567e946e7cf77f2e11c17c97;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: a0AyKhmYA7WPwciU2nTXwyChZV_riw1QsqI_giBIcdZhi3Nz4jM0Sw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 21:59:11 GMT
age: 80358
etag: "ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg
200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ade70e6dbcfb3ca1765f95112671e69
3768753be084c0e0fc268be5b192d02d769114b6
9670a3bf2476ba193cfeb3153c1254bdcfc980a28503dda0d9b398a3a59f53f4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0bedecf7-d9af-4aa7-88b0-94b2a33f9e1a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9766
x-amzn-requestid: 720a4111-91de-4672-88c8-f40db517c07d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YHsjRE13oAMFbCA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63195ae1-288f1f5456bf4d146dcf774c;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 03:00:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: HwwG0Hjf8uZn1AtbLU_wKs3w9lict3tRP31XQY6tIxDz9KDNaBMAqw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 04:00:05 GMT
age: 58704
etag: "3768753be084c0e0fc268be5b192d02d769114b6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3f8aeb20a6543be83f3e422796c4dc70
4e4e127039dd8099c63c3bde198118d2874f7342
0f9fdd1b577e4719f88620bb451131bfb120790479b4feccb4222647fb3ea453
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F242561c0-8a95-468b-ba61-6859edfe8518.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7218
x-amzn-requestid: 4e9672b6-5415-4808-9508-22e8c42de448
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YE_QzHffIAMFYTw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6318459e-743b975a2770e2a90c616d87;Sampled=0
x-amzn-remapped-date: Wed, 07 Sep 2022 07:17:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: dR6KtfbMJzFz0j8zIFUNtdkJHUaerjxWbUyYKBD-jR_uAAvCCty01Q==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Sep 2022 22:01:33 GMT
age: 80216
etag: "4e4e127039dd8099c63c3bde198118d2874f7342"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2b83fa95ed30533299bc754adaced672
27eda8377e1c00c53fb66b4e2fa4f0dd6c7020af
bc59e5ba6abafd8e7b10d6f8ae2269cbf739a4b28f9cbbf3adfc29a9195e6985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe4e8861b-4d5e-4f2e-8b1c-e85d23f02c52.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8626
x-amzn-requestid: af5e61ab-4f7b-4b03-8413-5d750b17e0df
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLj9TH7vIAMFVMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ae6bb-309144fb6e02564c4fcdb966;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 07:09:47 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: 3gzR4efCGz9QsLoxAMuTUgBAwEc5WdyHBhw_wRPGmfnS9SWm-0vE7w==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 10 Sep 2022 07:27:32 GMT
age: 46257
etag: "27eda8377e1c00c53fb66b4e2fa4f0dd6c7020af"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js
200 OK 157 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js
IP
File type ASCII text, with very long lines (539)
Size 157 kB (157166 bytes)
Hash 026df0dfed2314af108e700900288961
51c2a55bca7d65c549ef138d1294cac2aa98dd96
24eefc59f5d298ce40bdd33c8157ad14631984159fca8e5980037366c44c2b34
GET /recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 157166
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Sep 2022 17:23:20 GMT
expires: Wed, 06 Sep 2023 17:23:20 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 06 Sep 2022 00:04:24 GMT
content-type: text/javascript
age: 356109
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43e44f5fe147594a8dd7e263eabca2ae
99a970746a212194f339b3fdc7df516af9f2ffdf
f716e38cbb8632487d1ce62a37e0662ef8611fbe0449a82b9301118b68c7548d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 10 Sep 2022 20:18:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 12:31:58 GMT
expires: Sun, 10 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 27991
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 00:48:31 GMT
expires: Sat, 09 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 156598
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
event.trk-consulatu.com/register/event_log/zngxrmn8go
200 OK 0 B URL HTTP/2 event.trk-consulatu.com/register/event_log/zngxrmn8go
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/zngxrmn8go HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://mubayiro.de/
Origin: https://mubayiro.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:18:29 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://mubayiro.de
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4H4DPTI5wCVI3QFh5RrjhoGdU1q39aAS9Z8haY4M3Nr%2FEom8FVdIqmP7Tqensp%2F6gNUrEjRfqwnPIoUhlYWjUbOOMBXOpNrlDIOaZgq%2FSFX7XSW1Gub%2BcY2woWuRHqf84Yy%2FCKwOyHyZqg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 748ada68aa67b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
event.trk-consulatu.com/register/event_log/zngxrmn8go
200 OK 0 B URL HTTP/2 event.trk-consulatu.com/register/event_log/zngxrmn8go
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/zngxrmn8go HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://mubayiro.de/
Origin: https://mubayiro.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:18:30 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://mubayiro.de
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=48f7xiTslHNaJcNrst7dhWFQjxkXaR%2BhkRSFipmlZlUuZNg%2FxY4r6QhVqXYQ7fkd29uf%2Fdntr%2F66PvKss2C7hlelHbiQBguYWKF07SxjE8pvElqHAg8Wj7K9Ctfp9LnQhoepBxQPSuJkKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 748ada68aa75b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
event.trk-consulatu.com/register/event_log/zngxrmn8go
200 OK 0 B URL HTTP/2 event.trk-consulatu.com/register/event_log/zngxrmn8go
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/zngxrmn8go HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mubayiro.de/
Content-type: application/json
Origin: https://mubayiro.de
Content-Length: 109
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:18:30 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://mubayiro.de
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y1GNdDQSyKfRFXebwgAoTskqb5ypCBI7ykvAjFp5ZcR4831reZfLKB2j3x67FPyjZDbV9l2wC8%2FGsIukbyNZcMh5ej2nzJzX71gNNFYZOYpuraCCf7OH2BJ7itWnvdbLIBxV2VvGmGDucw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 748ada696b75b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
event.trk-consulatu.com/register/event_log/zngxrmn8go
200 OK 0 B URL HTTP/2 event.trk-consulatu.com/register/event_log/zngxrmn8go
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/zngxrmn8go HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mubayiro.de/
Content-type: application/json
Origin: https://mubayiro.de
Content-Length: 148
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:18:30 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: https://mubayiro.de
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ska%2Bb31Yp1nH9s7otldKhwPiHbL%2F412W8vvBwnNMHD6yVHohNglapqKtieke1nUhD7zrr2GsLAqykSOUR7KpcJvlzqZuzMdGUxTj%2B%2Fz%2Bl8BqrTNmEzClu6r3nNg1G8bA3SfrIn5nSXOQpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 748ada6a2ca2b500-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cleanleadsonly.com/p
200 OK 0 B IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /p HTTP/1.1
Host: cleanleadsonly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 842
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
content-length: 0
trk-consulatu.com/scripts/push/script/l4ev3xvd1w?url=mubayiro.de
200 OK 0 B URL HTTP/2 trk-consulatu.com/scripts/push/script/l4ev3xvd1w?url=mubayiro.de
IP
GET /scripts/push/script/l4ev3xvd1w?url=mubayiro.de HTTP/1.1
Host: trk-consulatu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:18:29 GMT
content-type: application/javascript;charset=UTF-8
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bc4KIQQrcNSYRNWotq53xRkmWguc7E%2Btte5mOLmijao2GKtgIOjB9PgvELMdcrkJA7J3nj6zmsIqDZJOdi1cuXsLnvdbZxjve5hl%2Ba01HdRekVX%2FqfNV0P2cRvTHNlSKY78bfQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 748ada62bbfdb527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.rltools.de/rlm_analytics/rlm_stat.php
200 OK 0 B URL HTTP/2 www.rltools.de/rlm_analytics/rlm_stat.php
IP
ASN #34788 Neue Medien Muennich GmbH
POST /rlm_analytics/rlm_stat.php HTTP/1.1
Host: www.rltools.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 85
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
access-control-max-age: 1000
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
vary: Accept-Encoding,User-Agent
content-encoding: br
content-type: application/json; charset=utf-8
date: Sat, 10 Sep 2022 20:18:34 GMT
server: Apache
X-Firefox-Spdy: h2
www.rltools.de/rlm_analytics/rlm_stat.php
200 OK 0 B URL HTTP/2 www.rltools.de/rlm_analytics/rlm_stat.php
IP
ASN #34788 Neue Medien Muennich GmbH
POST /rlm_analytics/rlm_stat.php HTTP/1.1
Host: www.rltools.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 196
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, PUT, POST, DELETE, OPTIONS
access-control-max-age: 1000
access-control-allow-headers: Content-Type, Authorization, X-Requested-With
vary: Accept-Encoding,User-Agent
content-encoding: br
content-type: application/json; charset=utf-8
date: Sat, 10 Sep 2022 20:18:29 GMT
server: Apache
X-Firefox-Spdy: h2
rltools.de/traffic_check01/check.php?click_id=track_20220910201828_3a7e02ba_25e0_4617_b948_dec109f30d17
200 OK 0 B URL HTTP/2 rltools.de/traffic_check01/check.php?click_id=track_20220910201828_3a7e02ba_25e0_4617_b948_dec109f30d17
IP
ASN #34788 Neue Medien Muennich GmbH
GET /traffic_check01/check.php?click_id=track_20220910201828_3a7e02ba_25e0_4617_b948_dec109f30d17 HTTP/1.1
Host: rltools.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mubayiro.de
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
vary: Accept-Encoding,User-Agent
content-encoding: br
content-type: application/json
date: Sat, 10 Sep 2022 20:18:30 GMT
server: Apache
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 10 Sep 2022 20:18:28 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 2021-03-10 20:26:20
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 121d365db7a9aba3915641185d93b963
cdn-cache: HIT
cf-cache-status: HIT
age: 12151915
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 748ada611b47b505-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cleanleadsonly.com/j/4835109d48c9e17ffe
200 OK 0 B URL HTTP/1.1 cleanleadsonly.com/j/4835109d48c9e17ffe
IP
ASN #60781 LeaseWeb Netherlands B.V.
GET /j/4835109d48c9e17ffe HTTP/1.1
Host: cleanleadsonly.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: close
Date: Sat, 10 Sep 2022 20:18:28 GMT
ETag: 94360b31631cf11400397a2138b9dabb--gzip
Cache-Control: private, max-age=0, no-cache, must-revalidate
Pragma: no-cache
Accept-CH: Width, Viewport-Width, Viewport-Height, Device-Memory, Content-DPR, DPR, Save-Data, Downlink, ECT, RTT, Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List
Content-Type: text/javascript;charset=utf-8
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/css/style_new_zooloo.css
200 OK 0 B URL HTTP/1.1 rlmgws-data.s3-accelerate.amazonaws.com/flexfancy/css/style_new_zooloo.css
IP
GET /flexfancy/css/style_new_zooloo.css HTTP/1.1
Host: rlmgws-data.s3-accelerate.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mubayiro.de/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 100325
Connection: keep-alive
x-amz-id-2: krDaJcwzld7YEtI/qm5TW4azJRNcw2+6cDN82TgBpOzH4XXAktBZWVxMMXLG6kvHCi+7LMv4G/Q=
x-amz-request-id: QWJ779C1J49G0233
Date: Sat, 10 Sep 2022 20:18:29 GMT
Last-Modified: Tue, 21 Jun 2022 07:42:30 GMT
ETag: "002078d5f7871ae2b9dfeb5db18658cc"
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A6-HJGNfTP1WdQ5igzmmJq66MIBnH5IYxkiIOnmMuZMKGeANnAyTYA==
52.19.101.114
142.250.74.164
130.255.79.215
188.114.98.202
62.212.87.243
104.21.23.37
93.184.220.29
23.33.119.27