Overview

URLbooking.neue-post.at/?checkin=2022-08-31&checkout=2022-09-07&propertyCode=AT_MAYR_NEUEPOST&activeBookingEngine=KBE&skd-checkin=2022-12-07&skd-checkout=2022-12-14&skd-property-code=AT_MAYR_NEUEPOST
IP 135.125.240.140 (France)
ASN#16276 OVH SAS
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-11 18:42:53 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (28)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
ocsp.pki.goog (20) 175 2018-07-01T08:43:07Z 2023-03-10T05:11:10Z 7056 14159 142.250.74.35
api.usercentrics.eu (2) 11845 2018-04-17T10:09:01Z 2023-03-10T13:12:15Z 998 1759 35.241.3.184
www.google.com (1) 7 2015-05-10T13:11:19Z 2023-03-10T12:19:40Z 521 694 142.250.74.164
ocsp.digicert.com (2) 86 2012-05-21T09:02:23Z 2023-03-10T13:49:44Z 682 1594 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-10T05:12:35Z 413 5844 34.160.144.191
quality.seekda.com (8) 569749 2018-04-09T16:52:13Z 2023-03-09T22:47:02Z 4128 5455 135.125.240.141
www.google.no (1) 25607 2016-04-05T21:50:59Z 2023-03-10T07:09:08Z 520 694 142.250.74.35
booking.neue-post.at (4) 0 2021-06-21T12:16:06Z 2023-03-04T11:28:34Z 2432 328077 135.125.240.140
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-10T05:10:00Z 333 229 34.117.237.239
res.cloudinary.com (7) 2520 2012-10-03T10:31:44Z 2023-03-10T13:19:59Z 3487 401124 151.101.85.137
r3.o.lencr.org (5) 344 2020-12-02T09:52:13Z 2023-03-10T05:09:10Z 1690 4431 23.36.77.32
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-10T05:10:00Z 782 2374 34.102.187.140
insight.adsrvr.org (1) 631 2012-05-30T16:03:18Z 2023-03-10T11:40:05Z 760 10014 3.33.220.150
app.usercentrics.eu (1) 12624 2018-08-08T11:42:22Z 2023-03-10T13:12:14Z 387 168699 35.190.14.188
js.adsrvr.org (1) 1664 2012-11-26T21:54:54Z 2023-03-10T11:40:02Z 372 2396 54.230.241.118
hbe-api.kognitiv.com (3) 0 2018-11-23T21:04:18Z 2023-03-09T22:47:02Z 1505 10257 135.125.240.149
stats.g.doubleclick.net (1) 96 2013-06-10T22:21:11Z 2023-03-10T12:41:09Z 615 715 64.233.165.155
graphql.usercentrics.eu (2) 14191 2018-08-08T11:42:38Z 2023-03-10T13:12:15Z 1104 751 34.120.238.166
consent-api.service.consent.usercentrics.eu (1) 0 2022-02-07T20:22:50Z 2023-03-10T13:12:15Z 595 323 34.117.233.17
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-10T05:10:02Z 606 127 44.238.202.79
d2jtzd336hs8un.cloudfront.net (36) 0 2021-10-12T13:28:37Z 2023-03-09T22:47:00Z 15708 1198671 54.230.245.13
uct.service.usercentrics.eu (1) 53073 2021-02-17T06:00:19Z 2023-03-09T23:38:31Z 678 437 34.95.108.180
cloud.seekda.com (1) 507948 2014-12-24T11:47:26Z 2023-03-09T22:47:00Z 431 602 135.125.240.147
www.google-analytics.com (1) 40 2012-10-03T03:04:21Z 2023-03-10T13:35:34Z 377 20683 142.250.74.174
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-22T01:36:00Z 2023-03-10T05:10:04Z 3260 55630 34.120.237.76
apm-server.seekda.com (2) 0 2019-05-09T12:43:44Z 2023-03-09T22:47:05Z 993 658 135.125.240.139
static.seekda.com (3) 507078 2014-04-19T11:49:53Z 2023-03-09T22:47:01Z 1439 74259 135.125.240.147
aggregator.service.usercentrics.eu (2) 14703 2020-07-29T15:16:57Z 2023-03-10T12:03:36Z 1292 4550 34.120.28.121

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-11-11 medium booking.neue-post.at/static/bookingFlowCustomTracking.js Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 135.125.240.140
Date UQ / IDS / BL URL IP
2023-05-28 03:28:11 UTC 0 - 0 - 1 buchung.huettenwirt.com/ 135.125.240.140
2023-05-27 06:25:18 UTC 0 - 0 - 2 booking.hotelmiramonti.it/ 135.125.240.140
2023-05-27 03:18:59 UTC 0 - 0 - 3 booking.bergcristall.at/ 135.125.240.140
2023-05-25 21:22:17 UTC 0 - 0 - 2 seapalace.capitalvacations.com/ 135.125.240.140
2023-05-25 17:15:38 UTC 0 - 0 - 2 oceantowers.capitalvacations.com/ 135.125.240.140


Last 5 reports on ASN: OVH SAS
Date UQ / IDS / BL URL IP
2023-06-01 05:20:50 UTC 0 - 0 - 3 nicolas-contessi.fr/Verify/verification/login 213.186.33.40
2023-06-01 05:18:54 UTC 0 - 1 - 0 www.colpublirp.com/dacio/lytebox/css/Sony.exe 51.178.111.98
2023-06-01 05:18:27 UTC 0 - 1 - 0 colpublirp.com/dacio/lytebox/css/Sony.exe 51.178.111.98
2023-06-01 04:37:22 UTC 0 - 1 - 0 www.driversdownloader.com/drivers_download/Dr (...) 149.56.0.212
2023-06-01 04:37:07 UTC 0 - 1 - 0 www.driversdownloader.com/driverFile.php?file (...) 149.56.0.212


Last 4 reports on domain: neue-post.at
Date UQ / IDS / BL URL IP
2023-05-16 07:04:40 UTC 0 - 0 - 2 booking.neue-post.at/ 135.125.240.140
2022-11-11 18:42:53 UTC 0 - 0 - 1 booking.neue-post.at/?checkin=2022-08-31&chec (...) 135.125.240.140
2022-10-25 19:28:39 UTC 0 - 0 - 1 booking.neue-post.at/?checkin=2022-09-07&chec (...) 135.125.240.140
2022-09-24 14:31:48 UTC 0 - 0 - 1 booking.neue-post.at/?skd-checkin=2022-09-16& (...) 135.125.240.140


No other reports with similar screenshot

JavaScript

Executed Scripts (50)

Executed Evals (2)
#1 JavaScript::Eval (size: 3930) - SHA256: 9d7162721ab1e0daf4d2e2207e900a6e2c59e6a05dbd3e4d1f61e4d99bc233cc
(function() {
    var a = {};
    if ("viewOffers" == google_tag_manager["GTM-MSV9WX6"].macro(54) && 0 < google_tag_manager["GTM-MSV9WX6"].macro(55).rooms.length) {
        var d = [],
            b = google_tag_manager["GTM-MSV9WX6"].macro(56).rooms;
        for (a = 0; a < b.length; a++)
            for (var c = 0; c < b[a].rates.length; c++) d.push({
                id: b[a].code,
                name: b[a].code,
                variant: b[a].rates[c],
                brand: google_tag_manager["GTM-MSV9WX6"].macro(57).propertyCode
            });
        return a = {
            ecommerce: {
                impressions: d,
                detail: {
                    products: d
                }
            }
        }
    }
    if ("shoppingCartElementAdded" == google_tag_manager["GTM-MSV9WX6"].macro(58)) {
        if ("room" == google_tag_manager["GTM-MSV9WX6"].macro(59).elementAdded.type) return a = {
            ecommerce: {
                add: {
                    products: [{
                        id: google_tag_manager["GTM-MSV9WX6"].macro(60).elementAdded.data.roomCode,
                        name: google_tag_manager["GTM-MSV9WX6"].macro(61).elementAdded.data.roomCode,
                        brand: google_tag_manager["GTM-MSV9WX6"].macro(62).propertyCode,
                        variant: google_tag_manager["GTM-MSV9WX6"].macro(63).elementAdded.data.rateCode,
                        quantity: 1
                    }]
                }
            }
        };
        if ("service" == google_tag_manager["GTM-MSV9WX6"].macro(64).elementAdded.type) return a = {
            ecommerce: {
                add: {
                    products: [{
                        id: google_tag_manager["GTM-MSV9WX6"].macro(65).elementAdded.data.serviceCode,
                        name: google_tag_manager["GTM-MSV9WX6"].macro(66).elementAdded.data.serviceCode,
                        brand: google_tag_manager["GTM-MSV9WX6"].macro(67).propertyCode,
                        quantity: google_tag_manager["GTM-MSV9WX6"].macro(68).elementAdded.data.quantity
                    }]
                }
            }
        }
    }
    if ("shoppingCartElementRemoved" ==
        google_tag_manager["GTM-MSV9WX6"].macro(69)) {
        if ("room" == google_tag_manager["GTM-MSV9WX6"].macro(70).elementRemoved.type) return a = {
            ecommerce: {
                remove: {
                    products: [{
                        id: google_tag_manager["GTM-MSV9WX6"].macro(71).elementRemoved.data.roomCode,
                        name: google_tag_manager["GTM-MSV9WX6"].macro(72).elementRemoved.data.roomCode,
                        brand: google_tag_manager["GTM-MSV9WX6"].macro(73).propertyCode,
                        variant: google_tag_manager["GTM-MSV9WX6"].macro(74).elementRemoved.data.rateCode,
                        quantity: 1
                    }]
                }
            }
        };
        if ("service" == google_tag_manager["GTM-MSV9WX6"].macro(75).elementRemoved.type) return a = {
            ecommerce: {
                remove: {
                    products: [{
                        id: google_tag_manager["GTM-MSV9WX6"].macro(76).elementRemoved.data.serviceCode,
                        name: google_tag_manager["GTM-MSV9WX6"].macro(77).elementRemoved.data.serviceCode,
                        brand: google_tag_manager["GTM-MSV9WX6"].macro(78).propertyCode,
                        quantity: google_tag_manager["GTM-MSV9WX6"].macro(79).elementRemoved.data.quantity
                    }]
                }
            }
        }
    }
    if ("viewPersInfo" == google_tag_manager["GTM-MSV9WX6"].macro(80)) {
        d = [];
        b = google_tag_manager["GTM-MSV9WX6"].macro(81).rooms;
        c = google_tag_manager["GTM-MSV9WX6"].macro(82).services;
        for (a = 0; a < b.length; a++) d.push({
            id: b[a].roomCode,
            name: b[a].roomCode,
            brand: google_tag_manager["GTM-MSV9WX6"].macro(83).propertyCode,
            variant: b[a].rateCode,
            quantity: 1,
            price: b[a].hotelPrice
        });
        for (a = 0; a < c.length; a++) d.push({
            id: c[a].serviceCode,
            name: c[a].serviceCode,
            brand: google_tag_manager["GTM-MSV9WX6"].macro(84).propertyCode,
            quantity: c[a].quantity,
            price: c[a].hotelPricePerUnit
        });
        return a = {
            ecommerce: {
                checkout: {
                    actionField: {
                        step: 1
                    },
                    products: d
                }
            }
        }
    }
    if ("viewConfirmation" == google_tag_manager["GTM-MSV9WX6"].macro(85)) {
        d = [];
        b = google_tag_manager["GTM-MSV9WX6"].macro(86).bookingData.rooms;
        c = google_tag_manager["GTM-MSV9WX6"].macro(87).bookingData.services;
        for (a = 0; a < b.length; a++) d.push({
            id: b[a].roomCode,
            name: b[a].roomCode,
            brand: google_tag_manager["GTM-MSV9WX6"].macro(88).propertyCode,
            variant: b[a].rateCode,
            quantity: 1,
            price: b[a].roomTotal
        });
        for (a = 0; a < c.length; a++) d.push({
            id: c[a].serviceCode,
            name: c[a].serviceCode,
            brand: google_tag_manager["GTM-MSV9WX6"].macro(89).propertyCode,
            quantity: c[a].quantity,
            price: c[a].serviceTotal
        });
        a = {
            ecommerce: {
                purchase: {
                    actionField: {
                        id: google_tag_manager["GTM-MSV9WX6"].macro(90).reservationId,
                        affiliation: google_tag_manager["GTM-MSV9WX6"].macro(91).channelId,
                        revenue: google_tag_manager["GTM-MSV9WX6"].macro(92).total,
                        tax: google_tag_manager["GTM-MSV9WX6"].macro(93).total - google_tag_manager["GTM-MSV9WX6"].macro(94).totalWithoutTaxes,
                        coupon: google_tag_manager["GTM-MSV9WX6"].macro(95).searchData.promotionCode
                    },
                    products: d
                }
            }
        }
    }
    return a
})();
#2 JavaScript::Eval (size: 3926) - SHA256: 9f912b8c64473d7b07b156a43ac17c470a08797b90e1372181113dfb4168c7cf
(function() {
    var a = {};
    if ("viewOffers" == google_tag_manager["GTM-MSV9WX6"].macro(6) && 0 < google_tag_manager["GTM-MSV9WX6"].macro(7).rooms.length) {
        var d = [],
            b = google_tag_manager["GTM-MSV9WX6"].macro(8).rooms;
        for (a = 0; a < b.length; a++)
            for (var c = 0; c < b[a].rates.length; c++) d.push({
                id: b[a].code,
                name: b[a].code,
                variant: b[a].rates[c],
                brand: google_tag_manager["GTM-MSV9WX6"].macro(9).propertyCode
            });
        return a = {
            ecommerce: {
                impressions: d,
                detail: {
                    products: d
                }
            }
        }
    }
    if ("shoppingCartElementAdded" == google_tag_manager["GTM-MSV9WX6"].macro(10)) {
        if ("room" == google_tag_manager["GTM-MSV9WX6"].macro(11).elementAdded.type) return a = {
            ecommerce: {
                add: {
                    products: [{
                        id: google_tag_manager["GTM-MSV9WX6"].macro(12).elementAdded.data.roomCode,
                        name: google_tag_manager["GTM-MSV9WX6"].macro(13).elementAdded.data.roomCode,
                        brand: google_tag_manager["GTM-MSV9WX6"].macro(14).propertyCode,
                        variant: google_tag_manager["GTM-MSV9WX6"].macro(15).elementAdded.data.rateCode,
                        quantity: 1
                    }]
                }
            }
        };
        if ("service" == google_tag_manager["GTM-MSV9WX6"].macro(16).elementAdded.type) return a = {
            ecommerce: {
                add: {
                    products: [{
                        id: google_tag_manager["GTM-MSV9WX6"].macro(17).elementAdded.data.serviceCode,
                        name: google_tag_manager["GTM-MSV9WX6"].macro(18).elementAdded.data.serviceCode,
                        brand: google_tag_manager["GTM-MSV9WX6"].macro(19).propertyCode,
                        quantity: google_tag_manager["GTM-MSV9WX6"].macro(20).elementAdded.data.quantity
                    }]
                }
            }
        }
    }
    if ("shoppingCartElementRemoved" ==
        google_tag_manager["GTM-MSV9WX6"].macro(21)) {
        if ("room" == google_tag_manager["GTM-MSV9WX6"].macro(22).elementRemoved.type) return a = {
            ecommerce: {
                remove: {
                    products: [{
                        id: google_tag_manager["GTM-MSV9WX6"].macro(23).elementRemoved.data.roomCode,
                        name: google_tag_manager["GTM-MSV9WX6"].macro(24).elementRemoved.data.roomCode,
                        brand: google_tag_manager["GTM-MSV9WX6"].macro(25).propertyCode,
                        variant: google_tag_manager["GTM-MSV9WX6"].macro(26).elementRemoved.data.rateCode,
                        quantity: 1
                    }]
                }
            }
        };
        if ("service" == google_tag_manager["GTM-MSV9WX6"].macro(27).elementRemoved.type) return a = {
            ecommerce: {
                remove: {
                    products: [{
                        id: google_tag_manager["GTM-MSV9WX6"].macro(28).elementRemoved.data.serviceCode,
                        name: google_tag_manager["GTM-MSV9WX6"].macro(29).elementRemoved.data.serviceCode,
                        brand: google_tag_manager["GTM-MSV9WX6"].macro(30).propertyCode,
                        quantity: google_tag_manager["GTM-MSV9WX6"].macro(31).elementRemoved.data.quantity
                    }]
                }
            }
        }
    }
    if ("viewPersInfo" == google_tag_manager["GTM-MSV9WX6"].macro(32)) {
        d = [];
        b = google_tag_manager["GTM-MSV9WX6"].macro(33).rooms;
        c = google_tag_manager["GTM-MSV9WX6"].macro(34).services;
        for (a = 0; a < b.length; a++) d.push({
            id: b[a].roomCode,
            name: b[a].roomCode,
            brand: google_tag_manager["GTM-MSV9WX6"].macro(35).propertyCode,
            variant: b[a].rateCode,
            quantity: 1,
            price: b[a].hotelPrice
        });
        for (a = 0; a < c.length; a++) d.push({
            id: c[a].serviceCode,
            name: c[a].serviceCode,
            brand: google_tag_manager["GTM-MSV9WX6"].macro(36).propertyCode,
            quantity: c[a].quantity,
            price: c[a].hotelPricePerUnit
        });
        return a = {
            ecommerce: {
                checkout: {
                    actionField: {
                        step: 1
                    },
                    products: d
                }
            }
        }
    }
    if ("viewConfirmation" == google_tag_manager["GTM-MSV9WX6"].macro(37)) {
        d = [];
        b = google_tag_manager["GTM-MSV9WX6"].macro(38).bookingData.rooms;
        c = google_tag_manager["GTM-MSV9WX6"].macro(39).bookingData.services;
        for (a = 0; a < b.length; a++) d.push({
            id: b[a].roomCode,
            name: b[a].roomCode,
            brand: google_tag_manager["GTM-MSV9WX6"].macro(40).propertyCode,
            variant: b[a].rateCode,
            quantity: 1,
            price: b[a].roomTotal
        });
        for (a = 0; a < c.length; a++) d.push({
            id: c[a].serviceCode,
            name: c[a].serviceCode,
            brand: google_tag_manager["GTM-MSV9WX6"].macro(41).propertyCode,
            quantity: c[a].quantity,
            price: c[a].serviceTotal
        });
        a = {
            ecommerce: {
                purchase: {
                    actionField: {
                        id: google_tag_manager["GTM-MSV9WX6"].macro(42).reservationId,
                        affiliation: google_tag_manager["GTM-MSV9WX6"].macro(43).channelId,
                        revenue: google_tag_manager["GTM-MSV9WX6"].macro(44).total,
                        tax: google_tag_manager["GTM-MSV9WX6"].macro(45).total - google_tag_manager["GTM-MSV9WX6"].macro(46).totalWithoutTaxes,
                        coupon: google_tag_manager["GTM-MSV9WX6"].macro(47).searchData.promotionCode
                    },
                    products: d
                }
            }
        }
    }
    return a
})();

Executed Writes (0)


HTTP Transactions (117)


Request Response
                                        
                                            GET /?checkin=2022-08-31&checkout=2022-09-07&propertyCode=AT_MAYR_NEUEPOST&activeBookingEngine=KBE&skd-checkin=2022-12-07&skd-checkout=2022-12-14&skd-property-code=AT_MAYR_NEUEPOST HTTP/1.1 
Host: booking.neue-post.at
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             135.125.240.140
HTTP/1.1 302 Found
                                            
content-length: 0
location: https://booking.neue-post.at/?checkin=2022-08-31&checkout=2022-09-07&propertyCode=AT_MAYR_NEUEPOST&activeBookingEngine=KBE&skd-checkin=2022-12-07&skd-checkout=2022-12-14&skd-property-code=AT_MAYR_NEUEPOST
cache-control: no-cache

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "D3F75D03561D6A47D19370292E821A86E58381466F0C69386A21175DE55882FF"
Last-Modified: Fri, 11 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13492
Expires: Fri, 11 Nov 2022 22:27:32 GMT
Date: Fri, 11 Nov 2022 18:42:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3462
Cache-Control: max-age=146789
Date: Fri, 11 Nov 2022 18:42:40 GMT
Etag: "636e247f-1d7"
Expires: Sun, 13 Nov 2022 11:29:09 GMT
Last-Modified: Fri, 11 Nov 2022 10:31:27 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "17894427C471F7FA02CA274795DC55DF1BFC99D7BD83F9EE36249394035110FD"
Last-Modified: Wed, 09 Nov 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2398
Expires: Fri, 11 Nov 2022 19:22:38 GMT
Date: Fri, 11 Nov 2022 18:42:40 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: zuOL38/WMYdn4mr85nS0snhYxCw+yRdiiPVvIgRoaqIvHWdXMiGEKRsmJEhtKtBpBY3zep0a0dI=
x-amz-request-id: XFZJHA5ME3P1Y6YG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 11 Nov 2022 17:49:54 GMT
age: 3166
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    67d5a988edcda47bc3b3b3f65d32b4b6
Sha1:   d4f0e0da8b3690cc7da925026d3414b68c7d954f
Sha256: 55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Alert, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 11 Nov 2022 17:43:54 GMT
cache-control: public,max-age=3600
age: 3526
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    4736bac84ca28f2b1e961159fb4ea098
Sha1:   1319612979f53896fcfeacd4215c2715d4951e4c
Sha256: 5e81213e111ddf68c7f884f72b4e06fc4dc95eb902c3cf0762236b2418840dba
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Fri, 11 Nov 2022 18:42:40 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Cache-Control, Pragma, Last-Modified, ETag, Alert, Backoff, Content-Type, Retry-After, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 11 Nov 2022 17:44:48 GMT
cache-control: public,max-age=3600
age: 3472
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /?checkin=2022-08-31&checkout=2022-09-07&propertyCode=AT_MAYR_NEUEPOST&activeBookingEngine=KBE&skd-checkin=2022-12-07&skd-checkout=2022-12-14&skd-property-code=AT_MAYR_NEUEPOST HTTP/1.1 
Host: booking.neue-post.at
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             135.125.240.140
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                            
Date: Fri, 11 Nov 2022 18:42:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Status: 200 OK
Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Vary: Accept-Encoding
Content-Encoding: gzip
ETag: "142694-ZOc712Llj8+wPBHjxf+gspmQSHc"
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self' *.kognitiv.com
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (9234)
Size:   319243
Md5:    1725455b70365b8c235d8b4e27783b5b
Sha1:   cee3df0ed13a4e654378be6febaa31b7779ee5c8
Sha256: fb74717681f1bddb50ee08b1d097c225ba9d4e740020afe6405ac37cd425534e
                                        
                                            GET /static/bookingFlowCustomTracking.js HTTP/1.1 
Host: booking.neue-post.at
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/?checkin=2022-08-31&checkout=2022-09-07&propertyCode=AT_MAYR_NEUEPOST&activeBookingEngine=KBE&skd-checkin=2022-12-07&skd-checkout=2022-12-14&skd-property-code=AT_MAYR_NEUEPOST
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             135.125.240.140
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Date: Fri, 11 Nov 2022 18:42:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 03 May 2022 12:34:48 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"62712168-11c"
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   169
Md5:    fce8196cfb05f81da56d43fd410c4203
Sha1:   5b360da4130e96b0bc876b6d826268adae643c26
Sha256: 509ebbf78fa3cca3dfffd218d38440cb97bd2335346706173d8d656ef3f26e35

Blocklists:
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1710
Cache-Control: max-age=139961
Date: Fri, 11 Nov 2022 18:42:41 GMT
Etag: "636e10ac-1d7"
Expires: Sun, 13 Nov 2022 09:35:22 GMT
Last-Modified: Fri, 11 Nov 2022 09:06:52 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +OGwPRVw5f0jl1+HB+mqLg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             44.238.202.79
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: smNgGx9jseZhlJbJApbP0n30bPQ=

                                        
                                            GET /_next/static/media/bf-icons-extended.00ff8422.ttf HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://d2jtzd336hs8un.cloudfront.net/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/octet-stream
                                            
content-length: 93868
date: Sat, 28 May 2022 00:38:34 GMT
last-modified: Tue, 03 May 2022 12:34:30 GMT
etag: "62712156-16eac"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
strict-transport-security: max-age=31536000
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 83cDfFI00kXFE9Ym5r6xos4ci23nE_wU793h8TQtCCH6HoyKml6PaQ==
age: 14493847
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, icomoon \012- data
Size:   93868
Md5:    439b52438c772a69ba68cddd45b0ba56
Sha1:   acc851fc76bade985719ddd6b688e184f1096121
Sha256: fd15c1d08eecfa3bebd1c8a1e28836de2f04036509f7ee65e1945cc0decd725d
                                        
                                            GET /_next/static/chunks/01dbca98-7c30892adcb51b77.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 20 Oct 2022 07:21:33 GMT
last-modified: Thu, 20 Oct 2022 07:20:23 GMT
etag: W/"6350f6b7-ffea"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CmloqdOL6qVHKhjNV5U4cOJ6qcLy0s5VpWUzL-seYMBphG47eW4khQ==
age: 1941667
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   21284
Md5:    66f27204d05127e5812e42f0df200b8f
Sha1:   0d537979b9e7177c43c5b1c00a7ed86eeb3b1454
Sha256: 970e553e8b4618e4fca5946550cb5a8729df6bbd60a601d021b593d2d80c1018
                                        
                                            GET /assets/fonts/google/lato-v23-latin-700.woff2 HTTP/1.1 
Host: static.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             135.125.240.147
HTTP/2 200 OK
content-type: font/woff2
                                            
date: Fri, 11 Nov 2022 18:42:41 GMT
content-length: 23040
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: https://booking.neue-post.at
access-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *
content-security-policy: block-all-mixed-content
etag: "de69cf9e514df447d1b0bb16f49d2457"
last-modified: Tue, 23 Aug 2022 12:56:41 GMT
no-gzip-compression: true
vary: Origin, Accept-Encoding
x-amz-replication-status: COMPLETED
x-amz-request-id: 17269BEEB262DD36
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-version-id: f62c38a3-11f6-4fc4-846c-eaa2518f2ed3
strict-transport-security: max-age=15768000
server: Kognitiv
set-cookie: WEIU3SASDIO=5e60c02c30b5580; path=/; HttpOnly; Secure; SameSite=none
cache-control: max-age=43200, private
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Size:   23040
Md5:    de69cf9e514df447d1b0bb16f49d2457
Sha1:   2ac78601179c3a63ba3f3f3081556b12ddcaf655
Sha256: c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
                                        
                                            GET /assets/fonts/google/lato-v23-latin-regular.woff2 HTTP/1.1 
Host: static.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             135.125.240.147
HTTP/2 200 OK
content-type: font/woff2
                                            
date: Fri, 11 Nov 2022 18:42:41 GMT
content-length: 23580
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: https://booking.neue-post.at
access-control-expose-headers: Date, Etag, Server, Connection, Accept-Ranges, Content-Range, Content-Encoding, Content-Length, Content-Type, Content-Disposition, Last-Modified, Content-Language, Cache-Control, Retry-After, X-Amz-Bucket-Region, Expires, X-Amz*, X-Amz*, *
content-security-policy: block-all-mixed-content
etag: "e1b3b5908c9cf23dfb2b9c52b9a023ab"
last-modified: Tue, 23 Aug 2022 12:56:41 GMT
no-gzip-compression: true
vary: Origin, Accept-Encoding
x-amz-replication-status: COMPLETED
x-amz-request-id: 17269BEEB2734CB0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-version-id: cf6736a9-d7ae-4962-8c9e-3afde94c466a
strict-transport-security: max-age=15768000
server: Kognitiv
set-cookie: WEIU3SASDIO=5ee3c1b0a8c15c0; path=/; HttpOnly; Secure; SameSite=none
cache-control: max-age=43200, private
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Size:   23580
Md5:    e1b3b5908c9cf23dfb2b9c52b9a023ab
Sha1:   fcd4136085f2a03481d9958cc6793a5ed98e714c
Sha256: 918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
                                        
                                            GET /_next/static/chunks/pages/_app-37849cb41c3d4c55.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 27 Oct 2022 11:03:23 GMT
last-modified: Thu, 27 Oct 2022 11:02:48 GMT
etag: W/"635a6558-1b35d1"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BFC9-1-Fb1f8YCrsbGUe0n4WL4-DBncUvTNtl5n952Mrwd-mVMOgsA==
age: 1323557
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   461761
Md5:    eeacbe3cce17a0c033648e1a10e12b14
Sha1:   0c54b2adbc4e407ef090580ce6f5fda957e6f2e9
Sha256: 9469350edd8c70f3a175d47a335a6ecb3da12d46e1231775da6d13094f141622
                                        
                                            GET /_next/static/nLkQr0NMi2L1H5mqJka8z/_ssgManifest.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 08 Nov 2022 10:57:30 GMT
last-modified: Tue, 08 Nov 2022 10:56:47 GMT
etag: W/"636a35ef-4d"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U-QgSlZ3zycvZs4x_ZJqGXVmiR2jnVs-Yn1_LLAPo20pDeUKbdnTTQ==
age: 287111
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   69748
Md5:    45831cbc953df18aeff8a035f348fa80
Sha1:   3ab993ccee5001c4e045214476305e0361963a4d
Sha256: 5290373679d480666caa7ccafa8f5265beef73d31a08369af3d4782dfd9fb7b2
                                        
                                            GET /static/icons.css?checksum=10237f48c3fa09118c62aea0fad9d4f4 HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: text/css
                                            
date: Fri, 11 Nov 2022 00:54:27 GMT
last-modified: Tue, 03 May 2022 12:34:48 GMT
etag: W/"62712168-4a0a"
access-control-allow-origin: *
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hEPAdfcZewsKZFojssylk7nk1vTSfJJWp17Kj_rIGi8CPLyTFd43xw==
age: 64094
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   4096
Md5:    a55905d42a08312b326741a2b1a992b0
Sha1:   27f0a390786b74ed04680bc9bf9c44e8e2ffcead
Sha256: eb28a1e38e4e7ad22836a216db7b91af7ed726f76e1fafc767c20a16f8dcb68a
                                        
                                            GET /browser-ui/latest/bundle.js HTTP/1.1 
Host: app.usercentrics.eu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             35.190.14.188
HTTP/2 200 OK
content-type: application/javascript
                                            
x-guploader-uploadid: ADPycdvYyahrY_GFz3AIaAX5gZNQU9gcg4oAkehZdas2Xt2VFOFB4lmWEV7ko40fHkJRGI_ld8le0uHreyOCPajeo4pukQRQ6b-i
x-goog-generation: 1668088711845629
x-goog-metageneration: 2
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 167739
content-encoding: gzip
x-goog-hash: crc32c=AKwNYQ==, md5=qd+xns9BB+A0E+tllSuBbg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
content-length: 167739
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Content-Length, Transfer-Encoding
server: UploadServer
date: Fri, 11 Nov 2022 17:45:34 GMT
expires: Fri, 11 Nov 2022 18:45:34 GMT
cache-control: public, max-age=3600, no-transform
age: 3427
last-modified: Thu, 10 Nov 2022 13:58:31 GMT
etag: "a9dfb19ecf4107e03413eb65952b816e"
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   167739
Md5:    a9dfb19ecf4107e03413eb65952b816e
Sha1:   874c07555329f9d6c3b8ce5a0c357ad999596d3c
Sha256: 1a811f88b4075a6af23081470cc6b8b7c723209dcddf69516c8852d74ac1a814
                                        
                                            GET /_next/static/chunks/framework-4774102d6f75bb1e.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Mon, 30 May 2022 07:23:17 GMT
last-modified: Tue, 03 May 2022 12:24:17 GMT
etag: W/"62711ef1-2640a"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wFonimUeuiYAqwJwK_sD6SYe067g3-zifhV1W2aX7wl8lAlf-yEPIQ==
age: 14296764
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   48902
Md5:    c9584e8fc99707ee01e3f4f21f9e41b2
Sha1:   0b179719642ba30c4adb684d44223020701ecf75
Sha256: 3608ff21e3ecf90d6d3daddb02bb80399da2438b94eb936b506a26433e630fc5
                                        
                                            GET /seekda/image/upload/v1643371823/production/AT_MAYR_NEUEPOST/neue_post_logo_Negativ.png HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.85.137
HTTP/2 200 OK
content-type: image/png
                                            
etag: "89ce42191f4160a79fc8bb804cdf4dba"
last-modified: Fri, 28 Jan 2022 12:10:25 GMT
date: Fri, 11 Nov 2022 18:42:41 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=1;cpu=0;start=2022-11-11T18:42:41.773Z;desc=hit,rtt;dur=15
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options
content-length: 31399
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 1182 x 625, 8-bit/color RGBA, non-interlaced\012- data
Size:   31399
Md5:    89ce42191f4160a79fc8bb804cdf4dba
Sha1:   aa19216e3d5bd52b796cbc45ebf925511bd20340
Sha256: e98eab8e183dc2e2c50857e41696943150610b3f5d6ec5face7f3f64273dcf9d
                                        
                                            GET /seekda/image/upload/w_1920,ar_3.0,c_fill,f_auto,fl_lossy,q_auto/v1662458117/production/AT_MAYR_NEUEPOST/NEU1.jpg HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.85.137
HTTP/2 200 OK
content-type: image/jpeg
                                            
etag: "5d15a77cc00fae7bf1d565d77cd413f0"
last-modified: Tue, 06 Sep 2022 10:21:22 GMT
date: Fri, 11 Nov 2022 18:42:41 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=1;cpu=0;start=2022-11-11T18:42:41.772Z;desc=hit,rtt;dur=15
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 232207
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x640, components 3\012- data
Size:   232207
Md5:    5d15a77cc00fae7bf1d565d77cd413f0
Sha1:   3b0f090d1d9361b50473b812d66c57999b1f6218
Sha256: 361cef04d881789ff2f3ec4079cad02b2304bd64e2c86621678f86217866c67f
                                        
                                            GET /_next/static/chunks/c0a33b72-efbe3e99c4b6522e.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Mon, 05 Sep 2022 01:47:17 GMT
last-modified: Tue, 03 May 2022 12:34:30 GMT
etag: W/"62712156-4c0a4"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 5ikL9TJCo2YiHqURS9AZZSRx3wmXmTmqSi-yEacMO-WooiUfvfWSUA==
age: 5849723
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   213213
Md5:    efd84b63d8b37077ae5f128bec5e7f3b
Sha1:   21c63aa5739c344b4896f670f1fb52cab709f79e
Sha256: 084d20693072045af17940a69dcd821f05823786ea84c3d36dda456aab3b38f9
                                        
                                            GET /widgets/tracking-api/js/tracking-api.min.js?R9f343f5a1880f9815284e9ef9423a193ba6976d2 HTTP/1.1 
Host: static.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.147
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 11 Nov 2022 18:42:41 GMT
content-security-policy: block-all-mixed-content
etag: W/"3868633285d5ac63f9bd0ba84f051796"
last-modified: Thu, 13 Oct 2022 12:11:40 GMT
vary: Accept-Encoding, Origin, Accept-Encoding
x-amz-replication-status: COMPLETED
x-amz-request-id: 17269BEEC7031573
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
x-amz-version-id: 01da0275-ff14-45b1-acdb-50ac57ea90aa
content-encoding: gzip
strict-transport-security: max-age=15768000
server: Kognitiv
set-cookie: WEIU3SASDIO=5ee3c1b0a8c15c0; path=/; HttpOnly; Secure; SameSite=none
cache-control: max-age=43200, private
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   24760
Md5:    e382dc4d8453356d40d7e59b744f1210
Sha1:   67836ae0b8e1e61980b59589478e87a5a692311b
Sha256: df59dac794dcae4a1f6793d9bde3b8734ca707b1d14057fd863387aeecc95e6d
                                        
                                            GET /seekda/image/upload/w_16,h_16,c_fill/v1610445341/production/AT_MAYR_NEUEPOST/Favicon_250px.png HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.85.137
HTTP/2 200 OK
content-type: image/png
                                            
etag: "13f1a0ea5d41f667867f27fc116e115b"
last-modified: Thu, 21 Jan 2021 13:44:48 GMT
date: Fri, 11 Nov 2022 18:42:41 GMT
strict-transport-security: max-age=604800
cache-control: public, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=5;cpu=0;start=2022-11-11T18:42:41.972Z;desc=hit,rtt;dur=15
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,ETag,Server-Timing,X-Content-Type-Options
content-length: 222
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Size:   222
Md5:    13f1a0ea5d41f667867f27fc116e115b
Sha1:   65ab0332137404c09ae85b89aa711fece8b6ff66
Sha256: 5fd219b173e835ede3ccf8e4945d03f66cf6997d970a9d63195539f31ade1230
                                        
                                            GET /_next/static/chunks/9d6ff831-6e3bd3e35642c578.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 27 Oct 2022 11:03:23 GMT
last-modified: Thu, 27 Oct 2022 11:02:48 GMT
etag: W/"635a6558-5d5d6"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oX1XHzhGas9ClO2NMA_8ueyGuGQBxY7cqcHguBS05nGThq7W5tc0ig==
age: 1323557
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   173326
Md5:    8a3cc027fdd2c2034f89c8b986da538a
Sha1:   c038838b90cc175eb3d14e2e7de57e709d51b653
Sha256: 2eee9f9b497718987242e8310d564196f9afa921699ac680964d922ca2d618b6
                                        
                                            GET /_next/static/chunks/d099b070-221cabf5ffd73869.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Wed, 27 Jul 2022 15:16:48 GMT
last-modified: Wed, 27 Jul 2022 15:15:58 GMT
etag: W/"62e156ae-11876"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7-MuJSxqMw0plEquXFhjQ9LDZ4lfzc5v_HmtidqlsP-Rusq7Jhjahg==
age: 9257152
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   24848
Md5:    5120d856c7f8b210e0fd7d5233be7690
Sha1:   4d60474c709282d3a2bdc2391bde3f96ef6ad57f
Sha256: fec4b7887f4849dff76ffb27b18d15ff746acc211ecabf5cb0a44a526b9fc57a
                                        
                                            GET /up_loader.1.1.0.js HTTP/1.1 
Host: js.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.241.118
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                            
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 24 Sep 2020 15:15:34 GMT
Server: AmazonS3
Content-Encoding: gzip
Date: Fri, 11 Nov 2022 06:12:13 GMT
ETag: W/"98d98b3499058b76d58073cf8ede2f10"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KeF6bc7EhHJ2P-2OgNwgXyYYRPJ4BT5PKTVdCld_jLViKqZK1PUlHw==
Age: 45030


--- Additional Info ---
Magic:  ASCII text, with very long lines (4593), with no line terminators
Size:   1887
Md5:    8dc722d27824e60548fd25752623cd07
Sha1:   33d66ad1a4a162e2d6c9ed732d6c9af79635fc4d
Sha256: 14ce9119fe06fb2d363ba3c824e9f5b3f212f1f39dfab38c836fa13a20daec1b
                                        
                                            POST /s/gts1d4/qXJ6BhT-uwQ HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/qXJ6BhT-uwQ HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /settings/7KunxZ2i/latest/languages.json HTTP/1.1 
Host: api.usercentrics.eu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://booking.neue-post.at/
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.3.184
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
x-guploader-uploadid: ADPycduixhresP7RYzESvyJUDALzXRF9CkW_8UNLlss4IBMWpW_EkwEefxFFzpqwagj7W1ogR2nmQyjs4ymcHLY3rMcLXg
access-control-allow-origin: *
access-control-max-age: 3600
access-control-allow-methods: GET,HEAD,PUT,POST,DELETE
access-control-allow-headers: content-type
date: Fri, 11 Nov 2022 18:42:42 GMT
expires: Fri, 11 Nov 2022 18:42:42 GMT
cache-control: private, max-age=0
content-length: 0
server: UploadServer
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 11 Nov 2022 18:41:09 GMT
expires: Fri, 11 Nov 2022 20:41:09 GMT
cache-control: public, max-age=7200
age: 93
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /settings/7KunxZ2i/latest/languages.json HTTP/1.1 
Host: api.usercentrics.eu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booking.neue-post.at/
content-type: application/json
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             35.241.3.184
HTTP/2 200 OK
content-type: application/json
                                            
x-guploader-uploadid: ADPycdsNBIXcuQtgRApBgPLJd6KtTRes8u7KviJr647x3Je01c3Dn5cCnoc6lHzupD3kd08wJehjMdvLnpGwzeONjq8G7w
x-goog-generation: 1666083791779002
x-goog-metageneration: 1
x-goog-stored-content-encoding: gzip
x-goog-stored-content-length: 75
content-encoding: gzip
x-goog-hash: crc32c=zzu4oQ==, md5=TkxikVu5Lht0B2Vdc+vI0Q==
x-goog-storage-class: MULTI_REGIONAL
accept-ranges: bytes
content-length: 75
access-control-allow-origin: *
access-control-expose-headers: *, Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace
server: UploadServer
date: Fri, 11 Nov 2022 18:42:42 GMT
expires: Fri, 11 Nov 2022 18:42:52 GMT
cache-control: public, max-age=1800, s-maxage=10, no-transform
last-modified: Tue, 18 Oct 2022 09:03:11 GMT
etag: "4e4c62915bb92e1b7407655d73ebc8d1"
age: 0
strict-transport-security: max-age=7776000
x-client-geo-location: NO,NO03
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   75
Md5:    4e4c62915bb92e1b7407655d73ebc8d1
Sha1:   738eb5cadd8ce682c723ff4d0e4c6ae4eabf8a48
Sha256: e2d54f9d033718298e619f12528e94bd0f222cf4ce496b89efa816d8e30c7a7e
                                        
                                            POST /s/gts1d4/qXJ6BhT-uwQ HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:42 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /offers HTTP/1.1 
Host: hbe-api.kognitiv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 577
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.149
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.neue-post.at
vary: Origin, Accept-Encoding
content-encoding: gzip
date: Fri, 11 Nov 2022 18:42:42 GMT
etag: W/"23547-1DSH4CK3wvAUBr/2LVIb2XUPP+8"
set-cookie: MGLH51CKJDVB=HBE7KSGFADL4; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   8700
Md5:    6e5b2ae059a0ef5b874728d402a1550c
Sha1:   845ca564e1221fae239068b59dc27e5ce80aa086
Sha256: cd163aeaf61d969856039556104e0e03181f6fc4111fb87323d05dee57feffa1
                                        
                                            GET /static/noimage.jpg HTTP/1.1 
Host: booking.neue-post.at
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/?checkin=2022-08-31&checkout=2022-09-07&propertyCode=AT_MAYR_NEUEPOST&activeBookingEngine=KBE&skd-checkin=2022-12-07&skd-checkout=2022-12-14&skd-property-code=AT_MAYR_NEUEPOST
Cookie: _gcl_au=1.1.1083204899.1668192162; _ga=GA1.2.2125060650.1668192162; _gid=GA1.2.1247658640.1668192162; _gat_UA-12093550-1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin

                                        
                                             135.125.240.140
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Date: Fri, 11 Nov 2022 18:42:42 GMT
Content-Length: 7273
Connection: keep-alive
Last-Modified: Tue, 03 May 2022 12:24:30 GMT
ETag: "62711efe-1c69"
Access-Control-Allow-Origin: *
Accept-Ranges: bytes
Strict-Transport-Security: max-age=31536000


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 768x432, components 3\012- data
Size:   7273
Md5:    bc631f0f9afc6f7fa88c43e357dbf8ff
Sha1:   e8419abb2b0c726255e9b28cea7bfafca06b22d6
Sha256: a7a7aac38152bf60bb768780deb951b121ac3ee54eb0028e7aeee5fab8b331b5
                                        
                                            OPTIONS /events/ibe/pageReady? HTTP/1.1 
Host: quality.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: cache-control,content-type
Referer: https://booking.neue-post.at/
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             135.125.240.141
HTTP/2 200 OK
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.neue-post.at
access-control-allow-methods: POST
access-control-allow-headers: cache-control, content-type
access-control-allow-credentials: true
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-length: 0
date: Fri, 11 Nov 2022 18:42:41 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=cheiG8ch; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2

                                        
                                            POST /unavailable-days HTTP/1.1 
Host: hbe-api.kognitiv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 70
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.149
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.neue-post.at
vary: Accept-Encoding, Origin, Accept-Encoding
date: Fri, 11 Nov 2022 18:42:42 GMT
etag: W/"fb-FlyL1vfbJHRrJBOM/RhBzKL/PX0"
content-encoding: gzip
set-cookie: MGLH51CKJDVB=VEI1698VEKLN9; path=/; HttpOnly; Secure
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (490), with no line terminators
Size:   348
Md5:    8577e527ec65dc2278000bd70cf40da7
Sha1:   f750421670b08bef639771e32d1c4ab4997d9b49
Sha256: 09ab16fb4a73f3f17a83d7f643a340c3bcf3e27c227d5dbdb11a08d938fb46a2
                                        
                                            OPTIONS /events/ibe/searchBoxInit? HTTP/1.1 
Host: quality.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: cache-control,content-type
Referer: https://booking.neue-post.at/
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             135.125.240.141
HTTP/2 200 OK
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.neue-post.at
access-control-allow-methods: POST
access-control-allow-headers: cache-control, content-type
access-control-allow-credentials: true
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-length: 0
date: Fri, 11 Nov 2022 18:42:41 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=cheiG8ch; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6297
Expires: Fri, 11 Nov 2022 20:27:39 GMT
Date: Fri, 11 Nov 2022 18:42:42 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6297
Expires: Fri, 11 Nov 2022 20:27:39 GMT
Date: Fri, 11 Nov 2022 18:42:42 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "08E24124F809F1AB7E6960355EFCB419E13DD5FB6063C31CAF04E11EBDB7A5CF"
Last-Modified: Fri, 11 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6297
Expires: Fri, 11 Nov 2022 20:27:39 GMT
Date: Fri, 11 Nov 2022 18:42:42 GMT
Connection: keep-alive

                                        
                                            GET /_next/static/chunks/0b7b90cd-2a28d1759dacf41f.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Wed, 13 Apr 2022 07:40:28 GMT
last-modified: Tue, 22 Mar 2022 12:29:17 GMT
etag: W/"6239c11d-22c77"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MBvrLwPq3S4hZdDotcfcejwnqg5O_WgoUxr9Y1slOywTGhdDULgC2Q==
age: 18356532
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   41461
Md5:    164eb61e7fd13175fa98259e407b815d
Sha1:   675f64bf63f8fac9a8fa49d3b0122f28dddc9722
Sha256: 72355ffb92b1cb1fc7bac5530cc03258777d11e0e9e88f41c3a9e15fef33475c
                                        
                                            GET /_next/static/chunks/7e0f675c-7628088f2378fdb4.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 27 Sep 2022 13:46:59 GMT
last-modified: Tue, 27 Sep 2022 13:45:54 GMT
etag: W/"6332fe92-cabd"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wFjWfiCP_vycNTeB-nkJzPG8wRDtpUrhI_RGRD12juz5yIswMsL5Tw==
age: 3905741
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   14596
Md5:    001aef590d0cb08ac938984561718638
Sha1:   db11e917c8e1943fb930c864d8fb976b85eb5ef7
Sha256: 3860784764d6546b09f27309bc61173a29b2f0a955aea384e268dd17fd05b363
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad1abae5-6437-44bf-8428-756b825e5be6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8294
x-amzn-requestid: 233f9724-1c36-426d-8299-1f6577a6e5e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bZ4lmE60IAMF1Lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636d6e23-4b2763b42d8a57044dfa8144;Sampled=0
x-amzn-remapped-date: Thu, 10 Nov 2022 21:33:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QaMTrn0ZUptFLGY0x7bytPsJZHnLvdpMnU0XGCBU2pkmiA4MO8DIUw==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 ddaf46a95abcfc80e8eae76235e2127c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:46:56 GMT
etag: "815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0"
age: 75346
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8294
Md5:    88c9931a009690991e73c5b37a1aa085
Sha1:   815a4a1eb8c8e2a138fb3d65ba777b0c18fa15d0
Sha256: 74e70391889e4b46742033b1d5daccfec415ba2ee999e429d1013fd4a1ebc61a
                                        
                                            GET /track/up?adv=o7f89q4&ref=https%3A%2F%2Fbooking.neue-post.at%2F%3Fcheckin%3D2022-08-31%26checkout%3D2022-09-07%26propertyCode%3DAT_MAYR_NEUEPOST%26activeBookingEngine%3DKBE%26skd-checkin%3D2022-12-07%26skd-checkout%3D2022-12-14%26skd-property-code%3DAT_MAYR_NEUEPOST&upid=e3r42nm&upv=1.1.0 HTTP/1.1 
Host: insight.adsrvr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             3.33.220.150
HTTP/2 302 Found
content-type: text/html; charset=utf-8
                                            
date: Fri, 11 Nov 2022 18:42:42 GMT
location: https://match.adsrvr.org/track/upb/?adv=o7f89q4&ref=https%3A%2F%2Fbooking.neue-post.at%2F%3Fcheckin%3D2022-08-31%26checkout%3D2022-09-07%26propertyCode%3DAT_MAYR_NEUEPOST%26activeBookingEngine%3DKBE%26skd-checkin%3D2022-12-07%26skd-checkout%3D2022-12-14%26skd-property-code%3DAT_MAYR_NEUEPOST&upid=e3r42nm&upv=1.1.0
cache-control: private,no-cache, must-revalidate
pragma: no-cache
x-aspnet-version: 4.0.30319
set-cookie: TDID=9e9cf1f0-6eb7-4a5e-98f2-6ef44aaa34c9; domain=.adsrvr.org; expires=Sat, 11-Nov-2023 18:42:42 GMT; path=/; secure; SameSite=None
p3p: CP="NOI DSP COR CUR ADMo DEVo PSAo PSDo OUR SAMo BUS UNI NAV"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   9262
Md5:    f6fe6644b0f5467f9ab224059c40f298
Sha1:   b679b39e81aae1b81cf2857fa47220c737bb4a50
Sha256: 2246f67944749d42b999b1ffc76aa66428626a04ad7a437e63c4d8a21e807726
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e7dc40a-e47f-44b5-b3b4-87b10cd8669d.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10671
x-amzn-requestid: 1b6053eb-64ac-4c24-a750-c1b8cd69157f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bJEh8GxPoAMFhPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6366b472-56c6a3bc07ec89ab56d4f3bd;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 19:07:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qJeWGvC4DM_d3k66OHN2V19elou-xoSNkep1BNalBO0NtKyQtAFzNQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 04:30:53 GMT
age: 51109
etag: "5fe340bf33ac219f6a3d44810f31d0a8796c83a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10671
Md5:    e72f32944d6f03e005f7b6f3e87d8c72
Sha1:   5fe340bf33ac219f6a3d44810f31d0a8796c83a9
Sha256: bcdcba30210d276996d0fe749bbfc69d666ae11ddfbfdb57307e4bb4d6e43d1f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50b47142-be82-4ddc-85e8-45dc7102abe9.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6696
x-amzn-requestid: 19f91da1-beeb-400a-b4c0-059851ca839f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNeQ_F3doAMFr6A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687739-2ef73e121ff2c3cf0e95b450;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: skH-uMPMGVOwM2RoMjuNh3YaYVIYhfytSdJ5-YFcH4GhUXyOKehfFA==
via: 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 04:30:07 GMT
age: 51155
etag: "7339ad7b4f37cc37cb712207a7b3a5ac9355d9dc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6696
Md5:    90a78b0f806c0c5ef5e7128cc37b2edf
Sha1:   7339ad7b4f37cc37cb712207a7b3a5ac9355d9dc
Sha256: 770a2247a0f8d6b44c61cecc8a11e9882e4dd39269e181eef52cf6816407022b
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6f7d2f5-4807-4bbd-a3db-7a239962aca5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5583
x-amzn-requestid: e844f42a-e87e-4e61-8c97-137c07c5ae28
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNeQ9Ho7IAMF5_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687739-62c44d2f7d23632e74895bd8;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:10:49 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: uHlIN1IVGCFUVl5lx5pFSux0YncseT2HQjiwFDL9eaEaBa9CdnCl8g==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 0d4ebcaa87ba94709def0eaac9371e5a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 07:47:38 GMT
age: 39304
etag: "691f59b65ca9fde4f59bbf96b37071e07351f190"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5583
Md5:    85c6f450b38f41a2fb924d6d9a9cbff8
Sha1:   691f59b65ca9fde4f59bbf96b37071e07351f190
Sha256: c8f877488a2cf65f0d9829384fd4113847722a1b4df94b6b1d5788699689722c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c9847f2-3b5e-4950-9792-a512af36da58.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6517
x-amzn-requestid: 78eb1490-4afb-497e-9dbd-afd6ddf9cc48
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bG23pFPLoAMFxcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6365d1ca-4c9caca164576bfe07c9c05c;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 03:00:26 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: zllrXRZmtjHqA98lS_q0Wtx5TeEh2cEy3tr_eGkozM_jWxTIA5d60g==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 b13f158bdf9805ca47e07c0c35870c12.cloudfront.net (CloudFront), 1.1 google
date: Thu, 10 Nov 2022 21:48:34 GMT
age: 75248
etag: "96de8f2627e1103c5e6beb5d64cdbc09f97fce82"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6517
Md5:    f29164fb4dd64d9ce60566fbebd40f0a
Sha1:   96de8f2627e1103c5e6beb5d64cdbc09f97fce82
Sha256: 8eba6095edfed1ee1402c050727f81b8a9942625fd1c9cbb3bac4e51ee178577
                                        
                                            OPTIONS /events/ibe/viewOffers? HTTP/1.1 
Host: quality.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: cache-control,content-type
Referer: https://booking.neue-post.at/
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.141
HTTP/2 200 OK
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.neue-post.at
access-control-allow-methods: POST
access-control-allow-headers: cache-control, content-type
access-control-allow-credentials: true
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-length: 0
date: Fri, 11 Nov 2022 18:42:42 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=thei9zuS; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2

                                        
                                            GET /seekda/image/upload/w_768,h_432,c_fill,f_auto,fl_lossy,q_auto/production/AT_MAYR_NEUEPOST/Postillion_(3).jpg HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.85.137
HTTP/2 200 OK
content-type: image/webp
                                            
content-disposition: inline; filename="Postillion_(3).webp"
etag: "f6ce54e2df672f792587b38aad49ba62"
last-modified: Thu, 14 Jan 2021 09:08:42 GMT
date: Fri, 11 Nov 2022 18:42:42 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=3;cpu=0;start=2022-11-11T18:42:42.813Z;desc=hit,rtt;dur=15
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 55998
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   55998
Md5:    f6ce54e2df672f792587b38aad49ba62
Sha1:   d38b4b6e035028916021c19f5cde43538b70df7a
Sha256: 09d46b83bc2b7ccdf07d43c20ad1730e9ec0b127ab324b16c1f87f23d4262f3f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-12093550-1&cid=2125060650.1668192162&jid=222773487&gjid=1477636884&_gid=1247658640.1668192162&_u=YEBAAEAAAAAAACAAI~&z=598009929 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             64.233.165.155
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://booking.neue-post.at
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Fri, 11 Nov 2022 18:42:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   4
Md5:    48c0473b7821185d937e685216e2168b
Sha1:   3743e47f8a429a5e87b86cb582d78940733d9d2e
Sha256: 570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /seekda/image/upload/w_768,h_432,c_fill,f_auto,fl_lossy,q_auto/production/AT_MAYR_NEUEPOST/simon-maage-tXiMrX3Gc-g-unsplash.jpg HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.85.137
HTTP/2 200 OK
content-type: image/webp
                                            
content-disposition: inline; filename="simon-maage-tXiMrX3Gc-g-unsplash.webp"
etag: "3aac6343b949ca1886c9a6705370db1a"
last-modified: Mon, 17 Jan 2022 14:11:30 GMT
date: Fri, 11 Nov 2022 18:42:42 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=0;start=2022-11-11T18:42:42.936Z;desc=hit,rtt;dur=16
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 21984
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   21984
Md5:    3aac6343b949ca1886c9a6705370db1a
Sha1:   4a2d98715a2ea738ff8a0717be80b7a8943cac6a
Sha256: 5be21705f45c9015e7968e17d700155d45ddf224c9835fd9eb8906e25841307c
                                        
                                            GET /seekda/image/upload/w_768,h_432,c_fill,f_auto,fl_lossy,q_auto/production/AT_MAYR_NEUEPOST/landschaft8-foto-paul-suerth.jpg HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.85.137
HTTP/2 200 OK
content-type: image/webp
                                            
content-disposition: inline; filename="landschaft8-foto-paul-suerth.webp"
etag: "6a1e2df3b006d23c78452361889ab270"
last-modified: Mon, 31 Jan 2022 09:34:32 GMT
date: Fri, 11 Nov 2022 18:42:42 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=1;start=2022-11-11T18:42:42.940Z;desc=hit,rtt;dur=16
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 31050
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   31050
Md5:    6a1e2df3b006d23c78452361889ab270
Sha1:   6a33a451cad268563dfa3a30907fa6657149f8a8
Sha256: 922f6f231a9aa93f1d4bfcb1de5e8d8924f7936a218c309dcee8ce8866fca148
                                        
                                            GET /seekda/image/upload/w_768,h_432,c_fill,f_auto,fl_lossy,q_auto/production/AT_MAYR_NEUEPOST/Winterpauschale.jpg HTTP/1.1 
Host: res.cloudinary.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.85.137
HTTP/2 200 OK
content-type: image/webp
                                            
content-disposition: inline; filename="Winterpauschale.webp"
etag: "57c47030021ceceaa3066af344723f18"
last-modified: Thu, 21 Apr 2022 08:15:09 GMT
date: Fri, 11 Nov 2022 18:42:42 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=2;cpu=0;start=2022-11-11T18:42:42.945Z;desc=hit,rtt;dur=16
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 23440
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image, VP8 encoding, 768x432, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size:   23440
Md5:    57c47030021ceceaa3066af344723f18
Sha1:   e5463f0d8bfe366b22fc08b83acadc16982e50f8
Sha256: 4eb262160358b179f402f0d91ab10c13428592622d59522a28bfb97a566ea0f7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-12093550-1&cid=2125060650.1668192162&jid=222773487&_u=YEBAAEAAAAAAACAAI~&z=1161868296 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 11 Nov 2022 18:42:43 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /_next/static/chunks/pages/property/%5BpropertyCode%5D/packages/%5BpackageCode%5D-b99078469d7081d8.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Wed, 02 Nov 2022 15:17:07 GMT
last-modified: Wed, 02 Nov 2022 15:16:21 GMT
etag: W/"636289c5-9468"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O7p_rAf6-uT5GqKZEy8i5K8hHU-Vi5MnPClZ3BvJ_XVYiaoT8bYvlQ==
age: 789936
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   10858
Md5:    759119e7820be1161d996632e4e7df05
Sha1:   f953db796a4afbfd5c1330431c3040cb9c4dac68
Sha256: a15f3fb35366dbb92ff9e11893f34dc9721e80e5af345a7088d332d8aafcfd6b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/tKUY0ZCyl9k HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/tKUY0ZCyl9k HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /aggregate/en?templates=0LzCObbX@4.1.401,7zLy_2c9@7.2.401,BJ59EidsWQ@25.6.26,H1Vl5NidjWX@40.17.38,HJI5SmLm7@4.0.11,HkocEodjb7@52.11.34,S1_9Vsuj-Q@15.7.11,ko1w5PpFl@23.12.19 HTTP/1.1 
Host: aggregator.service.usercentrics.eu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: content-type
Referer: https://booking.neue-post.at/
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.28.121
HTTP/2 204 No Content
content-type: text/html
                                            
vary: Origin, Access-Control-Request-Headers
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
access-control-max-age: 86400
x-cloud-trace-context: deae81a010d1cc149b10cb944a9d698d
date: Fri, 11 Nov 2022 18:42:43 GMT
server: Google Frontend
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            GET /aggregate/en?templates=0LzCObbX@4.1.401,7zLy_2c9@7.2.401,BJ59EidsWQ@25.6.26,H1Vl5NidjWX@40.17.38,HJI5SmLm7@4.0.11,HkocEodjb7@52.11.34,S1_9Vsuj-Q@15.7.11,ko1w5PpFl@23.12.19 HTTP/1.1 
Host: aggregator.service.usercentrics.eu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booking.neue-post.at/
content-type: application/json
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.28.121
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
vary: Accept-Encoding, accept-encoding
access-control-allow-origin: *
content-encoding: br
server: Google Frontend
via: 1.1 google
content-length: 3654
date: Fri, 11 Nov 2022 08:29:25 GMT
cache-control: public,max-age=604800
age: 36798
etag: "1stsgcg"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , Unicode text, UTF-8 text, with very long lines (22430), with no line terminators
Size:   3654
Md5:    2cdafefa40b915775ef60a86ce809c20
Sha1:   bd8eb0bb54d6ca7562af25cdf02b5a4e696d4eeb
Sha256: d96ce0e9b257f8138b7d40f28c4fd10d66d2d2bfdd3211f08cbeef9edd00b1e3
                                        
                                            POST /s/gts1d4/tKUY0ZCyl9k HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/kHRXVe39NZ4 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/kHRXVe39NZ4 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/60H2Fvh90sM HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /graphql HTTP/1.1 
Host: graphql.usercentrics.eu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: access-control-allow-origin,content-type,x-request-id
Referer: https://booking.neue-post.at/
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.238.166
HTTP/2 204 No Content
                                            
date: Fri, 11 Nov 2022 18:42:43 GMT
content-length: 0
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
vary: Access-Control-Request-Headers
access-control-allow-headers: access-control-allow-origin,content-type,x-request-id
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /s/gts1d4/60H2Fvh90sM HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /events/ibe/pageReady? HTTP/1.1 
Host: quality.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Content-Length: 926
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.141
HTTP/2 200 OK
content-type: application/json
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.neue-post.at
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 11 Nov 2022 18:42:42 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=thei9zuS; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   79
Md5:    41a600227c8d0071dbee9c5e71e96a60
Sha1:   e18f5a698a689c9dec4a8774fe2bdeebce0dc059
Sha256: 9b363b3777247dc54e3abb91cbb15d638f87633dd27bee967d104c9dccbd6a52
                                        
                                            POST /s/gts1d4/kHRXVe39NZ4 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /s/gts1d4/60H2Fvh90sM HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /consent/uw/1 HTTP/1.1 
Host: consent-api.service.consent.usercentrics.eu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booking.neue-post.at/
content-type: application/json
Access-Control-Allow-Origin: *
X-Request-ID: c23a03eb-b350-4d14-91bd-708b6a6cb3fb
Origin: https://booking.neue-post.at
Content-Length: 887
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.117.233.17
HTTP/2 201 Created
content-type: text/html
                                            
vary: Origin
access-control-allow-origin: *
x-cloud-trace-context: d19dc95aeddf49797ee755b61f9b0365
date: Fri, 11 Nov 2022 18:42:43 GMT
server: Google Frontend
content-length: 0
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /s/gts1d4/bzLjGCNbNWE HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /uct?v=1&sid=7KunxZ2i&t=1&abv=&r=https%3A%2F%2Fbooking.neue-post.at%2F%3Fcheckin%3D2022-08-31%26checkout%3D2022-09-07%26propertyCode%3DAT_MAYR_NEUEPOST%26activeBookingEngine%3DKBE%26skd-checkin%3D2022-12-07%26skd-checkout%3D2022-12-14%26skd-property-code%3DAT_MAYR_NEUEPOST&cb=1668192162983 HTTP/1.1 
Host: uct.service.usercentrics.eu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.95.108.180
HTTP/2 200 OK
content-type: image/gif
                                            
cache-control: no-store
function-execution-id: 26ru5dowrjet
x-powered-by: Express
x-cloud-trace-context: a898c90c8c90ea0f8c97799125b8d45a
date: Fri, 11 Nov 2022 18:42:43 GMT
server: Google Frontend
content-length: 35
via: 1.1 google
strict-transport-security: max-age=7776000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   35
Md5:    c2196de8ba412c60c22ab491af7b1409
Sha1:   5fbd472222feb8a22cf5b8aa5dc5b8e13af88e2b
Sha256: 6adc3d4c1056996e4e8b765a62604c78b1f867cceb3b15d0b9bedb7c4857f992
                                        
                                            POST /s/gts1d4/bzLjGCNbNWE HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:43 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            OPTIONS /intake/v2/rum/events HTTP/1.1 
Host: apm-server.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://booking.neue-post.at/
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             135.125.240.139
HTTP/2 200 OK
                                            
access-control-allow-headers: Content-Type, Content-Encoding, Accept
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: https://booking.neue-post.at
access-control-expose-headers: Etag
access-control-max-age: 3600
content-length: 0
vary: Origin
x-content-type-options: nosniff
date: Fri, 11 Nov 2022 18:42:44 GMT
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2

                                        
                                            POST /intake/v2/rum/events HTTP/1.1 
Host: apm-server.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-ndjson
Content-Length: 50303
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.139
HTTP/2 202 Accepted
                                            
access-control-allow-origin: https://booking.neue-post.at
x-content-type-options: nosniff
date: Fri, 11 Nov 2022 18:42:44 GMT
content-length: 0
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2

                                        
                                            GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-12093550-1&cid=2125060650.1668192162&jid=222773487&_u=YEBAAEAAAAAAACAAI~&z=1161868296 HTTP/1.1 
Host: www.google.no
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.35
HTTP/2 200 OK
content-type: image/gif
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Fri, 11 Nov 2022 18:42:44 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Fri, 11 Nov 2022 18:42:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc5530631-4859-4685-8ab3-a5b1013cd2cb.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 11527
x-amzn-requestid: a2a00c3d-12f7-412b-ba02-6bda7aa60586
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bNfYZHXhIAMFVYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63687902-593d2a380bac7a567af893d3;Sampled=0
x-amzn-remapped-date: Mon, 07 Nov 2022 03:18:26 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: -4aHIcRGJA05uxZs2HkLI5SBdino1x_a5dIH9soWfxKe1mVNhwpglA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 11 Nov 2022 09:59:00 GMT
age: 31429
etag: "d43bb27911013930ed09d9609a71d737e0838556"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11527
Md5:    1ae1fe42d639643009ccee5a7ef770fd
Sha1:   d43bb27911013930ed09d9609a71d737e0838556
Sha256: d5fc8515f49a0b90e083f6a6025c3dc71dba286e15d5b3f841772d60d2e68fb2
                                        
                                            OPTIONS /events/ibe/pageLeave? HTTP/1.1 
Host: quality.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: cache-control,content-type
Referer: https://booking.neue-post.at/
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.141
HTTP/2 200 OK
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.neue-post.at
access-control-allow-methods: POST
access-control-allow-headers: cache-control, content-type
access-control-allow-credentials: true
access-control-max-age: 1800
allow: GET, HEAD, POST, PUT, DELETE, TRACE, OPTIONS, PATCH
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
content-length: 0
date: Fri, 11 Nov 2022 18:42:49 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=cheiG8ch; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2

                                        
                                            GET /_next/static/css/9d3301ee12c77f54.css HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: text/css
                                            
date: Thu, 27 Oct 2022 11:03:23 GMT
last-modified: Thu, 27 Oct 2022 11:02:48 GMT
etag: W/"635a6558-4edd4"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jzCwYEz0OTAHZj6g11ePcKImWXeW5lkkPMmF82nnKzVLFoynjRERCg==
age: 1323558
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/373-e25ab3df41b23944.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 20 Oct 2022 07:21:33 GMT
last-modified: Thu, 20 Oct 2022 07:20:45 GMT
etag: W/"6350f6cd-c61b"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: K3uxCFINDC-LIgzoWtGFBkZ8OSOoDNcnfpgq_CT1CNy1Es1WLoTFuw==
age: 1941667
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/914-7d07b1ef6b622c87.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 27 Oct 2022 11:03:23 GMT
last-modified: Thu, 27 Oct 2022 11:02:24 GMT
etag: W/"635a6540-107e2"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: N8OExd_PbU1M1JJTAXEfJJLPGE-NbWgbPDl1RbmLYB6pMLsPDofxpA==
age: 1323557
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/38-7f41f4a9e2fe47a2.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 27 Sep 2022 13:47:00 GMT
last-modified: Tue, 27 Sep 2022 13:45:54 GMT
etag: W/"6332fe92-2832"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TqT_MieO0jnRW-ou2OozfbJHOfCzlr3l8pXzk5FFArJf0Nl-dIgn8w==
age: 3905740
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/818-a665093163e8f78c.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 27 Oct 2022 11:03:23 GMT
last-modified: Thu, 27 Oct 2022 11:02:24 GMT
etag: W/"635a6540-5d00d"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LVcLiyLn4aftmaUdE_fPLO4ko0cLDcBD0KcRq7GHfUuxk7eSS9KwRw==
age: 1323557
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/pages/index-49053a8848ff665c.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 27 Oct 2022 11:03:23 GMT
last-modified: Thu, 27 Oct 2022 11:02:24 GMT
etag: W/"635a6540-12fd3"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -8NYngF_QED7djsyo0PMiaSHoafK6clLO30qBH8sUHiD9W5mDS7rsw==
age: 1323558
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /graphql HTTP/1.1 
Host: graphql.usercentrics.eu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://booking.neue-post.at/
content-type: application/json
Access-Control-Allow-Origin: *
X-Request-ID: 27760ef5-55fa-4bd4-bd89-ca1aae11f922
Origin: https://booking.neue-post.at
Content-Length: 3270
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.238.166
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
date: Fri, 11 Nov 2022 18:42:43 GMT
vary: Accept-Encoding
x-powered-by: Express
access-control-allow-origin: *
etag: W/"25c-sfrX8GrHznstVrrQ0yuCioEJClc"
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/333-dcdb674093c5c6ce.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 08 Nov 2022 10:57:30 GMT
last-modified: Tue, 08 Nov 2022 10:56:47 GMT
etag: W/"636a35ef-316d4"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IL9s2K75yXOS8wZwVZUDOe20yjbfnd49CUn5oAEztC5KJYugzFKsaA==
age: 287110
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/nLkQr0NMi2L1H5mqJka8z/_buildManifest.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 08 Nov 2022 10:57:30 GMT
last-modified: Tue, 08 Nov 2022 10:56:47 GMT
etag: W/"636a35ef-e22"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oo4nMETGQjVyoOV3d-OFygNXQhsCfbML8TjT8qVqCn0vZegjUM0jWA==
age: 287111
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            OPTIONS /unavailable-days HTTP/1.1 
Host: hbe-api.kognitiv.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://booking.neue-post.at/
Origin: https://booking.neue-post.at
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             135.125.240.149
HTTP/2 200 OK
                                            
status: 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://booking.neue-post.at
vary: Origin
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-headers: content-type
date: Fri, 11 Nov 2022 18:42:42 GMT
set-cookie: MGLH51CKJDVB=HBE7KSGFADL4; path=/; HttpOnly; Secure
cache-control: private
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /static/semantic.min.css?checksum=c693bf067390b2ec6106c2aec0a1c2b1 HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: text/css
                                            
date: Fri, 11 Nov 2022 04:54:13 GMT
last-modified: Wed, 27 Jul 2022 15:15:58 GMT
etag: W/"62e156ae-996ea"
access-control-allow-origin: *
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QwwrlBTNys6-5c11FfiraiQcekctqYidsAylzg4tdZqz9Bhm6kO49A==
age: 49707
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/659-2e8d7867b88b945f.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 20 Oct 2022 07:21:33 GMT
last-modified: Thu, 20 Oct 2022 07:20:23 GMT
etag: W/"6350f6b7-42545"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iBvh-y4e0C6P-kIj0wj2auSPAKfRLtCSDTKf1I3Dfyk8LEJNAh1v6w==
age: 1941667
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/648-4c2e3b2c2caed8af.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 27 Oct 2022 11:03:23 GMT
last-modified: Thu, 27 Oct 2022 11:02:48 GMT
etag: W/"635a6558-3ab74"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qQXbEN9poDhrfPgtHRzSNrZeNfXYk_eSxhyx7qjXazmpnHj_sH7qkw==
age: 1323557
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/979-fc9d9c0ee5b8eeaa.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 30 Sep 2022 04:08:38 GMT
last-modified: Wed, 07 Sep 2022 13:23:58 GMT
etag: W/"63189b6e-7ff8"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 40Bb_OQ5RkB4scyjX4mGtX1y1BOmWZSPn41o0T8rZCM7GtConSjOCg==
age: 3681243
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/956-0fc5972df41b148e.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 20 Oct 2022 07:21:33 GMT
last-modified: Thu, 20 Oct 2022 07:20:45 GMT
etag: W/"6350f6cd-105db"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: m5xknGOGl92lLq-hYpmxn_W6jU71Z3xmo38GsxE2lKQSnhu8mzXqOg==
age: 1941668
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /events/ibe/searchBoxInit? HTTP/1.1 
Host: quality.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Content-Length: 950
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.141
HTTP/2 200 OK
content-type: application/json
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.neue-post.at
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 11 Nov 2022 18:42:42 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=thei9zuS; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/695-5ea418b3362d2010.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Wed, 07 Sep 2022 13:24:41 GMT
last-modified: Wed, 07 Sep 2022 13:23:35 GMT
etag: W/"63189b57-fd62"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 83Qa4h7QnQE_q2elgQJJsMITUrGUeal3RQM1eECJs5CmxSEwvdJeig==
age: 5635079
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/364-a4c93b701170caf0.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 27 Oct 2022 11:03:23 GMT
last-modified: Thu, 27 Oct 2022 11:02:48 GMT
etag: W/"635a6558-2237"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uy0tOfl31zE_mwbhlsPHUe9O6KE6IgyK9SLNOaRtrTn5AVv0IpnqZw==
age: 1323557
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/928-c493e9363c09f3e4.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Wed, 02 Nov 2022 15:17:00 GMT
last-modified: Wed, 02 Nov 2022 15:16:07 GMT
etag: W/"636289b7-11a58"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EmPzsKgeBCd3JxU-BlhbIQEQ-Nx4Meegy5VAxDJ0Nb9otNoPLItyAA==
age: 789940
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/433-cf8f5db4a2ff0d63.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 20 Oct 2022 07:21:33 GMT
last-modified: Thu, 20 Oct 2022 07:20:23 GMT
etag: W/"6350f6b7-42f17"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AqWyCg2royKnpKSfnWNwaGUF1h-OmywBNoF-rfIdA1VzIHZY9RT7QQ==
age: 1941667
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /events/ibe/viewOffers? HTTP/1.1 
Host: quality.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Content-Length: 2027
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.141
HTTP/2 200 OK
content-type: application/json
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.neue-post.at
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 11 Nov 2022 18:42:41 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=cheiG8ch; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/302-4d7566ecede458df.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Thu, 27 Oct 2022 11:03:23 GMT
last-modified: Thu, 27 Oct 2022 11:02:48 GMT
etag: W/"635a6558-52fe"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: HFgZmJ72G4_WJEboK1uMtJ_LvkiewHPXy0FoqOgoQ2Gsiu5g6w0Liw==
age: 1323557
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /static/scripts/elastic-apm-rum.umd.min.js?checksum=e93c8d4d150530d83ee4ee385157b262 HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Fri, 11 Nov 2022 02:06:54 GMT
last-modified: Wed, 11 May 2022 16:35:20 GMT
etag: W/"627be5c8-f0b3"
access-control-allow-origin: *
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z5Wv6ZSQfZSUeks0kDVAESbW1GdI3FemBlw0E6gdbQw0Vp7maJaFfQ==
age: 59747
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /static/icons-extended.css?checksum=c68829aa4263885cfc63b20639cec261 HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: text/css
                                            
date: Fri, 11 Nov 2022 03:43:38 GMT
last-modified: Tue, 03 May 2022 12:24:30 GMT
etag: W/"62711efe-250b"
access-control-allow-origin: *
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qxS8ViGrasreA5U7AVVEkBzajAblKpLVaM57ShqB-_oRAVxx6Xng-w==
age: 53943
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /w/w-tracking-api/group:BookingFlow/69549e60-3d6e-0136-cbf5-0050568253f2.js HTTP/1.1 
Host: cloud.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             135.125.240.147
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                            
status: 200 OK
x-rack-cache: miss
cache-control: max-age=0, private, must-revalidate
date: Fri, 11 Nov 2022 18:42:41 GMT
x-ua-compatible: IE=Edge,chrome=1
etag: W/"22db3319eb65f407f66a7f4279770598"
x-runtime: 0.004156
x-request-id: c03a689559309e9da6dc4e093386c1bd
x-powered-by: Phusion Passenger(R) 6.0.14
server: nginx/1.20.2 + Phusion Passenger(R) 6.0.14
content-encoding: gzip
strict-transport-security: max-age=15768000
set-cookie: SDLKJWIUDKIJS=5e43dce80ff7310; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /events/ibe/pageLoaded? HTTP/1.1 
Host: quality.seekda.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Cache-Control: no-cache
Content-Length: 967
Origin: https://booking.neue-post.at
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             135.125.240.141
HTTP/2 200 OK
content-type: application/json
                                            
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://booking.neue-post.at
access-control-allow-credentials: true
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
x-frame-options: DENY
date: Fri, 11 Nov 2022 18:42:41 GMT
strict-transport-security: max-age=15768000
set-cookie: VCSADDYFIHLUNGF=cheiG8ch; path=/; HttpOnly; Secure; SameSite=none
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/main-1f7489bfb2b58832.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 27 Sep 2022 13:46:59 GMT
last-modified: Tue, 27 Sep 2022 13:45:54 GMT
etag: W/"6332fe92-23bda"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JSGQ02ZsZ8uiYnA4XJvWcuZMpYu_nz8UZby6ocbWlrmYh0glGwsEeg==
age: 3905741
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/804-13fd754e32aa16c3.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Wed, 07 Sep 2022 13:24:41 GMT
last-modified: Wed, 07 Sep 2022 13:23:58 GMT
etag: W/"63189b6e-7319"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JKCvyeFZIpSUb6N28JG-rG-7hyn0pmSVmzPWyBjyGK1uL1YZNC8RNQ==
age: 5635079
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/nLkQr0NMi2L1H5mqJka8z/_middlewareManifest.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 08 Nov 2022 10:57:30 GMT
last-modified: Tue, 08 Nov 2022 10:57:04 GMT
etag: W/"636a3600-5c"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oRjWKI8RHv7aZXKqsF4FuurF8ANVnzCGhLDH_hdLEp5wqs6WF95NTA==
age: 287111
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /_next/static/chunks/webpack-af0fc1fb1b57cb39.js HTTP/1.1 
Host: d2jtzd336hs8un.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://booking.neue-post.at/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             54.230.245.13
HTTP/2 200 OK
content-type: application/javascript
                                            
date: Tue, 22 Mar 2022 12:30:56 GMT
last-modified: Tue, 22 Mar 2022 12:29:17 GMT
etag: W/"6239c11d-7ce"
access-control-allow-origin: *
cache-control: public, max-age=31536000, immutable
strict-transport-security: max-age=31536000
content-encoding: gzip
vary: Accept-Encoding,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ooQ8wNnETZFmhjtMrL9IicNFiPBMOELvhQxxBuEr-02YXKin1HdhOA==
age: 20239905
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: