www.the-klu.org/landingpages/corona/
301 Moved Permanently 252 B URL HTTP/1.1 www.the-klu.org/landingpages/corona/
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a3b7263d50940166446059113ca04ea3
4ff9e0640de69ad50e8e9388c91a2455060b215c
b18957b963e4f301845911458c3807db39d85ed98903b14efe82ee0572b7a3c6
NIDS Severity Alert suricata medium ET HUNTING Suspicious GET Request with Possible COVID-19 URI M2
GET /landingpages/corona/ HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 31 Jan 2023 11:33:36 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Location: https://www.the-klu.org/landingpages/corona/
Cache-Control: max-age=0
Expires: Tue, 31 Jan 2023 11:33:36 GMT
Content-Length: 252
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12923
Expires: Tue, 31 Jan 2023 15:08:59 GMT
Date: Tue, 31 Jan 2023 11:33:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14970
Expires: Tue, 31 Jan 2023 15:43:06 GMT
Date: Tue, 31 Jan 2023 11:33:36 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8d45deaa7ebfcd996c2055dae592ab8
55befe074589fe7b39757c145968058162a8fc6b
50d7d516f446458145a304b288a0a39d391cd37ea50dabea36ae48d291c65ba7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "50D7D516F446458145A304B288A0A39D391CD37EA50DABEA36AE48D291C65BA7"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9331
Expires: Tue, 31 Jan 2023 14:09:07 GMT
Date: Tue, 31 Jan 2023 11:33:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Alert, Retry-After, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 10:35:52 GMT
content-type: application/json
age: 3464
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PXhoM/0xzJNFNbe5FU8FIbFoMJYNR8liPyXULncCih5tT61vDXBIAUws4C3/iYGMRijdK+BXiXY=
x-amz-request-id: W3YZ1ZAKSW5YGY5Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 11:22:12 GMT
age: 684
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 11:33:36 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5135224c3297b9aa28c8ed9933aa44ff
3685bd17a6ccd84710a99be93e939107c12c7195
6b7412ae25471ceae354387c79419bf10851bb0cbc0b364d7f24324f28b5661f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6B7412AE25471CEAE354387C79419BF10851BB0CBC0B364D7F24324F28B5661F"
Last-Modified: Mon, 30 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 31 Jan 2023 17:33:36 GMT
Date: Tue, 31 Jan 2023 11:33:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Last-Modified, Cache-Control, Pragma, ETag, Backoff, Content-Type, Alert, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 10:41:42 GMT
age: 3114
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.the-klu.org/landingpages/corona/
200 OK 31 kB URL HTTP/2 www.the-klu.org/landingpages/corona/
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65511), with no line terminators
Hash 85070c0ab0007cafea7f239d41fbb7bc
b6019e4d02ed648c978f86fcee74931b74550a1b
64c8e308bb7c45e7c1ef06f5a36389b3a69322f7f7bcb5b83f3e761bda56405e
NIDS Severity Alert suricata medium ET HUNTING Suspicious GET Request with Possible COVID-19 URI M2
GET /landingpages/corona/ HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:36 GMT
server: Apache
content-language: en
content-encoding: gzip
vary: Accept-Encoding
x-frame-options: SAMEORIGIN
content-length: 31214
cache-control: max-age=0
expires: Tue, 31 Jan 2023 11:33:36 GMT
x-ua-compatible: IE=edge
x-content-type-options: nosniff
content-type: text/html; charset=utf-8
X-Firefox-Spdy: h2
www.the-klu.org/typo3temp/assets/compressed/merged-7cf6f73525f73720aecc4a76b4857a2c-min.css.1672760365.gzip
200 OK 54 kB URL HTTP/2 www.the-klu.org/typo3temp/assets/compressed/merged-7cf6f73525f73720aecc4a76b4857a2c-min.css.1672760365.gzip
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type ASCII text, with very long lines (65536), with no line terminators
Hash dc61f242f50a1a3d073ebdbedc91b037
93fc548049cd6e5adfc93d289424afd0786df1ae
ef5d5dbc67c1bf7e51e2e1743a3a7be2af4e12832a6d36a66f003a8bdbae5331
GET /typo3temp/assets/compressed/merged-7cf6f73525f73720aecc4a76b4857a2c-min.css.1672760365.gzip HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 03 Jan 2023 15:39:25 GMT
accept-ranges: bytes
content-length: 54508
cache-control: max-age=31536000
expires: Wed, 31 Jan 2024 11:33:37 GMT
x-ua-compatible: IE=edge
x-content-type-options: nosniff
content-type: text/css; charset=utf-8
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 182ecc42cf9b029c6810f2ad6d5fcb1d
a10b2ab0533173bfb7851963626fcb9920d291c9
806d25327e4aa9c0fd9775c1d2885dfafcaa0e05b5b1a91077c00946607df45e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5402
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:37 GMT
Last-Modified: Tue, 31 Jan 2023 10:03:36 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
www.the-klu.org/fileadmin/_processed_/2/f/csm_deadline-31-march_0c6d1489cf.jpg
200 OK 9.3 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/2/f/csm_deadline-31-march_0c6d1489cf.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 273x202, components 3\012- data
Hash 1a379179793a625e6ccf63293a76a1a6
032f94b0de4c7d7c6159a8b9f4621bc4c64eb9ad
9ef9771c9bfbc0b32f8318aba4e58694ae954701d2a901069d7e3afef421b8b5
GET /fileadmin/_processed_/2/f/csm_deadline-31-march_0c6d1489cf.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Mon, 23 Jan 2023 14:48:05 GMT
accept-ranges: bytes
content-length: 9347
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13628
Expires: Tue, 31 Jan 2023 15:20:45 GMT
Date: Tue, 31 Jan 2023 11:33:37 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 5d9d5e33214cd6e670cf6bbcd351de8f
8432044013847b8d4799aec9bae4e73fcb943249
fb3bda4222c9588f0fa878c1edda3f61ce5fa40e89958e3137a8c8a1e3fecdc2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6369
Cache-Control: max-age=142317
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:37 GMT
Etag: "63d86c9d-1d7"
Expires: Thu, 02 Feb 2023 03:05:34 GMT
Last-Modified: Tue, 31 Jan 2023 01:19:25 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
hello.myfonts.net/count/305845
200 OK 0 B URL HTTP/2 hello.myfonts.net/count/305845
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /count/305845 HTTP/1.1
Host: hello.myfonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
content-type: text/css
content-length: 0
accept-ranges: bytes
access-control-allow-origin: *
age: 1
cache-control: max-age=604800
expires: Wed, 31 Jan 2024 11:33:37 GMT
expect-ct: null
set-cookie: __cf_bm=bRffj52GRqqEEefEJ5xZPPDB_mXMUs_t7hIpSsXub9I-1675164817-0-AXK+oDg/dxL6D5ABDlIZiK8Syk4uEa7qtzSEOkoNeG48VYlBQ1wEj+JGUkhG/e46zUADgqat/HGoRY8bmIN2eSQ=; path=/; expires=Tue, 31-Jan-23 12:03:37 GMT; domain=.myfonts.net; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922222ae9bd0b69-OSL
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/e/f/csm_211028_KLU_Maria_Besiou_portrait_d737d74823.jpg
200 OK 6.6 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/e/f/csm_211028_KLU_Maria_Besiou_portrait_d737d74823.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 175x175, components 3\012- data
Hash b3a54a216acc3b8dc70a5eb515ded2b8
fb16283531129e21656752277d1ecde7715651d9
80fbb65531ede5e59e57972e09ad56cd18d69564998e1d1e67462ea8ae084eae
GET /fileadmin/_processed_/e/f/csm_211028_KLU_Maria_Besiou_portrait_d737d74823.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 02 Feb 2022 17:16:30 GMT
accept-ranges: bytes
content-length: 6633
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/2/3/csm_7_0f52143e4d.jpg
200 OK 12 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/2/3/csm_7_0f52143e4d.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 273x202, components 3\012- data
Hash aaaf7d3c9f7eb53d6853d3821ee2c8d6
99b82264814d1261eb48ac40136002243725e421
47b6fc908610f3b73945e0cedca571dd528ffb5ce5fd0643b167de1a0b9d6c13
GET /fileadmin/_processed_/2/3/csm_7_0f52143e4d.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 05 May 2022 08:32:14 GMT
accept-ranges: bytes
content-length: 12235
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.paypal.com/sdk/js?client-id=ASq3c7S00Pkitbv_1uRCIUhTGT-qhiqd7rNbKfemhkC_ZSvwbOpS0lqQsA6B_R98rsTi-wl_QLUNFd-X¤cy=EUR
200 OK 94 kB URL HTTP/2 www.paypal.com/sdk/js?client-id=ASq3c7S00Pkitbv_1uRCIUhTGT-qhiqd7rNbKfemhkC_ZSvwbOpS0lqQsA6B_R98rsTi-wl_QLUNFd-X¤cy=EUR
IP
File type ASCII text, with very long lines (65472)
Hash 3eced8866b0b1734e20f79cb0c472c36
6829790a3fd594c79ff81b0e69907345e8d87568
37f9b078f52b7e6d146fcfdf6e2c5d79a939678e51784573f697efa0149c7947
GET /sdk/js?client-id=ASq3c7S00Pkitbv_1uRCIUhTGT-qhiqd7rNbKfemhkC_ZSvwbOpS0lqQsA6B_R98rsTi-wl_QLUNFd-X¤cy=EUR HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-b5x/AKhTSN862Tmh4pJws7r4YL+3XElEJX4OnSMghFh0Q8E7' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-b5x/AKhTSN862Tmh4pJws7r4YL+3XElEJX4OnSMghFh0Q8E7' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
content-type: application/javascript; charset=utf-8
etag: W/"17116-aCl5Cj/VlMef+BsOaZBzRejYdWg"
p3p: true
paypal-debug-id: f253938069f1c
traceparent: 00-0000000000000000000f253938069f1c-582a04788cdde2a6-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 11:33:37 GMT
age: 6994
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220050-HHN, cache-bma1666-BMA
x-cache: MISS, HIT
x-cache-hits: 0, 1
x-timer: S1675164817.142787,VS0,VE5
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f253938069f1c-93cd74bc4e42378b-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 94486
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/9/8/csm_Christian_Troester_fc37b185d0.jpg
200 OK 5.4 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/9/8/csm_Christian_Troester_fc37b185d0.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 175x175, components 3\012- data
Hash 8a648311f31a1cedf9507cdfca38c906
0aacd6d9b1b6d5a1030c8c68cbf8101d0d66d7e8
3d79f38aac649ba280c21c5036aa993a8203e40c5a399e5ca33fc1cd155214cf
GET /fileadmin/_processed_/9/8/csm_Christian_Troester_fc37b185d0.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 02 Feb 2022 17:16:38 GMT
accept-ranges: bytes
content-length: 5404
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/logo.svg
200 OK 1.9 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/logo.svg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash aa8774298f0f0b80eed41a08133be851
6b811cade657c32575da3a5b7fc65664a37cc6c2
359043881408b7e52158c2ad83ee1f08ad4a4a6e5376b0bbc70b4e96bfc2dc24
GET /fileadmin/the-klu.org/Template/Public/images/logo.svg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 1906
content-type: image/svg+xml
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/e/3/csm_Kai_Hoberg_de6ad1ee05.jpg
200 OK 6.7 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/e/3/csm_Kai_Hoberg_de6ad1ee05.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 175x175, components 3\012- data
Hash 9e84a412dad3819ada20c28601a8cd9a
e3233bb484a8a5ce7113ea94d1b21d108bf86097
48368a3cf1a2bbb2626f08525c924bef50f087f50172ed737076e4bee1882b88
GET /fileadmin/_processed_/e/3/csm_Kai_Hoberg_de6ad1ee05.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 02 Feb 2022 17:18:31 GMT
accept-ranges: bytes
content-length: 6708
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/e/6/csm_Alexander_Himme_5e66d35b44.jpg
200 OK 5.8 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/e/6/csm_Alexander_Himme_5e66d35b44.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 175x175, components 3\012- data
Hash 5f4111064984ec388bbdcade1a2fa0fe
ec75922987b364835776ff8e293b69cc587338ac
248ddc70069fbffc0d549b4e982d48130e61e7dce1e76dfb2e23e65abf613854
GET /fileadmin/_processed_/e/6/csm_Alexander_Himme_5e66d35b44.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 02 Feb 2022 17:16:35 GMT
accept-ranges: bytes
content-length: 5800
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.the-klu.org/typo3temp/assets/compressed/merged-a1a32e2afe566be679e16a21114ce02c-min.js.1551881878.gzip
200 OK 303 B URL HTTP/2 www.the-klu.org/typo3temp/assets/compressed/merged-a1a32e2afe566be679e16a21114ce02c-min.js.1551881878.gzip
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type ASCII text, with very long lines (333)
Hash e68649113bf8f379bcd9654fa7c057b8
9d38e83146b3b7176c114b1cb4d04414bbb9ab80
b58a5ac8e45b9de72b009abca45ad090986342d46ed738cbe825dc8d9550ef5f
GET /typo3temp/assets/compressed/merged-a1a32e2afe566be679e16a21114ce02c-min.js.1551881878.gzip HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 06 Mar 2019 14:17:58 GMT
accept-ranges: bytes
content-length: 303
cache-control: max-age=31536000
expires: Wed, 31 Jan 2024 11:33:37 GMT
x-ua-compatible: IE=edge
x-content-type-options: nosniff
content-type: text/javascript; charset=utf-8
content-encoding: gzip
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/logo-wt.svg
200 OK 852 B URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/logo-wt.svg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 4aebfdd7542991ff28795d0000e095e2
16567ae5dd685f322d5361013a69b11a742836b7
4a40bfed6fae3f6ca075aec089fcbd111ede68e69f3e917b8f4e255cb36dbb33
GET /fileadmin/the-klu.org/Template/Public/images/logo-wt.svg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 852
content-type: image/svg+xml
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/9/0/csm_Soenke_Albers_33bf7a6684.jpg
200 OK 6.0 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/9/0/csm_Soenke_Albers_33bf7a6684.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 175x175, components 3\012- data
Hash e0a130397c6c442db7e2d438309762c6
2e82a29bad253ba115af513f2ec8ba4e7281b95a
9cefa6cf35f410b9e5c65c7022dc2678f85c21fc82f3aa71c4a5d020653c30c0
GET /fileadmin/_processed_/9/0/csm_Soenke_Albers_33bf7a6684.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 02 Feb 2022 17:14:03 GMT
accept-ranges: bytes
content-length: 5972
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-4.png
200 OK 7.8 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-4.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash c940b7d01a21fac10d3ef3ef497a3e86
d4484a8e9183e8a68ccb5200b2f7ca88eb9a6b30
a18f7ee39a7d50d13fa00b9ba589105a020a569ca0e75cdd441606951fb6d889
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-4.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 7791
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/0/f/csm_csm_221121food_ppl_eating_alex-haney-CAhjZmVk5H4-unsplash_4bc8db1f2f_82fa6c6f63.jpg
200 OK 18 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/0/f/csm_csm_221121food_ppl_eating_alex-haney-CAhjZmVk5H4-unsplash_4bc8db1f2f_82fa6c6f63.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 273x202, components 3\012- data
Hash c78d227b856495f70dffb53e2e5b130a
c54004240596f40792b55c8199257ac1ec272142
b1324ff3561ab36174235fa55593509b28e63a4984a895a8562364eff2988f8b
GET /fileadmin/_processed_/0/f/csm_csm_221121food_ppl_eating_alex-haney-CAhjZmVk5H4-unsplash_4bc8db1f2f_82fa6c6f63.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 03 Jan 2023 11:44:06 GMT
accept-ranges: bytes
content-length: 17697
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/vendors/leaflet-fullscreen/leaflet.fullscreen.css
200 OK 368 B URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/vendors/leaflet-fullscreen/leaflet.fullscreen.css
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
Hash 44cbf24fd6283b1c2c68c79a0efb7472
e5de3dec5134b6c9d67b4d2257135e9bf51d6f81
4deaf53d7ccd47582020d1ae193069c5938d849b0a573e004128104d02d5a55f
GET /fileadmin/the-klu.org/Template/Public/vendors/leaflet-fullscreen/leaflet.fullscreen.css HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/typo3temp/assets/compressed/merged-7cf6f73525f73720aecc4a76b4857a2c-min.css.1672760365.gzip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 22 Dec 2021 09:33:10 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 31 Jan 2024 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 368
content-type: text/css; charset=utf-8
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/vendors/leaflet/leaflet.css
200 OK 3.3 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/vendors/leaflet/leaflet.css
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type ASCII text, with CRLF line terminators
Hash 8a900889e5b04d89e3e309a44a5177cb
cbbc20e6a5a9b57392e12288406ff33ad18c9bd9
f993428ad0b5fdcd64abbc94ecc5afa903ae271f66bbfaa55f77c29478223f1c
GET /fileadmin/the-klu.org/Template/Public/vendors/leaflet/leaflet.css HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/typo3temp/assets/compressed/merged-7cf6f73525f73720aecc4a76b4857a2c-min.css.1672760365.gzip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 22 Dec 2021 09:33:11 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 31 Jan 2024 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 3300
content-type: text/css; charset=utf-8
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/media/_icons/buttons/icon-cloud-upload.svg
200 OK 288 B URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/media/_icons/buttons/icon-cloud-upload.svg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash d9c547bf43889b100605d936a0a1e23a
bae4072977a9631e27bf410a6faced1ce7efc9ea
7677d592ef434adc0f1566e3842a987a113c2e48f87796d3e3d40f9f7c3f9267
GET /fileadmin/the-klu.org/media/_icons/buttons/icon-cloud-upload.svg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Fri, 19 Oct 2018 06:45:58 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 288
content-type: image/svg+xml
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/2/0/csm_Copy_of_Inxmail-article-pic-leftright__1__72a1cc535e.png
200 OK 86 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/2/0/csm_Copy_of_Inxmail-article-pic-leftright__1__72a1cc535e.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 273 x 202, 8-bit/color RGBA, non-interlaced\012- data
Hash 36873cd07a459a128d047b79e28c75a0
ee11dee1e2b1116f22066ebf812acd5b79038f8d
a58d68b9be9af9c0e11fdd82484891cda0dc05db71365fbaa5b68a3406f1e7d2
GET /fileadmin/_processed_/2/0/csm_Copy_of_Inxmail-article-pic-leftright__1__72a1cc535e.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 03 Jan 2023 12:30:19 GMT
accept-ranges: bytes
content-length: 86344
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-7.png
200 OK 12 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-7.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 301 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 1ac629c22a1effe8ba3df2283a1d8ec9
283c83eaed694bee8e7e064c802c291cf0852996
7606e5d11a106353dd10f0dbc681ebdffb58bbfb946d3731355455b70d9039c0
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-7.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 11633
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-6.png
200 OK 14 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-6.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 1aacc45e13d7ac64fe491251edace10b
8f4181302a1ba68a1a9509cf94702c6e33ab4830
565347ba0d9016b9d2eaa14604ee0fbca839b878393874f41c8768adb927d483
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-6.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 13746
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-8.png
200 OK 6.9 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-8.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 9219263eb76a9d24257ab4f2a3307585
b3dec465601523bebec2c5a78e05631b45c146eb
ff0709e4e4816e74ae5a62263364ce67af3569a28b575b849b3e97a2d7aab534
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-8.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 6853
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-5.png
200 OK 7.1 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-5.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 720b4be1c1a52c7a53837b32153f3f97
00b8db0200eab0037b93ba4c8f2a3ec6c35138d9
2764ac65349ce2c152a4edb1929ca431ce46d250623e65c66d134dd3657ed348
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-5.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 7106
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/media/_icons/buttons/icon-chart-bar.svg
200 OK 297 B URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/media/_icons/buttons/icon-chart-bar.svg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash c8adb1aefc9793be176c3b924d852c09
28f4b8abedb5cb94bb92200acdb8b6e9aa339a1e
165b61f6a5d33ff3fc24572d5c1e427b91097873f8f5d10c5227f117f54bf62d
GET /fileadmin/the-klu.org/media/_icons/buttons/icon-chart-bar.svg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Fri, 19 Oct 2018 06:45:58 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 297
content-type: image/svg+xml
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-14.png
200 OK 17 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-14.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 805092171f5cd5002d38a6bea4e891ce
80d91b84438ea8add61efb810e94688aa27ee57d
b3c8332965fc59eedf73f985983eedddd848bc9670be96f20c5dc6f0e5b13428
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-14.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 17009
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-3.png
200 OK 18 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-3.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 6314ba70b09d764b481796e4dc7b36c5
a1136de9cc5b853f5e665d9ec00a95f2be2850e2
9f84e1388d328b23f8ec2e19bd3f7ffa61fc5de18b9ab94ed241009d7888fb8b
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-3.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 18360
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/f/f/csm_Sandra_Transchel_72af63782d.jpg
200 OK 7.0 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/f/f/csm_Sandra_Transchel_72af63782d.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 175x175, components 3\012- data
Hash 512044f49418edfe2e25ad84f49afe48
a278798bef582b18140fd5abf79f7f3ff1d0742b
94279d0a1988d503fbd3f20219cddc14b80e7a3c86b8a392bb5073a551fad004
GET /fileadmin/_processed_/f/f/csm_Sandra_Transchel_72af63782d.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 02 Feb 2022 17:15:58 GMT
accept-ranges: bytes
content-length: 6972
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-9.png
200 OK 26 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-9.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 94569c42a778a0709807271f025916d7
c109e73c516f00d2451ebeb898b4b38496597819
90daff1c5fabda69d4b49ea7647edfa52d98e435dd913b98ba2169ad097aadfd
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-9.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 26513
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/che-ranking.svg
200 OK 1.8 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/che-ranking.svg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 367878714f34167a76a07cdc4f618ec3
694db16d7e4b293c59e80c75aca55126e97fb5f3
c3090f805e21b379aeb7a4cb678875d6f3d086fea515a4ee9ae8eda46f2fdaf3
GET /fileadmin/the-klu.org/Template/Public/images/che-ranking.svg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 1820
content-type: image/svg+xml
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-1.png
200 OK 32 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-1.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 301 x 201, 8-bit/color RGBA, non-interlaced\012- data
Hash 92fbd677455972b2fa4647eff3b40c06
c4057efdd6a682371432ee90240c1ad7b74a12b4
b677b0b065c150d0d9a14e0df7071fcd8fbbd87695b4e75fd51a2404e37d0a26
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-1.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 31754
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-15.png
200 OK 8.5 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-15.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 1edf099fabc5386c4397050caa95f642
43bc6e5577363d17b10bd6963130ad9e6a88ee0a
0036e89fe25b90d06495fd1d176afce6578a09834bb198d5c551d3dce5d37ac2
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-15.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 8523
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/css/fonts.css
200 OK 1.1 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/css/fonts.css
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type Unicode text, UTF-8 text, with very long lines (627)
Hash 36005b06e65c8621ca2276a1b6bdc4c7
8360e4a458a3ccd80e2e7aa29c9d8576d8f653c1
70391cf1420b2dc8332065dc034eef065e8d46b0d82e08d1255f0957bee8a718
GET /fileadmin/the-klu.org/Template/Public/css/fonts.css HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/typo3temp/assets/compressed/merged-7cf6f73525f73720aecc4a76b4857a2c-min.css.1672760365.gzip
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Fri, 10 Jun 2022 08:59:04 GMT
accept-ranges: bytes
cache-control: max-age=31536000
expires: Wed, 31 Jan 2024 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 1088
content-type: text/css; charset=utf-8
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/media/_icons/buttons/icon-organic.svg
200 OK 235 B URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/media/_icons/buttons/icon-organic.svg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 44ea4e24d213f0776ae4837070768446
ee31882fec59541732d3abbcf2632f72e8b3de3f
ca538f257198b9e544caf906c76fa6a5057a880861dfa5bb11f7ab0db6c1f7ae
GET /fileadmin/the-klu.org/media/_icons/buttons/icon-organic.svg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Fri, 19 Oct 2018 06:45:58 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 235
content-type: image/svg+xml
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-17.png
200 OK 13 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-17.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 456f2dc4953881e7b1fbecb8ca48d578
64e224aae9646abf8cabe5036183b75c6bffcf18
8ced1903dfaf2c6c6e88c7559e5bca9a2c271be030f6c60c476f4b49c9ac8dc7
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-17.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 13100
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0zJZWIBai/pWmms748vYRg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: cPqhnnZYHl3Au9ccRhp8B3rAmp0=
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-2.png
200 OK 6.4 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-2.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 5614ee4d92b37747d352074842ee00ae
757854d676cac8ae2f434b9943af7263c2eafdad
d079e0e3efb5e5c400d69479cd104dccf5d14fb371f163d869071e9001697210
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-2.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 6385
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/2/b/csm_Niels_Van_Quaquebeke_d4feba47e1.jpg
200 OK 6.5 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/2/b/csm_Niels_Van_Quaquebeke_d4feba47e1.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 175x175, components 3\012- data
Hash bdab478f1beffbf54deef524a7d0b963
4f47a52370b96298e7db06821c8757f23e124342
65097792d2b0500c49cfa4137da9219dd8ec64153507f5929e89716852131be4
GET /fileadmin/_processed_/2/b/csm_Niels_Van_Quaquebeke_d4feba47e1.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 02 Feb 2022 17:16:36 GMT
accept-ranges: bytes
content-length: 6544
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
hello.myfonts.net/count/36ccd3
200 OK 0 B URL HTTP/2 hello.myfonts.net/count/36ccd3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /count/36ccd3 HTTP/1.1
Host: hello.myfonts.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Cookie: __cf_bm=bRffj52GRqqEEefEJ5xZPPDB_mXMUs_t7hIpSsXub9I-1675164817-0-AXK+oDg/dxL6D5ABDlIZiK8Syk4uEa7qtzSEOkoNeG48VYlBQ1wEj+JGUkhG/e46zUADgqat/HGoRY8bmIN2eSQ=
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
content-type: text/css
content-length: 0
accept-ranges: bytes
access-control-allow-origin: *
age: 1
cache-control: max-age=604800
expires: Wed, 31 Jan 2024 11:33:37 GMT
expect-ct: null
vary: Accept-Encoding
server: cloudflare
cf-ray: 7922222d0c3c0b69-OSL
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/4/e/csm_priska-brosi-klu-profile-picture_f8d67b287f.png
200 OK 39 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/4/e/csm_priska-brosi-klu-profile-picture_f8d67b287f.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 175 x 175, 8-bit/color RGB, non-interlaced\012- data
Hash 0b82ea96b6fcd81096ccc6c3ecfd43b4
8b6f3063b8750a6d5ca8db58b528902b63c5da6c
3384476496a0c4e028cd9c395300b477b6b71820208bf51d3e99eb04e3100947
GET /fileadmin/_processed_/4/e/csm_priska-brosi-klu-profile-picture_f8d67b287f.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 02 Feb 2022 17:16:33 GMT
accept-ranges: bytes
content-length: 39325
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-19.png
200 OK 28 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-19.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash 9829efe09adc370d45e774a3d821be5d
e6eb74d2ff0657401b470deb5d2f687cd53755b4
260926f4cd41f98d2054e2222a5f31e730dc65ba24c36db03392959e6af0e2cf
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-19.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 27856
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-16.png
200 OK 12 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-16.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash f9aba0993ac6e951afe0810145593d8d
0c57cd6df03a902f5fc88e335cca904cae62208c
5edd681b0f352c378f2e6cba65e9d64e911307a0da01f3bd98dcc9731bc1d4d8
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-16.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 11476
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/typo3temp/assets/compressed/merged-eea640ce354a77ff52a81b698a2e1c68-min.js.1655816976.gzip
200 OK 95 kB URL HTTP/2 www.the-klu.org/typo3temp/assets/compressed/merged-eea640ce354a77ff52a81b698a2e1c68-min.js.1655816976.gzip
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type ASCII text, with very long lines (778)
Hash 57955c3c3f5774bd53d8a5d21a22c199
a2397854517a075e4d878a8201da3181f361a086
2a27946a93d97501b86116fcaf7d9648a25185ed06b7c9fdaac66748c36e2a60
GET /typo3temp/assets/compressed/merged-eea640ce354a77ff52a81b698a2e1c68-min.js.1655816976.gzip HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 21 Jun 2022 13:09:36 GMT
accept-ranges: bytes
content-length: 94781
cache-control: max-age=31536000
expires: Wed, 31 Jan 2024 11:33:37 GMT
x-ua-compatible: IE=edge
x-content-type-options: nosniff
content-type: text/javascript; charset=utf-8
content-encoding: gzip
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-20.png
200 OK 61 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-20.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 300 x 200, 8-bit/color RGBA, non-interlaced\012- data
Hash 629211408d7677023a2fe6946f185f30
d6ab8f2bcf7033d6e2bd7278788c3edcd6d5eb10
99e8a45d4945162932c06f5bd8f813bc5fd872585d1f3c08a031911d877c4dcc
GET /fileadmin/the-klu.org/Template/Public/images/partnerships/partnership-20.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 01 Mar 2022 08:16:43 GMT
accept-ranges: bytes
content-length: 60903
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/typo3temp/assets/compressed/merged-3a8f90f25afda18d5f0ba719659f779c-min.js.1650885073.gzip
200 OK 231 kB URL HTTP/2 www.the-klu.org/typo3temp/assets/compressed/merged-3a8f90f25afda18d5f0ba719659f779c-min.js.1650885073.gzip
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type ASCII text, with very long lines (1667)
Size 231 kB (231311 bytes)
Hash 1ceb86336342234c3947c2bbdaf6a135
556cf240d5038e9584ed2b8e43465a676dd989aa
84a2907d8de36d01bb5e64eed22696b0539f10ed30cb0ba5a6f465ee998d1db2
GET /typo3temp/assets/compressed/merged-3a8f90f25afda18d5f0ba719659f779c-min.js.1650885073.gzip HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Mon, 25 Apr 2022 11:11:13 GMT
accept-ranges: bytes
content-length: 231311
cache-control: max-age=31536000
expires: Wed, 31 Jan 2024 11:33:37 GMT
x-ua-compatible: IE=edge
x-content-type-options: nosniff
content-type: text/javascript; charset=utf-8
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a5ff07b9b81cdf319f4a57d8d6dbbd6d
736ae15d0ed2068580d35a7cff8b33c0ec87af52
24406eda914ef8f78e1f60d6b54237ea6311f2fdf54b2b63647d84b397b41de0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_3_0.woff2
200 OK 26 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_3_0.woff2
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type Web Open Font Format (Version 2), TrueType, length 26443, version 2.0\012- data
Hash c1eddcf5e2f7fdfbade0af2b7bf7f6e8
aa0f52c4e3b5f8c548995da35684f3b92ca400cb
42a224fd3c3460c2ba73e4f31171e2e461a260800c3bb436fdd00d3f1b67e363
GET /fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_3_0.woff2 HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.the-klu.org/fileadmin/the-klu.org/Template/Public/css/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 26443
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/font-woff2
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_0_0.woff2
200 OK 24 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_0_0.woff2
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type Web Open Font Format (Version 2), TrueType, length 23973, version 2.0\012- data
Hash 48055389ba5ccb732b4d206747245fb5
fa7e56be3892a8a24180a522b722b801a6a4518b
fce380e28d396e089022d25e599400a3a34b2cefb4a47458e5bed28d6576b914
GET /fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_0_0.woff2 HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.the-klu.org/fileadmin/the-klu.org/Template/Public/css/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 23973
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/font-woff2
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_2_0.woff2
200 OK 27 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_2_0.woff2
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type Web Open Font Format (Version 2), TrueType, length 26703, version 2.0\012- data
Hash 2dcb5d40a5d8c70bd38169ab4249ecba
e5a3be86fee36063e62680c18a81ca657f6f2439
3da3d57c11276f1eaee421645e93bd0f0cd8833e772753bfe578ae7ff0059b44
GET /fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_2_0.woff2 HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.the-klu.org/fileadmin/the-klu.org/Template/Public/css/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 26703
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/font-woff2
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/loader-bars.svg
200 OK 334 B URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/loader-bars.svg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash c9c5d29e8c0cf5a1dd4ac9b9120f8756
452e1bce971a4e0f4ffac1186f038f7f9ea0ff81
df4d392a008158a410abeca03c72f873d84a22e85d3aa2fd6d1a4da6784cdd64
GET /fileadmin/the-klu.org/Template/Public/images/loader-bars.svg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/typo3temp/assets/compressed/merged-7cf6f73525f73720aecc4a76b4857a2c-min.css.1672760365.gzip
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 334
content-type: image/svg+xml
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/BaskervilleURWMed/36CCD3_0_0.woff2
200 OK 42 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/BaskervilleURWMed/36CCD3_0_0.woff2
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type Web Open Font Format (Version 2), TrueType, length 41677, version 1.6553\012- data
Hash 23e1bf5a5cb1054e60e78dbe1e1203c9
46f4c9700a84189bd3d14e659b40e33b757166f7
cae04418c9588d827d64dc96d9dd375e74021d1149254da4f3857c6e2db98d86
GET /fileadmin/the-klu.org/Template/Public/fonts/BaskervilleURWMed/36CCD3_0_0.woff2 HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.the-klu.org/fileadmin/the-klu.org/Template/Public/css/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 41677
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/font-woff2
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/_processed_/f/4/csm_header_big_covid-hand-wash_72370bed20.jpg
200 OK 92 kB URL HTTP/2 www.the-klu.org/fileadmin/_processed_/f/4/csm_header_big_covid-hand-wash_72370bed20.jpg
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x450, components 3\012- data
Hash 6f5ee1deb0e53e9a04877ad710b1132e
3e087a8bdeb58a30f966bc62bb80093bb52d1aff
d365f92d45dc04c109c4373d46dad491522c974f2e967caa01f25325d37115ee
GET /fileadmin/_processed_/f/4/csm_header_big_covid-hand-wash_72370bed20.jpg HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Wed, 02 Feb 2022 17:18:16 GMT
accept-ranges: bytes
content-length: 91741
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/jpeg
X-Firefox-Spdy: h2
www.paypal.com/tagmanager/pptm.js?id=www.the-klu.org&t=xo&v=5.0.350&source=payments_sdk&client_id=ASq3c7S00Pkitbv_1uRCIUhTGT-qhiqd7rNbKfemhkC_ZSvwbOpS0lqQsA6B_R98rsTi-wl_QLUNFd-X&vault=false
200 OK 4.7 kB URL HTTP/2 www.paypal.com/tagmanager/pptm.js?id=www.the-klu.org&t=xo&v=5.0.350&source=payments_sdk&client_id=ASq3c7S00Pkitbv_1uRCIUhTGT-qhiqd7rNbKfemhkC_ZSvwbOpS0lqQsA6B_R98rsTi-wl_QLUNFd-X&vault=false
IP
File type ASCII text, with very long lines (13568)
Hash 23d29b6ac70febe8a05e37134802c267
576cd3bc82febf00e62c4a479f33c60b5b010470
0ca8459c04510973be6768e48333b91763695a2aba45f2ba709af836b51b0546
GET /tagmanager/pptm.js?id=www.the-klu.org&t=xo&v=5.0.350&source=payments_sdk&client_id=ASq3c7S00Pkitbv_1uRCIUhTGT-qhiqd7rNbKfemhkC_ZSvwbOpS0lqQsA6B_R98rsTi-wl_QLUNFd-X&vault=false HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-p/X8T0AWR8FILLWmRatOY4fQG6F1t/L15/+fyhU1GUVyHJpg' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
content-type: application/x-javascript; charset=utf-8
etag: W/"352b-T4Tx7T33OJRmcVvFE6Z9CZ1EMoU"
paypal-debug-id: f7067258b123c
traceparent: 00-0000000000000000000f7067258b123c-12a65daa4fcc9d69-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 31 Jan 2023 11:33:37 GMT
age: 66454
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220035-HHN, cache-bma1666-BMA
x-cache: HIT, HIT
x-cache-hits: 20, 1
x-timer: S1675164818.701104,VS0,VE2
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f7067258b123c-d4bc6eae1480b896-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4739
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_1_0.woff2
200 OK 24 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_1_0.woff2
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type Web Open Font Format (Version 2), TrueType, length 23721, version 2.0\012- data
Hash a11b2b1758a5faeec7ca9d03953cda96
3be4dc16cba357fd2a7a9f73e95dc0ec4f8fd7d5
6e95a26087030e65b03db0a94a17cbf4d46311de9e308dc3018a987758b5c8e5
GET /fileadmin/the-klu.org/Template/Public/fonts/lucida-sans/305845_1_0.woff2 HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.the-klu.org/fileadmin/the-klu.org/Template/Public/css/fonts.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 23721
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
access-control-allow-origin: *
content-type: application/font-woff2
X-Firefox-Spdy: h2
malsup.github.io/jquery.form.js?_=1675164834180
200 OK 12 kB URL HTTP/2 malsup.github.io/jquery.form.js?_=1675164834180
IP
Hash 66e988165ab37a3b60f0928f40bd67da
8eaadb4a1f891ab5c6249c474340ca8024abc300
ba3122f330907b024e53d381793013aae1a98fe82bf758610450eae958c52995
GET /jquery.form.js?_=1675164834180 HTTP/1.1
Host: malsup.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Sun, 03 May 2015 16:16:14 GMT
access-control-allow-origin: *
etag: W/"554649ce-ab74"
expires: Mon, 30 Jan 2023 23:33:24 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: HIT
x-github-request-id: 7894:3BDD:1A893E:1B8BBE:63D8551C
accept-ranges: bytes
date: Tue, 31 Jan 2023 11:33:37 GMT
via: 1.1 varnish
age: 141
x-served-by: cache-bma1654-BMA
x-cache: HIT
x-cache-hits: 7
x-timer: S1675164818.716560,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 961bc9c1a14f8cbdb2a4879ebcee77192160085d
content-length: 12365
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a5ff07b9b81cdf319f4a57d8d6dbbd6d
736ae15d0ed2068580d35a7cff8b33c0ec87af52
24406eda914ef8f78e1f60d6b54237ea6311f2fdf54b2b63647d84b397b41de0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.the-klu.org/typo3conf/ext/klu_cce/Resources/Public/currency/exchange.json
200 OK 1.6 kB URL HTTP/2 www.the-klu.org/typo3conf/ext/klu_cce/Resources/Public/currency/exchange.json
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type JSON data\012- , ASCII text, with very long lines (2813), with no line terminators
Hash 51f72adfe43bec2e5f5f3eca55cd81be
e9108bcec119116bed854c42a844d1a30c435c10
4b0057cb15d723c7fe6332aaae0c4ae32be600bb3739a95ae20a97fd6a65d7f9
GET /typo3conf/ext/klu_cce/Resources/Public/currency/exchange.json HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Tue, 31 Jan 2023 01:02:45 GMT
accept-ranges: bytes
cache-control: max-age=0
expires: Tue, 31 Jan 2023 11:33:37 GMT
vary: Accept-Encoding
content-encoding: gzip
x-ua-compatible: IE=edge
x-content-type-options: nosniff
content-length: 1580
content-type: application/json; charset=utf-8
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/solid-pin-black.png
200 OK 429 B URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/solid-pin-black.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced\012- data
Hash e369c5d041f0c50fb6356437772c0404
56deea037085098103555b23f4144f4185343440
8b5cc9958dfa1f3e013ced2f9f1dd02c71637a7ce321082dfb66251c436f7067
GET /fileadmin/the-klu.org/Template/Public/images/solid-pin-black.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:37 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 429
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:37 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b4d59d4ed4ff99e63e910f158f97e0e
156956ab5307e289b852bfcbf95fd0978e6aa7bf
ed6c982ca5f3430520321f4243ec5312f75c19360e8183c4a6aae699cf22ab2b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED6C982CA5F3430520321F4243EC5312F75C19360E8183C4A6AAE699CF22AB2B"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17579
Expires: Tue, 31 Jan 2023 16:26:37 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b4d59d4ed4ff99e63e910f158f97e0e
156956ab5307e289b852bfcbf95fd0978e6aa7bf
ed6c982ca5f3430520321f4243ec5312f75c19360e8183c4a6aae699cf22ab2b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED6C982CA5F3430520321F4243EC5312F75C19360E8183C4A6AAE699CF22AB2B"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13186
Expires: Tue, 31 Jan 2023 15:13:24 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
www.paypalobjects.com/muse/muse.js
200 OK 16 kB URL HTTP/2 www.paypalobjects.com/muse/muse.js
IP
File type ASCII text, with very long lines (55891)
Hash 6aebbe482c72000aea20895991f70478
eff1d3370786f9ee4ea539776bc43ab9bece89ba
2acb950bc7678b9e6c265194821fac386bf555db582ee8c0e2d9e68ff3eaa862
GET /muse/muse.js HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: application/javascript
date: Tue, 31 Jan 2023 11:33:38 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "6271663d-da91"
expires: Tue, 31 Jan 2023 12:33:38 GMT
last-modified: Tue, 03 May 2022 17:28:29 GMT
paypal-debug-id: 47b67dad2a028
server: ECAcc (ska/F6AB)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-000000000000000000047b67dad2a028-66924006fd7cd7ac-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 16464
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b4d59d4ed4ff99e63e910f158f97e0e
156956ab5307e289b852bfcbf95fd0978e6aa7bf
ed6c982ca5f3430520321f4243ec5312f75c19360e8183c4a6aae699cf22ab2b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED6C982CA5F3430520321F4243EC5312F75C19360E8183C4A6AAE699CF22AB2B"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12141
Expires: Tue, 31 Jan 2023 14:55:59 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
c.tile.openstreetmap.de/3/2/3.png
200 OK 7.0 kB URL HTTP/2 c.tile.openstreetmap.de/3/2/3.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 094f95a7e8beb05fe57d9eb1469d34cb
93b1b0258ec6ba0c4be0b78ba4e01f3c3f7a4323
823c5e584470f8e2d418752c64bb5bdc31bdacfa2cbfc6765bfa2b24108f4daf
GET /3/2/3.png HTTP/1.1
Host: c.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "094f95a7e8beb05fe57d9eb1469d34cb"
content-length: 6974
cache-control: max-age=269758
expires: Fri, 03 Feb 2023 14:29:36 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1b4d59d4ed4ff99e63e910f158f97e0e
156956ab5307e289b852bfcbf95fd0978e6aa7bf
ed6c982ca5f3430520321f4243ec5312f75c19360e8183c4a6aae699cf22ab2b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ED6C982CA5F3430520321F4243EC5312F75C19360E8183C4A6AAE699CF22AB2B"
Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18069
Expires: Tue, 31 Jan 2023 16:34:47 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash da45bcf2a54b0414e4593e75931dc471
80d174eedc2831fe3a084e051f60fbd4572e8d59
13f2d75ced9c1edffbe81ade9b2d5358fd1e99979eefd6fc15cd8e90a4746198
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "13F2D75CED9C1EDFFBE81ADE9B2D5358FD1E99979EEFD6FC15CD8E90A4746198"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11842
Expires: Tue, 31 Jan 2023 14:51:00 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
a.tile.openstreetmap.de/3/2/1.png
200 OK 9.0 kB URL HTTP/2 a.tile.openstreetmap.de/3/2/1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 1030a5eef98fafe831bf1300656f66c9
62b2f1a09e343481f17f838d2493862a3ded5102
bc780154f825e3ae1fd11b9dfdc95da7d22300e75f1711a235cc205e79e15d8b
GET /3/2/1.png HTTP/1.1
Host: a.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "1030a5eef98fafe831bf1300656f66c9"
content-length: 8986
cache-control: max-age=267569
expires: Fri, 03 Feb 2023 13:53:07 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
www.paypalobjects.com/muse/analytics/index.html
200 OK 17 kB URL HTTP/2 www.paypalobjects.com/muse/analytics/index.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (55410)
Hash 56fc10c2e8100a7e4418dc987c23d7a5
5c11880437f36368f82da60522bfcb0d57b395cf
326df6156907ef357f13bf48a5a3798dd4e692345d04fb4edad8370058d1198a
GET /muse/analytics/index.html HTTP/1.1
Host: www.paypalobjects.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
cache-control: s-maxage=31536000, public,max-age=3600
content-type: text/html
date: Tue, 31 Jan 2023 11:33:38 GMT
dc: ccg11-origin-www-1.paypal.com
etag: "6271663d-d994"
expires: Tue, 31 Jan 2023 12:33:38 GMT
last-modified: Tue, 03 May 2022 17:28:29 GMT
paypal-debug-id: 39051f20ee10e
server: ECAcc (ska/F764)
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: https://www.paypal.com,https://www.sandbox.paypal.com
traceparent: 00-000000000000000000039051f20ee10e-161a1ad7ae2acd1b-01
vary: Accept-Encoding
x-cache: HIT
x-content-type-options: nosniff
content-length: 16791
X-Firefox-Spdy: h2
a.tile.openstreetmap.de/3/5/1.png
200 OK 7.5 kB URL HTTP/2 a.tile.openstreetmap.de/3/5/1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 35365c8a0055c021831c1bae5ceb8292
03062170ff76cb0874583dea608c5e4f687d5fa6
89a657e03e53a29ad3a09d48346e1ebef7d9e8144fa7652bf5c025376b8e4470
GET /3/5/1.png HTTP/1.1
Host: a.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "35365c8a0055c021831c1bae5ceb8292"
content-length: 7510
cache-control: max-age=268507
expires: Fri, 03 Feb 2023 14:08:45 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
c.tile.openstreetmap.de/3/6/2.png
200 OK 7.6 kB URL HTTP/2 c.tile.openstreetmap.de/3/6/2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 2f14c5eba19befbdd23e3850a368eea3
e8ec799da7cd5bf501703f3a4fb982eb5583802a
ec34ae9affdd81b393e7e46a05d4d8f2cc0c4f4e90c6a7b710805f352f0325da
GET /3/6/2.png HTTP/1.1
Host: c.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "2f14c5eba19befbdd23e3850a368eea3"
content-length: 7617
cache-control: max-age=266566
expires: Fri, 03 Feb 2023 13:36:24 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
c.tile.openstreetmap.de/3/5/3.png
200 OK 12 kB URL HTTP/2 c.tile.openstreetmap.de/3/5/3.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash f8946bba18727aa1e1183692d143c645
a349e3ca440c2d6b301f802acfef3df7e4de479f
370ed35684b74dff0444e62c77a73a1e6b5192570191c95e766a2a19cf5e18d6
GET /3/5/3.png HTTP/1.1
Host: c.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "f8946bba18727aa1e1183692d143c645"
content-length: 12015
cache-control: max-age=266531
expires: Fri, 03 Feb 2023 13:35:49 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 16:40:43 GMT
expires: Fri, 26 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 413575
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
b.tile.openstreetmap.de/3/5/2.png
200 OK 12 kB URL HTTP/2 b.tile.openstreetmap.de/3/5/2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 54cee96040c8c9d80869814d63c169d4
936cb9664e47b828958851a574e0aebc24ce73c9
721502a0a678b8827665b2cda65f6abaa54c6bd4d705a8befa0e9ce1ba4c2b99
GET /3/5/2.png HTTP/1.1
Host: b.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "54cee96040c8c9d80869814d63c169d4"
content-length: 12178
cache-control: max-age=260131
expires: Fri, 03 Feb 2023 11:49:09 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
b.tile.openstreetmap.de/3/2/2.png
200 OK 15 kB URL HTTP/2 b.tile.openstreetmap.de/3/2/2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 30195859532724e4e75d1dda68637053
65ff90e33bab3085088c3a2a60c35634ec0b84e7
9b39d3b3ff8fec0d961899ac1f4031f3dd973a670146b32b38634463f11f3fba
GET /3/2/2.png HTTP/1.1
Host: b.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "30195859532724e4e75d1dda68637053"
content-length: 14845
cache-control: max-age=268629
expires: Fri, 03 Feb 2023 14:10:47 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 21:48:03 GMT
expires: Fri, 26 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 395135
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
c.tile.openstreetmap.de/3/4/1.png
200 OK 7.0 kB URL HTTP/2 c.tile.openstreetmap.de/3/4/1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 3275b8b87e7de4af4a5e8dfe2fdc60e3
72bca5307a755a81fa10e8f8c4298312e52d1ba7
e3adc62458726d26d7b261099b5bf15efc2a6e17cb455d40425d6474eaa133ce
GET /3/4/1.png HTTP/1.1
Host: c.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "3275b8b87e7de4af4a5e8dfe2fdc60e3"
content-length: 6976
cache-control: max-age=268787
expires: Fri, 03 Feb 2023 14:13:25 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
a.tile.openstreetmap.de/3/4/2.png
200 OK 23 kB URL HTTP/2 a.tile.openstreetmap.de/3/4/2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash c5ed773a3687252e6bc06cd1476f56cc
3aeb5f00af9c04f2d50b45275e556932fdea3bc0
9e1e61c3bcb866f608b7eb2a70fc67e5ba9c471b6f86db78eb287df403f642e4
GET /3/4/2.png HTTP/1.1
Host: a.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "c5ed773a3687252e6bc06cd1476f56cc"
content-length: 22864
cache-control: max-age=269287
expires: Fri, 03 Feb 2023 14:21:45 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
c.tile.openstreetmap.de/3/1/1.png
200 OK 11 kB URL HTTP/2 c.tile.openstreetmap.de/3/1/1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash ea5693e03634b819b96e2400d51ba8e0
942186cfb964d7d43dc71a4ae0e61975374521ae
d42e437196af12d75aeb3b35e53122d14f79948dbb63673fe6bb2c74977f6ac5
GET /3/1/1.png HTTP/1.1
Host: c.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "ea5693e03634b819b96e2400d51ba8e0"
content-length: 10598
cache-control: max-age=259917
expires: Fri, 03 Feb 2023 11:45:35 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
c.tile.openstreetmap.de/3/3/2.png
200 OK 5.9 kB URL HTTP/2 c.tile.openstreetmap.de/3/3/2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 895cc2465bcfe1230ef7c705a9eee69e
18cbacdfdbbaefafc6d75fc520e88105cf695fd2
8b3499a7f095697cc7767b8bf77204ab22e459be1b4c16bcb7a75a0190d0fcb2
GET /3/3/2.png HTTP/1.1
Host: c.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "895cc2465bcfe1230ef7c705a9eee69e"
content-length: 5861
cache-control: max-age=261490
expires: Fri, 03 Feb 2023 12:11:48 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
b.tile.openstreetmap.de/3/4/3.png
200 OK 18 kB URL HTTP/2 b.tile.openstreetmap.de/3/4/3.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 77d16568c8e74ddc1ea2ca097991f66f
d1213baa2616620bc60c85b05d094a04a1872ccc
19eb6bf4250c8c74fd8e61032bbb1f4a20fae127c4065f5a0b389b1a6161a4dc
GET /3/4/3.png HTTP/1.1
Host: b.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "77d16568c8e74ddc1ea2ca097991f66f"
content-length: 17562
cache-control: max-age=265685
expires: Fri, 03 Feb 2023 13:21:43 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
b.tile.openstreetmap.de/3/3/1.png
200 OK 4.1 kB URL HTTP/2 b.tile.openstreetmap.de/3/3/1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 2eedd46f36d6d8cad51187737324752d
23910439f3099b1df5f996a150cdc486a9c8dfac
b964fdc1a8d2dddb5e7a6a9f3d0269417c9cc1b0ec717b43386676b86382a0f7
GET /3/3/1.png HTTP/1.1
Host: b.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "2eedd46f36d6d8cad51187737324752d"
content-length: 4136
cache-control: max-age=260013
expires: Fri, 03 Feb 2023 11:47:11 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
b.tile.openstreetmap.de/3/1/3.png
200 OK 6.3 kB URL HTTP/2 b.tile.openstreetmap.de/3/1/3.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 4a27a7d6308a5562729fa49ae6cc7139
9e0d4e118b853c38dea68eb7c97316e8a6521ed2
25519f09cc1f40cc4affaed36430b2fcc5de598c417c8ebce8e6c7a564def9eb
GET /3/1/3.png HTTP/1.1
Host: b.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "4a27a7d6308a5562729fa49ae6cc7139"
content-length: 6263
cache-control: max-age=262562
expires: Fri, 03 Feb 2023 12:29:40 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
b.tile.openstreetmap.de/3/6/1.png
200 OK 9.0 kB URL HTTP/2 b.tile.openstreetmap.de/3/6/1.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 81ba647cbb8c03a0bb0708f907a56b3c
bc1f5e51d5cb6d2b0f78c7e44a333df70acf6e43
75c38d46b84ad9e29eb677f91495e2bb8809b52e51e28a06905eeda29b719bd2
GET /3/6/1.png HTTP/1.1
Host: b.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "81ba647cbb8c03a0bb0708f907a56b3c"
content-length: 8967
cache-control: max-age=268795
expires: Fri, 03 Feb 2023 14:13:33 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
a.tile.openstreetmap.de/3/1/2.png
200 OK 15 kB URL HTTP/2 a.tile.openstreetmap.de/3/1/2.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash afade92307968586d5df30667d3d96c7
f7e0eafc18914e66de6b2dfb2961280ededfe31c
15be4e1b13a68bb5bb39b31eb2d499a289b742299390c768af96681389208bab
GET /3/1/2.png HTTP/1.1
Host: a.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "afade92307968586d5df30667d3d96c7"
content-length: 15071
cache-control: max-age=268962
expires: Fri, 03 Feb 2023 14:16:20 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
a.tile.openstreetmap.de/3/3/3.png
200 OK 7.4 kB URL HTTP/2 a.tile.openstreetmap.de/3/3/3.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash dbfb62d214315ffb6c15685484df2be8
1d4ccebe514da8f8503f83f494811823d99f6974
9e2c0e54db48f1d7bbee521165d378247577696fe222008604c87e4230a5ac97
GET /3/3/3.png HTTP/1.1
Host: a.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "dbfb62d214315ffb6c15685484df2be8"
content-length: 7408
cache-control: max-age=269716
expires: Fri, 03 Feb 2023 14:28:54 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
a.tile.openstreetmap.de/3/6/3.png
200 OK 14 kB URL HTTP/2 a.tile.openstreetmap.de/3/6/3.png
IP
ASN #24940 Hetzner Online GmbH
File type PNG image data, 256 x 256, 8-bit colormap, non-interlaced\012- data
Hash 1a7d7dd6ac94d556ef70e561df8d1e43
f88410c98a9d3b2121224d3d3bf6bcd7ca13a825
fab0dc59f33f2b63b20cfffa724061a508f37e9e91ebc13bc6f3ae56e9f62607
GET /3/6/3.png HTTP/1.1
Host: a.tile.openstreetmap.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache/2.4.38 (Debian)
etag: "1a7d7dd6ac94d556ef70e561df8d1e43"
content-length: 13739
cache-control: max-age=269223
expires: Fri, 03 Feb 2023 14:20:41 GMT
access-control-allow-origin: *
content-type: image/png
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 976abea0d5a7a3350d89d4b8fc4ac982
4febaf88553416476420c74e11a62d179c9020b4
0d1d157f1658552c6874ad254f98e4d6bfc9f3988fb09d39ea35e3a30e389cb2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0D1D157F1658552C6874AD254F98E4D6BFC9F3988FB09D39EA35E3A30E389CB2"
Last-Modified: Mon, 30 Jan 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6409
Expires: Tue, 31 Jan 2023 13:20:27 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bf42551b58b16ec176aded35018eab1d
cb5a90ca72c7e7b2e90971dae6025f0b2784642a
216bec79a1d4cc014bbb865107a389c4e296a9769825349ecf5cde3bcee6eaf6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "216BEC79A1D4CC014BBB865107A389C4E296A9769825349ECF5CDE3BCEE6EAF6"
Last-Modified: Sun, 29 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7775
Expires: Tue, 31 Jan 2023 13:43:13 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
analytics.klu.org/matomo.js
200 OK 66 kB URL HTTP/2 analytics.klu.org/matomo.js
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type ASCII text, with very long lines (1601)
Hash dc6fceade2e7711e7cebaafab09a99cc
1ecc96a881be62e9476e3bc72f457300962e3d46
a98bcbffd5d9ea7bf01dfdc4d0b7f0c75bfcefffa62a51e237082f7d05d18987
GET /matomo.js HTTP/1.1
Host: analytics.klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache
last-modified: Fri, 09 Dec 2022 08:48:16 GMT
etag: "10300-5ef6136f3dec5"
accept-ranges: bytes
content-length: 66304
content-type: application/javascript
X-Firefox-Spdy: h2
analytics.klu.org/js/container_b94WnXaU.js
200 OK 107 kB URL HTTP/2 analytics.klu.org/js/container_b94WnXaU.js
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type ASCII text, with very long lines (1601)
Size 107 kB (106701 bytes)
Hash 947b7c598e8cae722b3864fd4f91ec59
9e35a6a32daca275b175ff98b5dd718438de0c0a
28c26880f7ebed217e9d952004b4f54620e7f9d5a8c4fcd719647343f62bd871
GET /js/container_b94WnXaU.js HTTP/1.1
Host: analytics.klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache
last-modified: Fri, 09 Dec 2022 08:48:24 GMT
etag: "1a0cd-5ef61377283a0"
accept-ranges: bytes
content-length: 106701
content-type: application/javascript
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ATDAGUEGQ58V5A-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ATDAGUEGQ58V5A-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=9d348717-0f26-4d30-a6dd-40bed7fbf2da&fltp=analytics&mrid=TDAGUEGQ58V5A&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Corona%C2%A0%C2%B7%20KLU&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1675164834505&g=0&completeurl=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F
200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ATDAGUEGQ58V5A-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ATDAGUEGQ58V5A-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=9d348717-0f26-4d30-a6dd-40bed7fbf2da&fltp=analytics&mrid=TDAGUEGQ58V5A&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Corona%C2%A0%C2%B7%20KLU&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1675164834505&g=0&completeurl=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Athird-party%3Aanalytics-xo%3A%3ATDAGUEGQ58V5A-1&page=muse%3Athird-party%3Aanalytics-xo%3A%3ATDAGUEGQ58V5A-1%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=9d348717-0f26-4d30-a6dd-40bed7fbf2da&fltp=analytics&mrid=TDAGUEGQ58V5A&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&flag_consume=yes&pt=Corona%C2%A0%C2%B7%20KLU&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1675164834505&g=0&completeurl=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Tue, 31 Jan 2023 11:33:38 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 44defe81abc6e
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1769859218%26vteXpYrS%3D1675166618%26vr%3D079a9bc71860a56c3121e5f9ffffffff%26vt%3D079a9bc71860a56c3121e5f9fffffffe; Expires=Sat, 31 Jan 2026 11:33:38 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3D079a9bc71860a56c3121e5f9ffffffff%26vt%3D079a9bc71860a56c3121e5f9fffffffe; Expires=Sat, 31 Jan 2026 11:33:38 GMT; Domain=.paypal.com; Path=/; Secure
traceparent: 00-000000000000000000044defe81abc6e-08a9b1b58a1a59dd-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 31 Jan 2023 11:33:38 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220049-HHN, cache-bma1656-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675164818.273835,VS0,VE186
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
content-length: 42
X-Firefox-Spdy: h2
t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1&page=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=9d348717-0f26-4d30-a6dd-40bed7fbf2da&es=visitorInfoFlowStarted&mrid=TDAGUEGQ58V5A&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Corona%C2%A0%C2%B7%20KLU&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1675164834881&g=0&completeurl=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F
200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1&page=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=9d348717-0f26-4d30-a6dd-40bed7fbf2da&es=visitorInfoFlowStarted&mrid=TDAGUEGQ58V5A&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Corona%C2%A0%C2%B7%20KLU&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1675164834881&g=0&completeurl=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1&page=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1%3A%3AvisitorInfoFlowStarted%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=9d348717-0f26-4d30-a6dd-40bed7fbf2da&es=visitorInfoFlowStarted&mrid=TDAGUEGQ58V5A&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Corona%C2%A0%C2%B7%20KLU&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1675164834881&g=0&completeurl=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Tue, 31 Jan 2023 11:33:38 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 6e76d46fd6ef6
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1769859218%26vteXpYrS%3D1675166618%26vr%3D079a9c1d1860a5b16833d7d5ffffffff%26vt%3D079a9c1d1860a5b16833d7d5fffffffe; Expires=Sat, 31 Jan 2026 11:33:38 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3D079a9c1d1860a5b16833d7d5ffffffff%26vt%3D079a9c1d1860a5b16833d7d5fffffffe; Expires=Sat, 31 Jan 2026 11:33:38 GMT; Domain=.paypal.com; Path=/; Secure
traceparent: 00-00000000000000000006e76d46fd6ef6-d8a007230799ab73-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 31 Jan 2023 11:33:38 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220099-HHN, cache-bma1656-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675164818.374442,VS0,VE165
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
content-length: 42
X-Firefox-Spdy: h2
www.paypal.com/targeting/graphql
204 No Content 0 B URL HTTP/2 www.paypal.com/targeting/graphql
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /targeting/graphql HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.paypalobjects.com/
Origin: https://www.paypalobjects.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://www.paypalobjects.com
access-control-expose-headers: Paypal-Debug-Id
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f600358df5a5e
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 31 Jan 2023 20:19:34 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 31 Jan 2024 11:33:38 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NTE2NDgxODQ4OCIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
nsid=s%3A8GXTtoqKrGaxAduovH3tg1IlBRjDqBLi.DFRoamU%2BW7R9k%2FcueZ4EAMtVaij0fHDZpv231TZS%2Fr8; Path=/; HttpOnly; Secure
l7_az=dcg13.slc; Path=/; Domain=paypal.com; Expires=Tue, 31 Jan 2023 12:03:38 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769859218%26vteXpYrS%3D1675166618%26vr%3D079a9c261860ad009835c658fd9e69a5%26vt%3D079a9c261860ad009835c658fd9e69a4%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 30 Jan 2026 11:33:38 GMT; HttpOnly; Secure
ts_c=vr%3D079a9c261860ad009835c658fd9e69a5%26vt%3D079a9c261860ad009835c658fd9e69a4; Path=/; Domain=paypal.com; Expires=Fri, 30 Jan 2026 11:33:38 GMT; Secure
traceparent: 00-0000000000000000000f600358df5a5e-fa54998aedd58611-01
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 31 Jan 2023 11:33:38 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220039-HHN, cache-bma1666-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675164818.389047,VS0,VE181
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/apple-touch-icon.png
200 OK 4.4 kB URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/apple-touch-icon.png
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type PNG image data, 304 x 304, 8-bit colormap, non-interlaced\012- data
Hash 84329a953af34c8146b774e42c3b0655
13607ba94d433f18f3b84a6e377508421ee50efa
fde52579981f0b090740bbde5fb429d0abcf8a8b8530c95fcad28d7e4625ebed
GET /fileadmin/the-klu.org/Template/Public/images/apple-touch-icon.png HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
content-length: 4411
cache-control: max-age=2592000
expires: Thu, 02 Mar 2023 11:33:38 GMT
x-content-type-options: nosniff
content-type: image/png
X-Firefox-Spdy: h2
www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/favicon.ico
200 OK 286 B URL HTTP/2 www.the-klu.org/fileadmin/the-klu.org/Template/Public/images/favicon.ico
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
File type MS Windows icon resource - 1 icon, 64x64, 16 colors, 4 bits/pixel\012- data
Hash c6b7869495cfc293b4f70a5ae8f3270a
c5c54469a3cc947db9a7be6a6ee08252e7569634
d7d58bef5e53472339e2efdbf166967e1458c29857f9d4cb4097414a37631be3
GET /fileadmin/the-klu.org/Template/Public/images/favicon.ico HTTP/1.1
Host: www.the-klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/landingpages/corona/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache
x-frame-options: SAMEORIGIN
last-modified: Thu, 08 Apr 2021 10:54:19 GMT
accept-ranges: bytes
cache-control: max-age=604800
expires: Tue, 07 Feb 2023 11:33:38 GMT
vary: Accept-Encoding
content-encoding: gzip
x-content-type-options: nosniff
content-length: 286
content-type: image/x-icon
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9959
Expires: Tue, 31 Jan 2023 14:19:37 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9959
Expires: Tue, 31 Jan 2023 14:19:37 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6793
Expires: Tue, 31 Jan 2023 13:26:51 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9959
Expires: Tue, 31 Jan 2023 14:19:37 GMT
Date: Tue, 31 Jan 2023 11:33:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 63486f2a937aa8fd013fc2c2d1b32f2d
e8868de34c2f79348c1edad764259eb70bebd7a6
fa6e5ce374031c0df3b3f2d6de823cf1fe08fdaf9957a0722770867cfdec0ed1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1925abe-5fa6-440b-8e23-d92b1e3bf273.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13639
x-amzn-requestid: 8131c878-620a-4972-ba8f-1456859acae2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fYcJSF0SIAMFe1g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d340a1-18c7280940d508c440c0182c;Sampled=0
x-amzn-remapped-date: Fri, 27 Jan 2023 03:10:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mXlQ5A2PHadECkKglPquN9x68ubYk8s2to-_JjCgEQe7axfJo6K8Jw==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 07:27:20 GMT
age: 14778
etag: "e8868de34c2f79348c1edad764259eb70bebd7a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2c4934be94898028e2ab696561b51462
6cf734e2d29938688913daacfb75506d8e004a94
239adcbb538b7a6d1483c65c7694d4a9f9fa9cadf456ab5681c4b764185e3596
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F003f28f8-6845-4b0d-8d8d-11c9deea4eaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9987
x-amzn-requestid: 67109f87-6073-4991-b540-cdeedc2d7b3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: flYlPF9uIAMFXMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d86e21-60ac2c7b37c72e6e54a5c69d;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 01:25:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: hDjKAMYoVwHdCqS8t08PrWyfQQLiWaosXbi3FOJY8BeV0yAFCGziGw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 01:58:16 GMT
age: 34522
etag: "6cf734e2d29938688913daacfb75506d8e004a94"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a2d26da68a313cc65958fc2692351c2
798c3538f3147ca77d317676ddd1bf040bd0f93b
76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: djoQmYTv7Rlq9tKKkJ5U1J3YeVSIs5yzSts_xRN3bdi27Ra8UfM6OQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:44:45 GMT
age: 49733
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3acb4fe3-f1dd-417b-ac1c-9269bcff18d1.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3acb4fe3-f1dd-417b-ac1c-9269bcff18d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cbc9f50b0a96fb69fa2e948aa3125413
e7f13a6e81263e73ac5777959d63b567f50848d5
2e3411687a31211dbf0aa732f8d93a3c5a4748afb264e695d36782700c8e8b5d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3acb4fe3-f1dd-417b-ac1c-9269bcff18d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12906
x-amzn-requestid: 4d09cdf1-2b4b-4f72-a313-caf6660774d7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsLoHaHIAMF1uQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d22717-7074bd5202e3aced21ac49e3;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:09:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ZkPnGMNVHQUSKvsqXZajTFA6FiOiZvSXHU6QN8zbCrSXKKmSdCWVqQ==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:47:13 GMT
age: 45985
etag: "e7f13a6e81263e73ac5777959d63b567f50848d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
analytics.klu.org/matomo.php?action_name=Corona%C2%A0%C2%B7%20KLU&idsite=1&rec=1&r=155933&h=11&m=33&s=54&url=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F&_id=&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=IHN9Ih&pf_net=259&pf_srv=169&pf_tfr=9&pf_dm1=899&uadata=%7B%7D
204 No Content 0 B URL HTTP/2 analytics.klu.org/matomo.php?action_name=Corona%C2%A0%C2%B7%20KLU&idsite=1&rec=1&r=155933&h=11&m=33&s=54&url=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F&_id=&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=IHN9Ih&pf_net=259&pf_srv=169&pf_tfr=9&pf_dm1=899&uadata=%7B%7D
IP
ASN #15817 Mittwald CM Service GmbH & Co. KG
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /matomo.php?action_name=Corona%C2%A0%C2%B7%20KLU&idsite=1&rec=1&r=155933&h=11&m=33&s=54&url=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F&_id=&_idn=1&send_image=0&_refts=0&cookie=1&res=1280x1024&pv_id=IHN9Ih&pf_net=259&pf_srv=169&pf_tfr=9&pf_dm1=899&uadata=%7B%7D HTTP/1.1
Host: analytics.klu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Content-Length: 0
Origin: https://www.the-klu.org
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
date: Tue, 31 Jan 2023 11:33:38 GMT
server: Apache
access-control-allow-origin: https://www.the-klu.org
access-control-allow-credentials: true
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3366ef4f8733cb9c89a5c88f63a0a441
7da46843b6d885f38a4759a08e6c899906ab7b97
7114397ee5c251cc5cb46f3433c2cc17ff68a08e0872e227671198e9b61eba0a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46e30ba8-4b02-4bad-8cbf-1a128aa4376f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9600
x-amzn-requestid: 48094e1a-d550-4a91-b87c-4a08505f7cce
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsWcFN7IAMF2pg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2275c-5ced593a7e2126c9494563df;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:10:20 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v9Wphg34UGE5kkZ9RKBcphcpPuCn54oVyepzTW5rZ3J9nkL9J501PA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 22:03:23 GMT
age: 48615
etag: "7da46843b6d885f38a4759a08e6c899906ab7b97"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2797bfd35b7ec24888de84be14f7f2ec
8e315ac5856967286eaa8769e081d827fb4ca39e
b99f3bd73eb4395194bc7bb6a1b801750182239e5b70f3207f99e494b60b72ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67cbd807-4e92-4ddb-a8c5-864884d25e99.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11129
x-amzn-requestid: 74f2a4dd-7d5d-4839-90a8-d2e74f6d785d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffDBZGRPoAMFedg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e53b-3de444596550bb41188ada5b;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:17:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9Fga247EZZqiGmdMJ72resdBZR2KLgflGDBPESmuw9cFVs4hSzMzTw==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 31 Jan 2023 03:40:17 GMT
age: 28401
etag: "8e315ac5856967286eaa8769e081d827fb4ca39e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 40bac282ee9730b7a7fde839fcf58736
be00063ec5c760560f34663d0a6a9cad87cfebe4
45b83537d8621d3c4a7c046a9b78f6745977c359db2868d720f19dbb0eb80d3d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.paypal.com/targeting/graphql
200 OK 790 B URL HTTP/2 www.paypal.com/targeting/graphql
IP
File type JSON data\012- , ASCII text, with very long lines (442)
Hash edef7e108b1522181af0e9853015cff0
32d82e415300eace01fe7d0040e28839b2127c18
1a8fb99336d88c0f1a1f32b12756131430ba9a425c002f9dbffc2307559057da
POST /targeting/graphql HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.paypalobjects.com/
Content-Type: application/json
Origin: https://www.paypalobjects.com
Content-Length: 319
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.paypalobjects.com
access-control-expose-headers: Paypal-Debug-Id
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; img-src 'self' https:; script-src 'nonce-BU1JFP3aQs2C9J5e59f9BxYJwi+aT7gy8EN8/3GCirk3zNqV' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' ; style-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' ; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; object-src 'none'; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com;
content-type: application/json; charset=utf-8
etag: W/W/"1bb-4maPUgRXNlu4/rcTrK0cuVNdry8"
paypal-debug-id: f4663297addb5
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 31 Jan 2023 20:19:34 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 31 Jan 2024 11:33:38 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NTE2NDgxODc2NiIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=targetingnodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 03 Feb 2023 11:33:38 GMT; HttpOnly; Secure; SameSite=None
nsid=s%3ARz2NxDlPRCljPKo6oS2Qax1Vmw0ztWV3.%2FiuufiRzLYOvxcYDBQFFgSKP4Xu9vfUFw%2FsFSZU8%2F38; Path=/; HttpOnly; Secure
l7_az=dcg13.slc; Path=/; Domain=paypal.com; Expires=Tue, 31 Jan 2023 12:03:38 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769859218%26vteXpYrS%3D1675166618%26vr%3D079a9cee1860ad04c6911d24fd9a6768%26vt%3D079a9cee1860ad04c6911d24fd9a6767%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 30 Jan 2026 11:33:38 GMT; HttpOnly; Secure
ts_c=vr%3D079a9cee1860ad04c6911d24fd9a6768%26vt%3D079a9cee1860ad04c6911d24fd9a6767; Path=/; Domain=paypal.com; Expires=Fri, 30 Jan 2026 11:33:38 GMT; Secure
traceparent: 00-0000000000000000000f4663297addb5-d76e6667ae4b1044-01
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 31 Jan 2023 11:33:38 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220035-HHN, cache-bma1666-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675164819.583879,VS0,VE266
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube-nocookie.com/
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 31 Jan 2023 11:33:38 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash e30ea05c88b5611836ba648e5da6daa8
8fef4706fe612f1ec38056940c4eb5b0a44fc81d
3da5430bdbbd659e8b8dfbacb7dd3415b0b261bb40785c8789b0090b4ee2ed53
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 31 Jan 2023 11:33:38 GMT
server: ESF
cache-control: private
content-length: 30953
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube-nocookie.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube-nocookie.com/embed/3JJ2xNXTa-A?autohide=1&controls=1&enablejsapi=1&origin=https%3A%2F%2Fwww.the-klu.org
200 OK 55 kB URL HTTP/2 www.youtube-nocookie.com/embed/3JJ2xNXTa-A?autohide=1&controls=1&enablejsapi=1&origin=https%3A%2F%2Fwww.the-klu.org
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (58644)
Hash aaf24aabf15ac58003a27612f0aaf696
643b7286140cf7ed31d8b0a25f7bb6d2755c9247
73b0a13bb02ab0ce3972014bf1a520002501f2f91dd969f9b428b50083a3eded
GET /embed/3JJ2xNXTa-A?autohide=1&controls=1&enablejsapi=1&origin=https%3A%2F%2Fwww.the-klu.org HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 31 Jan 2023 11:33:37 GMT
strict-transport-security: max-age=31536000
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
report-to: {"group":"YOUTUBE_NOCOOKIE_DOMAIN","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/YOUTUBE_NOCOOKIE_DOMAIN"}]}
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="YOUTUBE_NOCOOKIE_DOMAIN"
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: CONSENT=PENDING+509; expires=Thu, 30-Jan-2025 11:33:37 GMT; path=/; domain=.youtube-nocookie.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c3a242e6132fe39e40953523bb8d3175
c9914952910c863f533f0c7bf6451b77b12d10b7
423bd4744c6b389c23fccdfab4dc8731bf553232a6bf14782c946183e8119a04
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/3JJ2xNXTa-A/hqdefault.webp
200 OK 22 kB URL HTTP/2 i.ytimg.com/vi_webp/3JJ2xNXTa-A/hqdefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 480x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c08840f0eaba4c7d3400dd7f58b0caba
a897e445c4faa3628d7da8624367ab4cfaf01880
d8b1b320c80bf222c291567777dae9e253ee10887bcfd30f37d817452db2dfe2
GET /vi_webp/3JJ2xNXTa-A/hqdefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/webp
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 22420
date: Tue, 31 Jan 2023 11:33:39 GMT
expires: Tue, 31 Jan 2023 13:33:39 GMT
cache-control: public, max-age=7200
etag: "1598451598"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c3a242e6132fe39e40953523bb8d3175
c9914952910c863f533f0c7bf6451b77b12d10b7
423bd4744c6b389c23fccdfab4dc8731bf553232a6bf14782c946183e8119a04
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2ac1bcdceabf1fc4e07017906aa8a815
ba00b737325fc50b35af8d851ced0fe13d1cba22
c6c54f5dbbfc40b454b9c67a7972827f500d83b10a1594f7cb56c69158278c08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 750f718797fc50f8465259f62a6da6ba
e9b7abb1a4dff4896c9fb48e7c7b1407885790de
8e3c0c96771c92bcee1d63055e2aa46aa5e0e3125da993844a9297340166873d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/wBNXk7Q6V2dkHawik5TUb6id0fydDqlxfrWFyJdQ6Xw.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/wBNXk7Q6V2dkHawik5TUb6id0fydDqlxfrWFyJdQ6Xw.js
IP
File type ASCII text, with very long lines (36000)
Hash b40bdd235c7883921e2b18743b3aea21
9aaa96e2ec231327ba976911513989568c56c7c1
8b00f3a7d9b7acabf6b991926d7543944771ce1431efd342dea743192ec667e3
GET /js/th/wBNXk7Q6V2dkHawik5TUb6id0fydDqlxfrWFyJdQ6Xw.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14173
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 27 Jan 2023 21:20:34 GMT
expires: Sat, 27 Jan 2024 21:20:34 GMT
cache-control: public, max-age=31536000
age: 310385
last-modified: Tue, 03 Jan 2023 15:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/AL5GRJV_APtVQhDxPD4gyRrx0qN8dOSoFIOGAWzpJCf6ow=s68-c-k-c0x00ffffff-no-rj
200 OK 2.4 kB URL HTTP/2 yt3.ggpht.com/ytc/AL5GRJV_APtVQhDxPD4gyRrx0qN8dOSoFIOGAWzpJCf6ow=s68-c-k-c0x00ffffff-no-rj
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 6d1f5826f8f95592d797813c833e4a0d
6f5cad76182bfcf30794c26f168a2279f2ed214d
b0b0dd50fefde7a7d582bb61dedb37d33468fd2e687125473c800788ea17d353
GET /ytc/AL5GRJV_APtVQhDxPD4gyRrx0qN8dOSoFIOGAWzpJCf6ow=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2387
x-xss-protection: 0
date: Tue, 31 Jan 2023 10:56:35 GMT
expires: Wed, 25 Jan 2023 11:23:43 GMT
cache-control: public, max-age=86400, no-transform
age: 2224
etag: "vdca"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube-nocookie.com/
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Tue, 31 Jan 2023 11:33:39 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 9c8ece9fb4c4f261f4d637232322bca8
0913e0b3e07a92d4a2d61040076c38f848384119
e5843c41409449586d6bf4ef5b529182910b4f57cb48181127106de33a9bebb0
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1035
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Tue, 31 Jan 2023 11:33:39 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube-nocookie.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 750f718797fc50f8465259f62a6da6ba
e9b7abb1a4dff4896c9fb48e7c7b1407885790de
8e3c0c96771c92bcee1d63055e2aa46aa5e0e3125da993844a9297340166873d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 11:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1&page=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1%3A%3AvisitorInfo%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=9d348717-0f26-4d30-a6dd-40bed7fbf2da&es=visitorInfo&cust=RAYSGCAAKRC7S&mrid=TDAGUEGQ58V5A&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Corona%C2%A0%C2%B7%20KLU&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&unsc=0&identifier_used=IP&e=im&t=1675164835701&g=0&completeurl=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F
200 OK 42 B URL HTTP/2 t.paypal.com/ts?pgrp=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1&page=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1%3A%3AvisitorInfo%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=9d348717-0f26-4d30-a6dd-40bed7fbf2da&es=visitorInfo&cust=RAYSGCAAKRC7S&mrid=TDAGUEGQ58V5A&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Corona%C2%A0%C2%B7%20KLU&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&unsc=0&identifier_used=IP&e=im&t=1675164835701&g=0&completeurl=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4682377ddfbe4e7dabfddb2e543e842
328e472721a93345801ed5533240eac2d1f8498c
6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
GET /ts?pgrp=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1&page=muse%3Aoffer%3A%3A%3ATDAGUEGQ58V5A-1%3A%3AvisitorInfo%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&item=9d348717-0f26-4d30-a6dd-40bed7fbf2da&es=visitorInfo&cust=RAYSGCAAKRC7S&mrid=TDAGUEGQ58V5A&code=CHECKOUT_BUTTON&partner_name=CHECKOUT_BUTTON&pt=Corona%C2%A0%C2%B7%20KLU&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&unsc=0&identifier_used=IP&e=im&t=1675164835701&g=0&completeurl=https%3A%2F%2Fwww.the-klu.org%2Flandingpages%2Fcorona%2F HTTP/1.1
Host: t.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.the-klu.org/
Cookie: tsrce=targetingnodeweb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: image/gif
expires: Tue, 31 Jan 2023 11:33:39 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 75c5ee8826838
pragma: no-cache
set-cookie: ts=vreXpYrS%3D1769859219%26vteXpYrS%3D1675166619%26vr%3D079a9f5d1860a57108d29fc9ffffffff%26vt%3D079a9f5d1860a57108d29fc9fffffffe; Expires=Sat, 31 Jan 2026 11:33:39 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly
ts_c=vr%3D079a9f5d1860a57108d29fc9ffffffff%26vt%3D079a9f5d1860a57108d29fc9fffffffe; Expires=Sat, 31 Jan 2026 11:33:39 GMT; Domain=.paypal.com; Path=/; Secure
traceparent: 00-000000000000000000075c5ee8826838-034bb992c49c17e5-01
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 31 Jan 2023 11:33:39 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220039-HHN, cache-bma1656-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675164819.192783,VS0,VE184
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
timing-allow-origin: *
content-length: 42
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP
OPTIONS /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.the-klu.org/
Origin: https://www.the-klu.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.the-klu.org
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f466329ed7c79
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 31 Jan 2023 20:19:35 GMT; HttpOnly; Secure
enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 31 Jan 2024 11:33:39 GMT; Secure
x-pp-s=eyJ0IjoiMTY3NTE2NDgxOTMwMyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Fri, 03 Feb 2023 11:33:39 GMT; HttpOnly; Secure; SameSite=None
l7_az=dcg01.phx; Path=/; Domain=paypal.com; Expires=Tue, 31 Jan 2023 12:03:39 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769859219%26vteXpYrS%3D1675166619%26vr%3D079a9ea71860a1f1abcdc136fd69ce7d%26vt%3D079a9ea71860a1f1abcdc136fd69ce7c%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 30 Jan 2026 11:33:39 GMT; HttpOnly; Secure
ts_c=vr%3D079a9ea71860a1f1abcdc136fd69ce7d%26vt%3D079a9ea71860a1f1abcdc136fd69ce7c; Path=/; Domain=paypal.com; Expires=Fri, 30 Jan 2026 11:33:39 GMT; Secure
traceparent: 00-0000000000000000000f466329ed7c79-760ac13aee8cd84e-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Tue, 31 Jan 2023 11:33:39 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220089-HHN, cache-bma1666-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675164819.023308,VS0,VE390
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
www.paypal.com/xoplatform/logger/api/logger
200 OK 0 B URL HTTP/2 www.paypal.com/xoplatform/logger/api/logger
IP
POST /xoplatform/logger/api/logger HTTP/1.1
Host: www.paypal.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1448
Origin: https://www.the-klu.org
Connection: keep-alive
Referer: https://www.the-klu.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://www.the-klu.org
cache-control: max-age=0, no-cache, no-store, must-revalidate
content-type: application/json; charset=utf-8
etag: W/W/"3f7-hiAQvnqGJ4VI8IO0V7OLdv3sPv8"
paypal-debug-id: f466329434618
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Wed, 31 Jan 2024 11:33:39 GMT; Secure
LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Tue, 31 Jan 2023 20:19:35 GMT; HttpOnly; Secure
tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Fri, 03 Feb 2023 11:33:38 GMT; HttpOnly; Secure
x-pp-s=eyJ0IjoiMTY3NTE2NDgxOTU0MyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure
l7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Tue, 31 Jan 2023 12:03:39 GMT; HttpOnly; Secure
ts=vreXpYrS%3D1769859219%26vteXpYrS%3D1675166619%26vr%3D079aa0371860a2d084d0afc4fed0a372%26vt%3D079aa0371860a2d084d0afc4fed0a371%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Fri, 30 Jan 2026 11:33:39 GMT; HttpOnly; Secure
ts_c=vr%3D079aa0371860a2d084d0afc4fed0a372%26vt%3D079aa0371860a2d084d0afc4fed0a371; Path=/; Domain=paypal.com; Expires=Fri, 30 Jan 2026 11:33:39 GMT; Secure
traceparent: 00-0000000000000000000f466329434618-aee13f425e0915d2-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Tue, 31 Jan 2023 11:33:39 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220059-HHN, cache-bma1666-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1675164819.423462,VS0,VE214
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2
156.67.239.22
142.250.74.161
95.101.11.115
93.184.220.29
104.17.243.73