Overview

URLmedi-buy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
IP 213.133.105.76 (Germany)
ASN#24940 Hetzner Online GmbH
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-08 10:15:52 UTC
StatusLoading report..
IDS alerts0
Blocklist alert2
urlquery alerts No alerts detected
Tags None

Domain Summary (15)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
t.paypal.com (1) 3487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1014 1055 192.229.221.25
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2372 35.241.9.150
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 391 34.117.237.239
ocsp.digicert.com (2) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 682 1534 93.184.220.29
ocsp.pki.goog (4) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1372 2800 142.250.74.131
stats.g.doubleclick.net (1) 96 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 598 706 64.233.164.157
www.paypal.com (4) 2583 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2192 171068 151.101.193.21
medi-buy.de (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1034 1598 213.133.105.76
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6207 23.36.77.32
www.medibuy.de (20) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 15302 713496 213.133.105.76
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 57887 34.120.237.76
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 380 62117 142.250.74.168
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 52.35.190.173
www.google-analytics.com (2) 40 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1249 21319 142.250.74.110

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-08 medium medi-buy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1l (...) Phishing
2022-12-08 medium medi-buy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1l (...) Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 213.133.105.76
Date UQ / IDS / BL URL IP
2023-05-29 08:44:56 UTC 0 - 0 - 1 medi-buy.de/mailster/1271/9eee82288393e42549f (...) 213.133.105.76
2023-05-29 08:44:51 UTC 0 - 0 - 1 medi-buy.de/mailster/1271/9eee82288393e42549f (...) 213.133.105.76
2023-05-27 00:17:19 UTC 0 - 0 - 1 medi-buy.de/mailster/1350/9eee82288393e42549f (...) 213.133.105.76
2023-05-27 00:16:56 UTC 0 - 0 - 1 medi-buy.de/mailster/1382/9eee82288393e42549f (...) 213.133.105.76
2023-05-27 00:16:57 UTC 0 - 0 - 1 medi-buy.de/mailster/1350/9eee82288393e42549f (...) 213.133.105.76


Last 5 reports on ASN: Hetzner Online GmbH
Date UQ / IDS / BL URL IP
2023-06-07 06:25:01 UTC 0 - 0 - 1 www.innoget.com/redirect?campaign=share&sourc (...) 138.201.242.2
2023-06-07 06:23:02 UTC 0 - 1 - 0 stormwave.ru/Files/BNetGatewayEditor.sfx.exe 188.34.152.50
2023-06-07 06:17:00 UTC 0 - 1 - 2 116.203.166.22/files.zip 116.203.166.22
2023-06-07 05:56:41 UTC 0 - 0 - 2 5.75.213.157:490/http:/5.75.213.157:490/a81bc (...) 5.75.213.157
2023-06-07 05:40:44 UTC 0 - 0 - 1 incunabula.pavladev.gr/online/a1b2c3/f8b03122 (...) 95.216.44.16


Last 5 reports on domain: medi-buy.de
Date UQ / IDS / BL URL IP
2023-05-29 16:16:14 UTC 0 - 0 - 1 beta.medi-buy.de/mailster/1846/68888b634d41f0 (...) 217.160.0.82
2023-05-29 16:16:11 UTC 0 - 0 - 1 beta.medi-buy.de/mailster/1685/c7e878d5357113 (...) 217.160.0.82
2023-05-29 16:16:09 UTC 0 - 0 - 1 beta.medi-buy.de/mailster/1858/c7e878d5357113 (...) 217.160.0.82
2023-05-29 16:16:00 UTC 0 - 0 - 1 beta.medi-buy.de/mailster/1876/c7e878d5357113 (...) 217.160.0.82
2023-05-29 16:15:59 UTC 0 - 0 - 1 beta.medi-buy.de/mailster/1809/c7e878d5357113 (...) 217.160.0.82


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-04-04 22:17:10 UTC 0 - 0 - 2 medi-buy.de/mailster/1111/638020ab9b58dfe8af7 (...) 213.133.105.76
2023-04-04 22:17:07 UTC 0 - 0 - 2 medi-buy.de/mailster/1043/638020ab9b58dfe8af7 (...) 213.133.105.76
2023-04-04 14:15:47 UTC 0 - 0 - 2 medi-buy.de/mailster/1382/0529a4a3ac022c4af80 (...) 213.133.105.76
2023-04-04 14:15:50 UTC 0 - 0 - 2 medi-buy.de/mailster/1382/0529a4a3ac022c4af80 (...) 213.133.105.76
2023-04-01 21:17:20 UTC 0 - 0 - 2 medi-buy.de/mailster/1271/6af77ee48fedc569fc3 (...) 213.133.105.76

JavaScript

Executed Scripts (12)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (55)


Request Response
                                        
                                            GET /mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1 
Host: medi-buy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             213.133.105.76
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Thu, 08 Dec 2022 10:15:40 GMT
Server: Apache
Location: https://medi-buy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Content-Length: 414
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   414
Md5:    e55b0d9e03004847e2794c32fe1714fd
Sha1:   d0225aa2d0a1fde2f0f85fe2e649b5d8238980d6
Sha256: 52e54e9c8a08a1d2aa8b53ca3987a7bc5d584dc14984bb055575f88d66b5b2df

Blocklists:
  - fortinet: Phishing
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13784
Expires: Thu, 08 Dec 2022 14:05:25 GMT
Date: Thu, 08 Dec 2022 10:15:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "A597AFB4D4F7F3C82F0F2857322226FC69DC92E099BFD0605F7A0CD562BE9D21"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2636
Expires: Thu, 08 Dec 2022 10:59:37 GMT
Date: Thu, 08 Dec 2022 10:15:41 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 10:08:09 GMT
age: 452
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "593BC437FF8A8233516C62613D50220FCB25B9F967ED5FB384C253F0DB135103"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2742
Expires: Thu, 08 Dec 2022 11:01:23 GMT
Date: Thu, 08 Dec 2022 10:15:41 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: pm72vi4o8FJhKI23joSGscimfxwWhC/oNlM0n5d6zjTU4UFcFiKpI71kiauk3CU1tGHtMkCoXEc=
x-amz-request-id: EZZQ9TBW45RBTQXB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 09:47:52 GMT
age: 1669
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Thu, 08 Dec 2022 10:15:41 GMT
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1 
Host: medi-buy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             213.133.105.76
HTTP/2 301 Moved Permanently
content-type: text/html; charset=iso-8859-1
                                            
location: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
cache-control: max-age=2592000
expires: Sat, 07 Jan 2023 10:15:41 GMT
content-length: 418
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   418
Md5:    8705ebd2a7088a972bf2cf5099b15cc0
Sha1:   44b2d60bb05011f2b68272c359d88c4278a73b5f
Sha256: f481385ce1457bdcab2bb33c8edc9a7f5d0fac4b767a530c4f999e86cc6cc368

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 10:07:58 GMT
age: 463
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /media/f9/fb/76/1660744973/logo-medi-buy.png?width=3000 HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Wed, 17 Aug 2022 14:02:53 GMT
accept-ranges: bytes
content-length: 7720
cache-control: max-age=2592000, public
expires: Sat, 07 Jan 2023 10:15:41 GMT
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 145 x 75, 8-bit/color RGBA, non-interlaced\012- data
Size:   7720
Md5:    5b4f85e28897cbcab62d129e51104eab
Sha1:   28a7e923047697db3ae446ce5a51866c2355cf4e
Sha256: 8a382b94b3e401ae4dffb6e8d9e676d2efc3f5020bd1a09be086f3bd6cce75de
                                        
                                            GET /theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307 HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: text/css
                                            
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
cache-control: max-age=2592000, public
expires: Sat, 07 Jan 2023 10:15:41 GMT
vary: Accept-Encoding
content-encoding: br
content-length: 58936
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Size:   58936
Md5:    35697429725d86a7d72aa46bbb2c53d1
Sha1:   0369103b9fec673e0161ccad3dd598251ade7da5
Sha256: 7d42be5c4f29593b4b627137efcbc76d04c04ccfa97fc213134ce0ab7c5b039e
                                        
                                            GET /bundles/storefront/assets/illustration/404_error.svg?166990692510264 HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/svg+xml
                                            
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 10264
cache-control: max-age=2592000, public, s-maxage=10
expires: Sat, 07 Jan 2023 10:15:41 GMT
content-security-policy: script-src 'none'
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (10264), with no line terminators
Size:   10264
Md5:    09cc03d27a1bec1834fc2557c8756de6
Sha1:   b99d2c4e2e65fa4a6e67a2120cc003397641b6bb
Sha256: 0f7438ab906cd5e913d0672ede6a7e50a4b33052522152411a83db5fd75077e1
                                        
                                            GET /thumbnail/a3/b9/7e/1647423562/vorkasse_400x400.png HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 3411
last-modified: Wed, 16 Mar 2022 09:39:22 GMT
accept-ranges: bytes
expires: Sat, 07 Jan 2023 10:15:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-rP6lnozYdc"
date: Thu, 08 Dec 2022 10:15:41 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Size:   3411
Md5:    acfea59e8cd875cd024cfbf3d19dd41b
Sha1:   69598eac7549445f211e070d2345f0d9ba676390
Sha256: e4aa7abfdf0141b057516bf9bddd14be8651a0ae9fe6fc05a723240fd5a8e19a
                                        
                                            GET /media/c7/93/b8/1647424094/rechnung.png HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 3769
last-modified: Wed, 16 Mar 2022 09:48:14 GMT
accept-ranges: bytes
expires: Sat, 07 Jan 2023 10:15:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-jbKuNqBsMM"
date: Thu, 08 Dec 2022 10:15:41 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 296 x 59, 8-bit/color RGBA, non-interlaced\012- data
Size:   3769
Md5:    8db2ae36a06c30c951bc5b07d7bc9148
Sha1:   8a309d77ae76de9ada1ba397dddb42b19b10d365
Sha256: 066098bde82e26620fd48cae563e63c82300403f1471d3b1daa3423032874855
                                        
                                            GET /media/66/fd/63/1647424374/visa_mastercard.png HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 4999
last-modified: Wed, 16 Mar 2022 09:52:54 GMT
accept-ranges: bytes
expires: Sat, 07 Jan 2023 10:15:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-tDayKMGF3R"
date: Thu, 08 Dec 2022 10:15:41 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 380 x 180, 8-bit colormap, non-interlaced\012- data
Size:   4999
Md5:    b436b228c185dd1694ee7dc90276a241
Sha1:   16f6d028dcb2ceed023e582620dc6b05792b9e53
Sha256: 00fe369484d1f2ffdcb4e94429c9f197b69ebd3baa6b1de2136b19ffc959f0b7
                                        
                                            GET /media/0b/db/27/1647424306/PayPal.png HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 1209
last-modified: Wed, 16 Mar 2022 09:51:46 GMT
accept-ranges: bytes
expires: Sat, 07 Jan 2023 10:15:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-EOdNf5yA-l"
date: Thu, 08 Dec 2022 10:15:41 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 52 x 13, 8-bit/color RGBA, non-interlaced\012- data
Size:   1209
Md5:    10e74d7f9c80fa575a82d281d59b07d7
Sha1:   ab28ead6cfd04169bcbb9abe0b72cc6114fdcd04
Sha256: 87c23da20335fef912b5f73054479da28932b7150964dd00f04621f7d66cb88b
                                        
                                            GET /media/2d/d3/21/1647427612/UPS.svg HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/svg+xml
                                            
last-modified: Wed, 16 Mar 2022 10:46:52 GMT
accept-ranges: bytes
content-length: 9839
cache-control: max-age=2592000, public
expires: Sat, 07 Jan 2023 10:15:41 GMT
content-security-policy: script-src 'none'
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9839), with no line terminators
Size:   9839
Md5:    7d431787d0670bbfed25042f31765950
Sha1:   7806b1cbd22e59454e0db311a57a0dc6f4c95044
Sha256: be5355d455d0f806217d793bf05c06583a7e8fae0868f5ce5234dfc9a742c7df
                                        
                                            GET /media/de/61/51/1647427683/DPD.svg HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/svg+xml
                                            
last-modified: Wed, 16 Mar 2022 10:48:03 GMT
accept-ranges: bytes
content-length: 1784
cache-control: max-age=2592000, public
expires: Sat, 07 Jan 2023 10:15:41 GMT
content-security-policy: script-src 'none'
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1784), with no line terminators
Size:   1784
Md5:    dd28c0a5daef8ea0fa5b4fdfb922e642
Sha1:   6835ab6acdc420dd3cfcc5bc65db9c68e9a1e3c7
Sha256: 8234e24e56d28f50892e97f85b54c48ef8da0605a59dd5e82de53112ff4117ed
                                        
                                            GET /media/82/e2/a0/1647426572/Hermes.svg HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/svg+xml
                                            
last-modified: Wed, 16 Mar 2022 10:29:32 GMT
accept-ranges: bytes
content-length: 9350
cache-control: max-age=2592000, public
expires: Sat, 07 Jan 2023 10:15:41 GMT
content-security-policy: script-src 'none'
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (9350), with no line terminators
Size:   9350
Md5:    5f5624b00ef137c75797afa4cca2ad88
Sha1:   55e72269cfd7e4690830fe00fdffdcae157d5894
Sha256: 166ab49b3471568a0e08af48c9f41a260397eec8032a2b1774d22f2edb830d3c
                                        
                                            GET /media/90/e1/80/1647434313/dhl.png HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/png
                                            
content-length: 23109
last-modified: Wed, 16 Mar 2022 12:38:33 GMT
accept-ranges: bytes
expires: Sat, 07 Jan 2023 10:15:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-9wG6VFxA2Q"
date: Thu, 08 Dec 2022 10:15:41 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 892 x 660, 8-bit/color RGBA, non-interlaced\012- data
Size:   23109
Md5:    f701ba545c40d9022dc97668c7400a43
Sha1:   91c4cad7ae63f5f751dff1bc0a2ebede2e64d908
Sha256: f97e17aa330ea80f47c7f90e46af5cbea114e31d835d4bb39956a8ff2379e9f6
                                        
                                            GET /media/0f/55/eb/1647434309/gls.jpg HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
content-length: 20730
last-modified: Wed, 16 Mar 2022 12:38:29 GMT
accept-ranges: bytes
expires: Sat, 07 Jan 2023 10:15:41 GMT
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-6owyQPOpKY"
date: Thu, 08 Dec 2022 10:15:41 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1168x657, components 3\012- data
Size:   20730
Md5:    ea8c3240f3a929801f0525d005eddc25
Sha1:   ef6b0286016c58e8722cbf64b1e185b61e80486a
Sha256: bdcbf3e1707aba9169bff1919ff05fe7f06f76ef3b9046f081534b947a041bf9
                                        
                                            GET /theme/38b6f2e29c056d3a7b8c5d44804df708/js/all.js?1669906925946899 HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: application/javascript
                                            
content-length: 231005
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
expires: Sat, 07 Jan 2023 10:15:41 GMT
vary: Accept-Encoding
server: Apache
cache-control: max-age=2592000, public
etag: W/"PSA-RM_47jDH5u"
x-original-content-length: 946899
content-encoding: gzip
date: Thu, 08 Dec 2022 10:15:41 GMT
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (59042)
Size:   231005
Md5:    ee2d56d611bc6ee2e4de06764076c649
Sha1:   ddeff7ec512764dcd4315bb5ac7400552926be55
Sha256: fa449a3b958ebd156bc4962929db24e30b0ebc5ff19331e4fa71dfe97db8d498
                                        
                                            GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Regular.woff2 HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: font/woff2
                                            
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 100088
cache-control: max-age=2592000, public, s-maxage=10
expires: Sat, 07 Jan 2023 10:15:41 GMT
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 100088, version 1.0\012- data
Size:   100088
Md5:    77812e2fead777db0dc806b1eaabc7fd
Sha1:   512526689a4fd677ffca333a9dc1d412ad44caaf
Sha256: 77677cd3d62f53fce403b743c6ab0dfacf6109cfa5f2c511a57b0779222c76de
                                        
                                            GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-SemiBold.woff2 HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: font/woff2
                                            
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107184
cache-control: max-age=2592000, public, s-maxage=10
expires: Sat, 07 Jan 2023 10:15:41 GMT
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 107184, version 1.0\012- data
Size:   107184
Md5:    3d011804596fb2ccde4af51830a9a7d5
Sha1:   999e92214edfb5b102919586df4cfe16f7ddaccb
Sha256: e9bb1331830a18e2504d966f1fa931e711cad726e454722f324d63534cec97d9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 6201
Cache-Control: 'max-age=158059'
Date: Thu, 08 Dec 2022 10:15:41 GMT
Last-Modified: Thu, 08 Dec 2022 08:32:20 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /theme/38b6f2e29c056d3a7b8c5d44804df708/assets/font/Inter-Bold.woff2 HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.medibuy.de/theme/38b6f2e29c056d3a7b8c5d44804df708/css/all.css?1669906925448307
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: font/woff2
                                            
last-modified: Thu, 01 Dec 2022 15:02:05 GMT
accept-ranges: bytes
content-length: 107300
cache-control: max-age=2592000, public, s-maxage=10
expires: Sat, 07 Jan 2023 10:15:41 GMT
date: Thu, 08 Dec 2022 10:15:41 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 107300, version 1.0\012- data
Size:   107300
Md5:    741dc4163a97ffa354979f18802f6ca8
Sha1:   0e4b89a4a2801dd5e25364f439d7bfee47594762
Sha256: 20fd98b18d523471ae687971086817766649ce25f32e438d14711561a95bc9e9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 3984
Cache-Control: max-age=144607
Date: Thu, 08 Dec 2022 10:15:42 GMT
Etag: "63913b9d-1d7"
Expires: Sat, 10 Dec 2022 02:25:49 GMT
Last-Modified: Thu, 08 Dec 2022 01:19:25 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 10:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtm.js?id=GTM-5ZRS4MZ HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 08 Dec 2022 10:15:42 GMT
expires: Thu, 08 Dec 2022 10:15:42 GMT
cache-control: private, max-age=900
last-modified: Thu, 08 Dec 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 61354
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2655)
Size:   61354
Md5:    d90334fffcaf94db31a41a91c61584f5
Sha1:   a5a5f70ef4af13b11e7ac9acac72597bc5fb3ce7
Sha256: 597ae3e0e24a44694e105eabdc836aa93e11ec596ab0885f846db500baa2bfbd
                                        
                                            GET /widgets/checkout/info HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw; timezone=UTC
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 10:15:42 GMT
x-robots-tag: noindex
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
x-mod-pagespeed: 1.13.35.2-0
cache-control: no-cache, private, max-age=0, no-cache
vary: Accept-Encoding
content-encoding: br
content-length: 511
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (893)
Size:   511
Md5:    493a5de4e5ee35b780abd036727f3864
Sha1:   99ab201cb7443a982c8b70945c6e0e64529e69cc
Sha256: 6570e674f01a7fd1efc6e7545379a0a48362799a0e32f9759fa2286786d0ad4a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 10:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: rJn6xmIUAhIV7gWZR0PBTQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             52.35.190.173
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: HQFYt1MbU2T4bcSYSo5RL4+6A9k=

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.110
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 08 Dec 2022 08:41:08 GMT
expires: Thu, 08 Dec 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 5674
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /media/17/a7/ac/1646226955/medi-buy-favicon.png?width=3000 HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw; timezone=UTC; _gcl_au=1.1.1494976389.1670494542
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 200 OK
content-type: image/png
                                            
last-modified: Wed, 02 Mar 2022 13:15:55 GMT
accept-ranges: bytes
content-length: 4599
cache-control: max-age=2592000, public
expires: Sat, 07 Jan 2023 10:15:42 GMT
date: Thu, 08 Dec 2022 10:15:42 GMT
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 512 x 512, 4-bit colormap, non-interlaced\012- data
Size:   4599
Md5:    88c734babd964cc8ae1839e9be164ca9
Sha1:   78fc99bde11eb697353244aa8f7ff3297d9bd9cd
Sha256: 63e35c5c2d81ece3ac43436b7ba8642767a01d88064a04c13ac488157532e342
                                        
                                            POST /j/collect?v=1&_v=j98&aip=1&a=234022800&t=pageview&_s=1&dl=https%3A%2F%2Fwww.medibuy.de%2Fmailster%2F1271%2F37d712248a52faa0398aebac9362a8f3%2FaHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ&ul=en-us&de=UTF-8&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAAABAAAAAC~&jid=14142349&gjid=700839420&cid=448665984.1670494542&tid=UA-224940953-1&_gid=169991403.1670494542&_r=1&gtm=2wgbu05ZRS4MZ&z=1071009564 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.110
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://www.medibuy.de
date: Thu, 08 Dec 2022 10:15:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    cc7a1e792bca8ccb1946b7a07f6dbc03
Sha1:   11a2757082428311f587b7664fa9840376137f80
Sha256: de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 10:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-224940953-1&cid=448665984.1670494542&jid=14142349&gjid=700839420&_gid=169991403.1670494542&_u=YEBAAAAAAAAAAC~&z=1328576394 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             64.233.164.157
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://www.medibuy.de
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 08 Dec 2022 10:15:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Thu, 08 Dec 2022 10:15:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /sdk/js?components=buttons,messages,hosted-fields,funding-eligibility&client-id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&commit=true&locale=de_DE&currency=EUR&intent=capture&merchant-id=GNSPGCCJR6URW HTTP/1.1 
Host: www.paypal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.193.21
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
access-control-allow-origin: *
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600, s-maxage=10800
content-encoding: gzip
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com https://*.qualtrics.com; script-src 'nonce-6cDr6DICealKq5FFPKLxtmozpT8L4Wo79pmhZ56wQVgoAdP9' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; style-src 'nonce-6cDr6DICealKq5FFPKLxtmozpT8L4Wo79pmhZ56wQVgoAdP9' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; object-src 'none'; img-src https: data:; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp
etag: W/"26f95-uGAdy5RAMdB0vnxgqXgEagqP6zE"
p3p: true
paypal-debug-id: f93814522d38e
traceparent: 00-0000000000000000000f93814522d38e-6e84b574726c5c94-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 08 Dec 2022 10:15:42 GMT
age: 0
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220053-HHN, cache-bma1673-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670494542.051062,VS0,VE756
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f93814522d38e-4c89aecd0b51f0e4-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 159637
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65472)
Size:   159637
Md5:    28edb1602a15a57433720a3ad92b4031
Sha1:   b8601dcb944031d074be7c60a978046a0a8feb31
Sha256: bc875a73302f5df59065205b759214047a299eeb896236e1cab77bef4ccaffa5
                                        
                                            GET /tagmanager/pptm.js?id=www.medibuy.de&t=xo&v=5.0.343&source=payments_sdk&mrid=GNSPGCCJR6URW&client_id=AUPd-nDJe8MRQbDwG1bIrIqLrDF3Fp56BrigPQw-tgnnYZMZmZifBkvaaX3yMTINIVudn0M54iJdCrHC&comp=buttons,messages,hosted-fields,funding-eligibility&vault=false HTTP/1.1 
Host: www.paypal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.193.21
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                            
access-control-expose-headers: Server-Timing
cache-control: public, max-age=3600
content-security-policy: default-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline'; script-src 'nonce-hN7gKRyVIOuMmZOgb6WuYFCiMeK/4Zmx5d2GcN2+6VhisKqc' 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' 'unsafe-eval'; img-src * data:; object-src 'none'; font-src 'self' https://*.paypalobjects.com https://*.paypal.com; connect-src 'self' https://*.paypal.com https://*.paypalobjects.com https://nexus.ensighten.com https://*.google-analytics.com 'unsafe-inline' https://*.qualtrics.com; form-action 'self' https://*.paypal.com; base-uri 'self' https://*.paypal.com; upgrade-insecure-requests;; report-uri https://www.paypal.com/csplog/api/log/csp; frame-src 'self' https://*.paypal.com https://*.paypalobjects.com 'unsafe-inline' https://*.qualtrics.com;
etag: W/"2f34-zQQ0FVqIlbkbuS4WgpPW/nUPXC4"
paypal-debug-id: f762491c539c0
traceparent: 00-0000000000000000000f762491c539c0-fe07be595306d177-01
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
dc: ccg11-origin-www-1.paypal.com
content-encoding: gzip
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 08 Dec 2022 10:15:42 GMT
age: 24846
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220059-HHN, cache-bma1673-BMA
x-cache: HIT, MISS
x-cache-hits: 8, 0
x-timer: S1670494543.942337,VS0,VE24
vary: Accept-Encoding
server-timing: "traceparent;desc="00-0000000000000000000f762491c539c0-677cd148b38c6e43-01"";content-encoding;desc="gzip",x-cdn;desc="fastly"
content-length: 4299
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (12084), with no line terminators
Size:   4299
Md5:    da1b94bdea2eb1769e74df6fbd2c1a2e
Sha1:   4c7f6b5318ffd3d36b6b431f4bd113b55d8f14a7
Sha256: 45cc4e008a654e4ef3f3b3eb0ca92f52ade64445039059b5395b11734b033be4
                                        
                                            POST /_proxy/store-api?path=%2Fstore-api%2Fpaypal%2Fpayment-method-eligibility HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Content-type: application/json
Content-Length: 164
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ
Cookie: session-=7e3439adb7309fe43ef0308707aa844c; csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw; timezone=UTC; _gcl_au=1.1.1494976389.1670494542; _ga=GA1.2.448665984.1670494542; _gid=GA1.2.169991403.1670494542; _gat_UA-224940953-1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             213.133.105.76
HTTP/2 204 No Content
                                            
date: Thu, 08 Dec 2022 10:15:42 GMT
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: deny
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: object-src 'none'; script-src 'none'; base-uri 'self';
expires: Thu, 08 Dec 2022 10:15:43 GMT
cache-control: no-cache, private, public
server: Apache
X-Firefox-Spdy: h2

                                        
                                            GET /ts?pgrp=muse%3Ageneric%3Aanalytics%3A%3Amerchant&page=muse%3Ageneric%3Aanalytics%3A%3Amerchant%3A%3A%3A&tsrce=tagmanagernodeweb&comp=tagmanagernodeweb&sub_component=analytics&s=ci&fltp=analytics-generic&dh=1024&dw=1280&bh=939&bw=1280&cd=24&sh=1024&sw=1280&v=NA&rosetta_language=en-US%2Cen&e=im&t=1670494542369&g=0&completeurl=https%3A%2F%2Fwww.medibuy.de%2Fmailster%2F1271%2F37d712248a52faa0398aebac9362a8f3%2FaHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ&sinfo=%7B%22partners%22%3A%7B%22ecwid%22%3A%7B%7D%2C%22bigCommerce%22%3A%7B%7D%2C%22shopify%22%3A%7B%7D%2C%22wix%22%3A%7B%7D%2C%22bigCartel%22%3A%7B%7D%7D%7D HTTP/1.1 
Host: t.paypal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.229.221.25
HTTP/2 200 OK
content-type: image/gif
                                            
cache-control: max-age=0, no-cache, no-store, must-revalidate
date: Thu, 08 Dec 2022 10:15:43 GMT
expires: Thu, 08 Dec 2022 10:15:43 GMT
p3p: policyref="https://t.paypal.com/w3c/p3p.xml",CP="CAO IND OUR SAM UNI STA COR COM"
paypal-debug-id: 8fb6ad1fee7d0
pragma: no-cache
server: ECAcc (lhd/35B9)
server-timing: content-encoding;desc="", x-cdn;desc="edgecast",edge;dur=196
set-cookie: ts=vreXpYrS%3D1765188943%26vteXpYrS%3D1670496343%26vr%3Df13bdd091840a46266a6aba4ffffffff%26vt%3Df13bdd091840a46266a6aba4fffffffe; Expires=Mon, 08 Dec 2025 10:15:43 GMT; Domain=.paypal.com; Path=/; Secure; HttpOnly ts_c=vr%3Df13bdd091840a46266a6aba4ffffffff%26vt%3Df13bdd091840a46266a6aba4fffffffe; Expires=Mon, 08 Dec 2025 10:15:43 GMT; Domain=.paypal.com; Path=/; Secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
timing-allow-origin: *
traceparent: 00-00000000000000000008fb6ad1fee7d0-6d3c33ea98b2ff19-01
content-length: 42
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    b4682377ddfbe4e7dabfddb2e543e842
Sha1:   328e472721a93345801ed5533240eac2d1f8498c
Sha256: 6d8ba81d1b60a18707722a1f2b62dad48a6acced95a1933f49a68b5016620b93
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14025
Expires: Thu, 08 Dec 2022 14:09:28 GMT
Date: Thu, 08 Dec 2022 10:15:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14025
Expires: Thu, 08 Dec 2022 14:09:28 GMT
Date: Thu, 08 Dec 2022 10:15:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14025
Expires: Thu, 08 Dec 2022 14:09:28 GMT
Date: Thu, 08 Dec 2022 10:15:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "CACC53ED285E96DCD5BA7609823922A253BC0623999B8716F430632D2C0E7DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14025
Expires: Thu, 08 Dec 2022 14:09:28 GMT
Date: Thu, 08 Dec 2022 10:15:43 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F15e59c3f-fa3a-4698-96c2-2e89662ffa9f.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8179
x-amzn-requestid: 39aa4016-4f48-4d2a-b94b-05432980d66a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czCruHckIAMFkHg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639117e4-1953985a5c8d2da8239ec8e8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:47:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qKaRX4QpQU2U8J-jk1lWjhAooObsgxfHuNXv5Bbc69IEMCXAyIESeQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 1a53057db389e96b4ef1bfbc925dde1c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:50:01 GMT
age: 41142
etag: "979910df445a5c4d3513c8c25e289800335f646d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8179
Md5:    311cb4353566dfb426dbc692fde93223
Sha1:   979910df445a5c4d3513c8c25e289800335f646d
Sha256: 5ecd5c12620c0b8b6bbf456cb6c016168479a735f4eb67a9a1047677b9d798fb
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 10:23:11 GMT
age: 85952
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10164
Md5:    3d44d17585c9a536c8da0e75ed90d175
Sha1:   9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1
Sha256: 6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 38544
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8659
Md5:    b87d6543345f73653ed4a49b37d7c959
Sha1:   c4f26846b8b72293368ff16915d49297cf12bbb9
Sha256: aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6110
x-amzn-requestid: 2ebf542a-dacc-472a-81c0-0c69cb1ec143
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEQAH2doAMFljA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb3ff-7173ff7941b57fa163e3cc6b;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Bo1JGLLmbH9LRrcXA4i8qVD1ilMqHxNWq1u52RhGMAdAhywK42lMPA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 01:57:38 GMT
age: 29885
etag: "c3b915cb579b651db25442fea0bbedd0d292c0fc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6110
Md5:    fb1ea0161d261518c99909aff49e6f58
Sha1:   c3b915cb579b651db25442fea0bbedd0d292c0fc
Sha256: d877a21abfd883a368da0136c4e56d7f590fa9e9ea09dec3675823211fe56385
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3236488e-3e39-44b6-b864-0f7ede8ee3f5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9376
x-amzn-requestid: bf2f33a6-7f13-4f5b-ba9c-da33282135b2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctERHFRSoAMFgYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb406-121af6ba1b7b6a3066ffa103;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: yTLFIBUWHjudn2h6VKM79RUnXfuUTmQBkYSCFrRuY7_biVW5bEKZfA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 17:39:05 GMT
age: 59798
etag: "e9106fec14ddda290951c61eda64a69ada9a244a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9376
Md5:    3cbac0c7e45d3f33c38dbf3af4de05ba
Sha1:   e9106fec14ddda290951c61eda64a69ada9a244a
Sha256: 98d3785eb167ea6bbba3782ab3cfd8cc9c7715f493265ac6d59494c00d3b002e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdfb40390-82ef-453b-afca-e37aa7674ed3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9058
x-amzn-requestid: 1f7fdd3d-1e65-46f7-8ef2-d164bf81e72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctlz4FtuIAMFjsg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9b2-4866b3fd61fdb35d34317038;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:05:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6ET1Tfo1QXRpjkWyOE7jfYnWToK8h7ojB31efNc09awacwlCIYEPjA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 05:05:36 GMT
age: 18607
etag: "98556b27bc3759d0ceb8200ff5bc7b9567e428a5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9058
Md5:    f0c8a8dbe6c3ae6eaa2e464296708f5c
Sha1:   98556b27bc3759d0ceb8200ff5bc7b9567e428a5
Sha256: bfc64a0e18c0137360f746eca256f464e26d23a04521ea629c46ae50ea6af173
                                        
                                            GET /mailster/1271/37d712248a52faa0398aebac9362a8f3/aHR0cDovL3RoZW1lZm9yZXN0Lm5ldC91c2VyL251dHp1bWkvcG9ydGZvbGlvLz9yZWY9bnV0enVtaQ HTTP/1.1 
Host: www.medibuy.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             213.133.105.76
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                            
date: Thu, 08 Dec 2022 10:15:41 GMT
access-control-allow-origin: *
access-control-allow-methods: GET,POST,PUT,PATCH,DELETE
access-control-allow-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
access-control-expose-headers: Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,fail-on-error,indexing-behavior,single-operation,sw-include-seo-urls
sw-language-id: 2fbb5fe2e29a4d70aa5854ce7ce3e20b
sw-context-token: nunboAuSoJtFKjPsvmD0O3aZWXmHy5ZA
x-frame-options: deny
set-cookie: session-=7e3439adb7309fe43ef0308707aa844c; path=/; secure; HttpOnly; SameSite=lax session-=7e3439adb7309fe43ef0308707aa844c; path=/; secure; httponly; samesite=lax csrf[frontend.store-api.proxy]=4928e6a0c870aab01.EOnI5RV0NqIpLsqjD0mzZ32_3DJjrNox0UpdeeBPF48.XKP83G1DQsUceaPBRADRDjDx6FxW6rJinzgPSrUnVblkmIaWTyBs12pDmw; path=/; secure; httponly; samesite=lax
cache-control: no-cache, private, public
server: Apache
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            OPTIONS /xoplatform/logger/api/logger HTTP/1.1 
Host: www.paypal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www.medibuy.de/
Origin: https://www.medibuy.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.193.21
HTTP/2 200 OK
                                            
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: POST
access-control-allow-origin: https://www.medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
paypal-debug-id: f3925152ac4ed
set-cookie: LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 08 Dec 2022 19:01:39 GMT; HttpOnly; Secure enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 08 Dec 2023 10:15:43 GMT; Secure x-pp-s=eyJ0IjoiMTY3MDQ5NDU0MzM5MyIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure tsrce=loggernodeweb; Domain=.paypal.com; Path=/; Expires=Sun, 11 Dec 2022 10:15:43 GMT; HttpOnly; Secure; SameSite=None l7_az=dcg14.slc; Path=/; Domain=paypal.com; Expires=Thu, 08 Dec 2022 10:45:43 GMT; HttpOnly; Secure ts=vreXpYrS%3D1765188943%26vteXpYrS%3D1670496343%26vr%3Df13bddfd1840ad009a4afb5ffc05b62b%26vt%3Df13bddfd1840ad009a4afb5ffc05b62a%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 07 Dec 2025 10:15:43 GMT; HttpOnly; Secure ts_c=vr%3Df13bddfd1840ad009a4afb5ffc05b62b%26vt%3Df13bddfd1840ad009a4afb5ffc05b62a; Path=/; Domain=paypal.com; Expires=Sun, 07 Dec 2025 10:15:43 GMT; Secure
traceparent: 00-0000000000000000000f3925152ac4ed-625d100146ac527f-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
date: Thu, 08 Dec 2022 10:15:43 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220088-HHN, cache-bma1673-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670494543.272300,VS0,VE218
server-timing: content-encoding;desc="",x-cdn;desc="fastly"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            POST /xoplatform/logger/api/logger HTTP/1.1 
Host: www.paypal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1456
Origin: https://www.medibuy.de
Connection: keep-alive
Referer: https://www.medibuy.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             151.101.193.21
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
access-control-allow-credentials: true
access-control-allow-origin: https://www.medibuy.de
cache-control: max-age=0, no-cache, no-store, must-revalidate
etag: W/W/"3f6-kbmMhU8dxVHTaMxnjneN5c0MLWg"
paypal-debug-id: f39251542cc2d
set-cookie: enforce_policy=ccpa; Max-Age=31536000; Domain=.paypal.com; Path=/; Expires=Fri, 08 Dec 2023 10:15:43 GMT; Secure LANG=en_US%3BUS; Max-Age=31556; Domain=.paypal.com; Path=/; Expires=Thu, 08 Dec 2022 19:01:39 GMT; HttpOnly; Secure tsrce=loggernodeweb; Max-Age=259199; Domain=.paypal.com; Path=/; Expires=Sun, 11 Dec 2022 10:15:42 GMT; HttpOnly; Secure x-pp-s=eyJ0IjoiMTY3MDQ5NDU0MzYxMSIsImwiOiIwIiwibSI6IjAifQ; Domain=.paypal.com; Path=/; HttpOnly; Secure l7_az=dcg13.slc; Path=/; Domain=paypal.com; Expires=Thu, 08 Dec 2022 10:45:43 GMT; HttpOnly; Secure ts=vreXpYrS%3D1765188943%26vteXpYrS%3D1670496343%26vr%3Df13bdedf1840ad04a8850567fff28334%26vt%3Df13bdedf1840ad04a8850567fff28333%26vtyp%3Dnew; Path=/; Domain=paypal.com; Expires=Sun, 07 Dec 2025 10:15:43 GMT; HttpOnly; Secure ts_c=vr%3Df13bdedf1840ad04a8850567fff28334%26vt%3Df13bdedf1840ad04a8850567fff28333; Path=/; Domain=paypal.com; Expires=Sun, 07 Dec 2025 10:15:43 GMT; Secure
traceparent: 00-0000000000000000000f39251542cc2d-36dbaef723ea0db6-01
x-content-type-options: nosniff
dc: ccg11-origin-www-1.paypal.com
accept-ranges: none
via: 1.1 varnish, 1.1 varnish
content-encoding: br
date: Thu, 08 Dec 2022 10:15:43 GMT
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-served-by: cache-hhn-etou8220097-HHN, cache-bma1673-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670494543.499855,VS0,VE201
vary: Accept-Encoding
server-timing: content-encoding;desc="br",x-cdn;desc="fastly"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: