Overview

URLwww.ferienhaus-anden5birken.de/
IP 199.34.228.66 (United States)
ASN#27647 WEEBLY
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-23 10:54:36 UTC
StatusLoading report..
IDS alerts2
Blocklist alert0
urlquery alerts No alerts detected
Tags None

Domain Summary (25)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
static1.wetter.com (4) 0 2013-12-18 08:56:21 UTC 2022-12-22 10:01:58 UTC 143.204.55.125 Domain (wetter.com) ranked at: 17628
ocsp.digicert.com (4) 86 2012-05-21 07:02:23 UTC 2022-12-23 07:07:22 UTC 93.184.220.29
status.rapidssl.com (3) 6946 2017-11-14 07:51:36 UTC 2022-12-23 04:43:28 UTC 93.184.220.29
ec.editmysite.com (2) 12806 2017-01-29 21:50:35 UTC 2022-12-23 04:56:52 UTC 44.232.197.188
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-12-23 04:09:28 UTC 34.120.237.76
www.google-analytics.com (3) 40 2012-05-21 09:41:50 UTC 2022-12-23 06:41:39 UTC 216.58.207.206
www.ferienhaus-anden5birken.de (22) 0 2017-03-31 07:53:47 UTC 2018-01-19 11:39:43 UTC 199.34.228.66 Unknown ranking
fonts.googleapis.com (6) 8877 2012-05-23 12:41:44 UTC 2022-12-23 06:49:24 UTC 142.250.74.106
cdn2.editmysite.com (10) 11564 2012-10-02 18:27:39 UTC 2022-12-23 04:09:56 UTC 151.101.65.46
ocsp.pki.goog (3) 175 2017-06-14 07:23:31 UTC 2022-12-23 04:10:04 UTC 142.250.74.131
app.multilanguage.xyz (2) 529745 2016-07-01 09:31:01 UTC 2022-12-22 06:26:52 UTC 172.241.24.147
static.xx.fbcdn.net (12) 661 2012-12-01 13:12:13 UTC 2022-12-23 04:09:16 UTC 31.13.72.12
cs3.wettercomassets.com (12) 73635 2018-09-19 13:35:09 UTC 2022-12-22 10:02:00 UTC 143.204.55.49
ocsp.sca1b.amazontrust.com (1) 1015 2016-02-14 02:37:56 UTC 2019-03-27 04:05:54 UTC 143.204.42.88
r3.o.lencr.org (8) 344 2020-12-02 08:52:13 UTC 2022-12-23 04:09:02 UTC 23.36.76.226
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-23 04:13:38 UTC 34.117.237.239
ajax.googleapis.com (1) 12905 2012-05-22 10:38:03 UTC 2022-12-23 06:41:41 UTC 142.250.74.74
www.facebook.com (2) 99 No data No data 31.13.72.36
www.wetter.com (2) 62167 2017-01-30 08:59:20 UTC 2022-12-22 10:01:59 UTC 143.204.55.98
www.promisejs.org (1) 54790 2014-06-02 07:26:42 UTC 2022-12-21 13:05:06 UTC 188.114.96.1
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2022-12-23 04:09:14 UTC 35.241.9.150
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-12-23 04:09:06 UTC 34.160.144.191
fonts.gstatic.com (5) 0 2014-04-02 10:51:04 UTC 2022-12-23 06:30:58 UTC 216.58.207.227 Domain (gstatic.com) ranked at: 540
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2022-12-23 04:09:10 UTC 52.43.58.150
scontent-arn2-2.xx.fbcdn.net (2) 87860 2018-12-13 19:32:03 UTC 2022-12-23 06:31:19 UTC 157.240.194.27

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2022-12-23 10:54:24 UTC 2  172.241.24.147 Client IP ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz) 
2022-12-23 10:54:24 UTC 2  172.241.24.147 Client IP ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz) 

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 199.34.228.66
Date UQ / IDS / BL URL IP
2023-03-22 20:21:08 +0000 0 - 1 - 0 www.pixarra.com/uploads/9/4/6/3/94635436/tbpi (...) 199.34.228.66
2023-03-22 19:08:45 +0000 0 - 1 - 0 www.pixarra.com/uploads/9/4/6/3/94635436/tbse (...) 199.34.228.66
2023-02-23 20:58:50 +0000 0 - 1 - 0 www.pixarra.com/uploads/9/4/6/3/94635436/tbpi (...) 199.34.228.66
2023-02-22 20:59:37 +0000 0 - 1 - 0 www.pixarra.com/uploads/9/4/6/3/94635436/tbru (...) 199.34.228.66
2023-02-21 15:58:18 +0000 0 - 1 - 0 www.pixarra.com/uploads/9/4/6/3/94635436/tbru (...) 199.34.228.66


Last 5 reports on ASN: WEEBLY
Date UQ / IDS / BL URL IP
2023-03-25 15:47:02 +0000 0 - 0 - 24 att-104553.weeblysite.com/ 199.34.228.97
2023-03-25 15:46:46 +0000 0 - 0 - 27 att-104660.weeblysite.com/ 199.34.228.96
2023-03-25 15:46:21 +0000 0 - 0 - 24 att-104737.weeblysite.com/ 199.34.228.96
2023-03-25 15:46:03 +0000 0 - 0 - 24 att-104589.weeblysite.com/ 199.34.228.97
2023-03-25 15:45:44 +0000 0 - 0 - 9 att-104519.weeblysite.com/ 199.34.228.96


Last 1 reports on domain: ferienhaus-anden5birken.de
Date UQ / IDS / BL URL IP
2022-12-23 10:54:36 +0000 0 - 2 - 0 www.ferienhaus-anden5birken.de/ 199.34.228.66


No other reports with similar screenshot

JavaScript

Executed Scripts (65)

Executed Evals (0)

Executed Writes (0)


HTTP Transactions (116)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3418
Expires: Fri, 23 Dec 2022 11:51:22 GMT
Date: Fri, 23 Dec 2022 10:54:24 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "4E9AAFF330CE0C9C11F6BB8502FE21296B1845151BACE75F73908A3194D5D0A1"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11760
Expires: Fri, 23 Dec 2022 14:10:24 GMT
Date: Fri, 23 Dec 2022 10:54:24 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 23 Dec 2022 10:46:06 GMT
age: 498
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    dcd75ca6daca51c5e39d431468511793
Sha1:   07f76d3bf23d65c9110d810fa71a994e39e085d3
Sha256: 73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BE30540F2E06A3565C9B38BDBB9691F707D692B196BDCEF5D671708AA9609795"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12214
Expires: Fri, 23 Dec 2022 14:17:58 GMT
Date: Fri, 23 Dec 2022 10:54:24 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: nUYHL4BEie+d29U3uA4AP/KMsWjqyA993uIG/mj7ny7qHj9vO2zGbJ9u3J+NRCXq/v3DvbSty4Q=
x-amz-request-id: HTTB2Z1JH1D9X9T1
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 23 Dec 2022 10:54:02 GMT
age: 22
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    b1fcd419a4245617397846e8d17233f6
Sha1:   2a037ce244587640b27ead9a0ec2af4f862d91b2
Sha256: e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 23 Dec 2022 10:54:24 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET / HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 23 Dec 2022 10:54:24 GMT
Server: Apache
Vary: X-W-SSL,Accept-Encoding,User-Agent
Set-Cookie: is_mobile=0; path=/; domain=www.ferienhaus-anden5birken.de language=en; expires=Fri, 06-Jan-2023 10:54:24 GMT; Max-Age=1209600; path=/
Cache-Control: private
ETag: W/"01fb7c04bfc766299357c893497a1bf4-gzip"
Content-Encoding: gzip
X-Host: grn10.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 13370
Keep-Alive: timeout=10, max=75
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2286), with CRLF, LF line terminators
Size:   13370
Md5:    c4ff0d8886076f1b51537116a565ec3e
Sha1:   17df2b92f5cc99904c74ad91354fd3e5ef461ca0
Sha256: cdcccea2b85876101e5e3c24b4e348a0a2fa4a05680eb61bac6bb473a172d591
                                        
                                            GET /css?family=Raleway:400,300,200,700&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 23 Dec 2022 10:54:25 GMT
Date: Fri, 23 Dec 2022 10:54:25 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   572
Md5:    2fa81690e41b4d84141465c6ad385eef
Sha1:   5c9d04e11dc99c2d3e6028f73ff93dad9f337d58
Sha256: fb4625e08d2005e21d7294dab87bc601e2360ae54f8921470fca000cd5f8ec4f
                                        
                                            GET /css?family=Lora:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 23 Dec 2022 10:54:25 GMT
Date: Fri, 23 Dec 2022 10:54:25 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   603
Md5:    12c9e8dd24f193e282f3e350296740b4
Sha1:   af62d74779c35a32dac013fdd63143d236069edf
Sha256: 1e50404b012030e1101f29006d7caadceeaf8e1c7aeab508113a1ec23da16f66
                                        
                                            GET /css?family=Gentium+Basic:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 23 Dec 2022 10:54:25 GMT
Date: Fri, 23 Dec 2022 10:54:25 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   455
Md5:    8955f61f007b5180b2236ae60ce3fa3a
Sha1:   aea4f9cfcba95f2fd332ff56ae8105aa0eff1522
Sha256: c3b5d27e233d937b319c71d357d5e7f1f3e816ff2dae6d11357b3d3dee29f05c
                                        
                                            GET /css?family=Playfair+Display:400,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 23 Dec 2022 10:54:25 GMT
Date: Fri, 23 Dec 2022 10:54:25 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   558
Md5:    de2df5765e9a8a64221d1bef18ff7825
Sha1:   6ba2e1fc90d3b8d134761cc55c21c84a8cf0fe3b
Sha256: 43737a44af8b68628ee3ef39ecab4749dfd0ca4808e78fdec75bc7be7d96a387
                                        
                                            GET /css?family=Montserrat:400,700&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 23 Dec 2022 10:54:25 GMT
Date: Fri, 23 Dec 2022 10:54:25 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   521
Md5:    b52e405858cd07e929b5387c0ed0d1de
Sha1:   8dc157b5ece5222f0f175eee9379a699dee76cd8
Sha256: e289bd897465ef8c6c74d81d09ee98cf500d744073df727158f6323caf335547
                                        
                                            GET /css?family=Josefin+Slab:400,300,300italic,700,400italic,700italic&subset=latin,latin-ext HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         142.250.74.106
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Fri, 23 Dec 2022 10:54:25 GMT
Date: Fri, 23 Dec 2022 10:54:25 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text
Size:   337
Md5:    ea823dfa8fe0d56fdc9e860e06b99ad6
Sha1:   96b93c1dd3fd3429d0333d7dc501c9ac254ee5c9
Sha256: f1a2eb65ffe38e0b906021fdccd866f16a35dfbb57c597932cf5062222054e83
                                        
                                            GET /fonts/Saginaw/font.css?2 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 131
Server: nginx
Last-Modified: Mon, 12 Dec 2022 18:45:57 GMT
ETag: "639776e5-a4"
Expires: Tue, 27 Dec 2022 08:39:30 GMT
Cache-Control: max-age=1209600
X-Host: grn43.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 872095
X-Served-By: cache-sjc10023-SJC, cache-bma1671-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 3, 1
X-Timer: S1671792865.094689,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text
Size:   131
Md5:    c1ae75d75df5957897f43d7823111e07
Sha1:   7864652f9d0431d9159ca7b5c2a2019811ec26e3
Sha256: 9fd66d4bace1195b5e6961b92acbe5aee7b1cabbdbb22b90fdaef3402987d49c
                                        
                                            GET /css/social-icons.css?buildtime=1642125481 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 1639
Server: nginx
Last-Modified: Mon, 12 Dec 2022 18:50:06 GMT
ETag: W/"639777de-3319"
Expires: Tue, 27 Dec 2022 08:12:00 GMT
Cache-Control: max-age=1209600
X-Host: blu136.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 873744
X-Served-By: cache-sjc10043-SJC, cache-bma1670-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 60, 2
X-Timer: S1671792865.095663,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (13080)
Size:   1639
Md5:    3978012761d73ee073633d656a4af4d7
Sha1:   cca9995ecd9657a3ebe2eac93133ad7fa471e971
Sha256: 06d0091b0c6c0ff56525333b88f2310e1dbce3296a95984a36060ef778de909b
                                        
                                            GET /css/sites.css?buildTime=123412341234 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 29746
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:14 GMT
ETag: W/"639ccce6-347ac"
Expires: Tue, 03 Jan 2023 11:00:10 GMT
Cache-Control: max-age=1209600
X-Host: grn22.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 258854
X-Served-By: cache-sjc10066-SJC, cache-bma1631-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 71, 1
X-Timer: S1671792865.094652,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   29746
Md5:    d10158b22b553f723d99dc78eaee6390
Sha1:   80f2d6670cfb0d01cd20c471cf8e3e6465ddd3f6
Sha256: 939c7a8e1ad74a44e0c847e38533e69e36454b6805d25acf3fb0cb5c472d245e
                                        
                                            GET /css/old/fancybox.css?1642125481 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Connection: keep-alive
Content-Length: 1218
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:20 GMT
ETag: "639cccec-f47"
Expires: Tue, 03 Jan 2023 13:50:44 GMT
Cache-Control: max-age=1209600
X-Host: grn11.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 248621
X-Served-By: cache-sjc10049-SJC, cache-bma1640-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 32, 1
X-Timer: S1671792865.097056,VS0,VE5
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (3910)
Size:   1218
Md5:    b644e92258f4c7c0b4270047652d1e60
Sha1:   93734d52ee9e86a768159e514076051813c39cd9
Sha256: 29199496fb817668f887938571046abcdfb49063d0207d571b361f221f467907
                                        
                                            GET /js/lang/de/stl.js?buildTime=123412341234& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 35592
Server: nginx
Last-Modified: Tue, 13 Dec 2022 23:21:59 GMT
ETag: "63990917-2e118"
Expires: Thu, 29 Dec 2022 11:47:37 GMT
Cache-Control: max-age=1209600
X-Host: grn38.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 688007
X-Served-By: cache-sjc10070-SJC, cache-bma1671-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 53, 1
X-Timer: S1671792865.106190,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (64733)
Size:   35592
Md5:    162fef61ad356f3548e006626b2db7c7
Sha1:   45c950c1784638ed7ef44692767d10444fa85e41
Sha256: 8058f35dd3363a44e0ff754f56f72e00c5d65ffdfa9553276073ce3fd5b4da7b
                                        
                                            GET /js/site/main.js?buildTime=123412341234 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 146400
Server: nginx
Last-Modified: Mon, 12 Dec 2022 18:50:32 GMT
ETag: "639777f8-74804"
Expires: Tue, 27 Dec 2022 08:37:54 GMT
Cache-Control: max-age=1209600
X-Host: grn155.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 872190
X-Served-By: cache-sjc10023-SJC, cache-bma1649-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 41, 1
X-Timer: S1671792865.102992,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (32147)
Size:   146400
Md5:    81b8673c5d3aa3ab8c0574f2a8f0e3b4
Sha1:   2e0661bc7907d9e2703b3347c3fec579f0aef5d6
Sha256: 0e981f4de6287406ce261fddea24aa05ded4b6a8c4c07283c363c1502071cf40
                                        
                                            GET /woys/5/js/w.js HTTP/1.1 
Host: static1.wetter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         143.204.55.125
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Fri, 23 Dec 2022 10:54:25 GMT
Content-Length: 167
Connection: keep-alive
Location: https://static1.wetter.com/woys/5/js/w.js
X-Cache: Redirect from cloudfront
Via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cAsuxV9i915078XBNztDW7kCjQt5RpRICeek3LCxv1SZGvwwIj-aAQ==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /woys/5/css/w.css HTTP/1.1 
Host: static1.wetter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         143.204.55.125
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Fri, 23 Dec 2022 10:54:25 GMT
Content-Length: 167
Connection: keep-alive
Location: https://static1.wetter.com/woys/5/css/w.css
X-Cache: Redirect from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hrxyGRuiV1m3AY8lM8YvkQo5598LnAC1SXtCbguDvqqlLjVwnWycSA==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /files/templateArtifacts.js?1642423304 HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn14.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  exported SGML document, ASCII text, with very long lines (1630)
Size:   1632
Md5:    e0836e8203c22b8e4086f27e91e86f5a
Sha1:   28235e77f5a895c8cd411aff4a6ef4e6f7d419c2
Sha256: 32dbc4a2eeca39a57d35670f00e2cf59e03c279521e47506c56c5c36d8b664b6
                                        
                                            GET /files/main_style.css?1642423304 HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Access-Control-Allow-Headers: Origin, Authorization, Content-Type
Access-Control-Allow-Methods: GET, POST, DELETE, OPTIONS
Access-Control-Allow-Origin: *
X-Host: grn62.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (437)
Size:   5171
Md5:    0b77a4f2b56ee2998be0294166567e76
Sha1:   2105ae7a793ff318e7b8cd4e067424d5ca75e132
Sha256: 9b651080322df59573125f1e1c434fd5cfdd950555ffc0e9f111813254a340a9
                                        
                                            GET /js/lang/de/stl.js?buildTime=1642125481& HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 35592
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:53:59 GMT
ETag: "639cccd7-2e118"
Expires: Tue, 03 Jan 2023 18:14:36 GMT
Cache-Control: max-age=1209600
X-Host: grn89.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 232788
X-Served-By: cache-sjc10024-SJC, cache-bma1647-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 27, 0
X-Timer: S1671792865.094536,VS0,VE171
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (64733)
Size:   35592
Md5:    162fef61ad356f3548e006626b2db7c7
Sha1:   45c950c1784638ed7ef44692767d10444fa85e41
Sha256: 8058f35dd3363a44e0ff754f56f72e00c5d65ffdfa9553276073ce3fd5b4da7b
                                        
                                            GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Dec 2022 16:26:31 GMT
expires: Wed, 20 Dec 2023 16:26:31 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 239274
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65483)
Size:   33593
Md5:    a54a444f20643b131117dc2112cca05f
Sha1:   074964746b12ff1d30f7656310d6154ae1cc98b5
Sha256: aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 747
Cache-Control: 'max-age=158059'
Date: Fri, 23 Dec 2022 10:54:25 GMT
Last-Modified: Fri, 23 Dec 2022 10:41:58 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 280

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Dec 2022 10:54:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: status.rapidssl.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2867
Cache-Control: max-age=141860
Date: Fri, 23 Dec 2022 10:54:25 GMT
Etag: "63a504d2-1d7"
Expires: Sun, 25 Dec 2022 02:18:45 GMT
Last-Modified: Fri, 23 Dec 2022 01:30:58 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: status.rapidssl.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2867
Cache-Control: max-age=141860
Date: Fri, 23 Dec 2022 10:54:25 GMT
Etag: "63a504d2-1d7"
Expires: Sun, 25 Dec 2022 02:18:45 GMT
Last-Modified: Fri, 23 Dec 2022 01:30:58 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /files/theme/mobile.js?1531150540 HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Sat, 22 May 2021 22:42:27 GMT
x-rgw-object-type: Normal
ETag: W/"008fd6990b3bdf96b9d46f87e52a7730"
x-amz-request-id: tx000000000000000d6f61c-0061a71649-a9f1ce7-sfo1
X-Storage-Bucket: z52fc
X-Storage-Object: 52fce566223a538d2037cd7f8ee707362452d0e935d018f857322f10c4446e64
X-Host: blu40.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   3048
Md5:    df46997a63ceb84c8708e197225bf22e
Sha1:   461b6fa23df29f7da9b3a03f3dba6f846bedf917
Sha256: 84881ad46cfd8cd5adf57ee99e47fd4790e655d5bfc4e45e0b833f0beeacb602
                                        
                                            GET /files/theme/custom.js?1531150540 HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Content-Length: 3233
Connection: keep-alive
Last-Modified: Mon, 16 May 2022 15:56:50 GMT
x-rgw-object-type: Normal
ETag: "6ddabf9ec1dae07f541de3e009969179"
x-amz-request-id: tx000000000000001c8669d-00628495b3-b9fbc77-sfo1
X-Storage-Bucket: zc057
X-Storage-Object: c057541328f3e6fcee23c1ec11a2d1d57dc8450e5ad366d56d41df4202955765
X-Host: grn141.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text
Size:   3233
Md5:    6ddabf9ec1dae07f541de3e009969179
Sha1:   37359e9551b6247c7a8fe9f2d7f6a05e18ccb7d5
Sha256: c057541328f3e6fcee23c1ec11a2d1d57dc8450e5ad366d56d41df4202955765
                                        
                                            GET /woys/5/js/w.js HTTP/1.1 
Host: static1.wetter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ferienhaus-anden5birken.de/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.125
HTTP/2 200 OK
content-type: application/javascript
                                        
last-modified: Fri, 26 Jan 2018 10:58:29 GMT
x-amz-version-id: 2jN65F88gVRoDEfzU8gjI.2bTo2W4x2.
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 02:05:30 GMT
etag: W/"8eb35ea7bb8a084783e50e5f86b7056d"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: vrhgoYHJXCZhDBFpo4r56qu12cxTlCF_VT089m5LgNNSwigL3T78dQ==
age: 31736
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   1279
Md5:    43ced151e6e8ae26db77c3ad11bbdbc6
Sha1:   57244d6435728d0acf46e04da243964816430f48
Sha256: 29a3d62d728c2c45c99e2c59dc93d6842d6b6b5c43a12eb3734a8bac8827a5da
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BA87C7CD29A4D77E15F09FB365643AFFE7BF58E68DC0BF483C5A51A729205B81"
Last-Modified: Thu, 22 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16319
Expires: Fri, 23 Dec 2022 15:26:24 GMT
Date: Fri, 23 Dec 2022 10:54:25 GMT
Connection: keep-alive

                                        
                                            GET /files/theme/plugins.js?1531150540 HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 21 May 2021 20:17:30 GMT
x-rgw-object-type: Normal
ETag: W/"7f6df4939d4102a752a5c1989d81afd4"
x-amz-request-id: tx000000000000001c534da-0062848d19-b9fbc7f-sfo1
X-Storage-Bucket: z6ee5
X-Storage-Object: 6ee5ff05679a26a9027cbb63cadee08104fa248a93d3582a333a5d134c25460b
X-Host: blu146.sf2p.intern.weebly.net
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text
Size:   18996
Md5:    17c0b51cd6ba1b91479bfe0274feed18
Sha1:   785a5cfa1ee86fd40b1a9deab58477ac101cb20a
Sha256: 64fa489daea8001c79f266c076946a1dd2b3568d3c6810bc1db9fb27529dee28
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Pragma, Alert, ETag, Content-Type, Last-Modified, Cache-Control, Expires, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 23 Dec 2022 10:08:02 GMT
age: 2783
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /static/js/xdLocalStorage.min.0783722e1a05.js HTTP/1.1 
Host: app.multilanguage.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.241.24.147
HTTP/2 404 Not Found
content-type: text/html; charset=iso-8859-1
                                        
server: nginx
date: Fri, 23 Dec 2022 10:54:25 GMT
content-length: 313
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   313
Md5:    e1fe17c4077c2f7df8a6122efcd2737e
Sha1:   b21d3f3d7f03bca6f6377ddbc5d9e695db6701cc
Sha256: 4984cd7c9cc4e4438b6ea7a3893ca9fe1f51cd0d3ec6f4016b59df99218a041d
                                        
                                            GET /media/snippets/acc_9013.js HTTP/1.1 
Host: app.multilanguage.xyz
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.241.24.147
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx
date: Fri, 23 Dec 2022 10:54:25 GMT
content-length: 41
last-modified: Tue, 24 May 2022 18:06:57 GMT
etag: "29-5dfc5d28ab0f8"
accept-ranges: bytes
cache-control: max-age=600, public
expires: Fri, 23 Dec 2022 11:04:25 GMT
access-control-allow-origin: *
vary: User-Agent
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   41
Md5:    7a492b2815c3541a9a61b73a4ef84c7d
Sha1:   fc7e2f73cef88cdb67263e8803029493a90447e7
Sha256: 0e1355bbec2773aaa2cc636237c6f1485351007d9dbef55c2547e7137254d12d
                                        
                                            GET /fonts/Saginaw/regular.ttf HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://cdn2.editmysite.com/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Connection: keep-alive
Content-Length: 48317
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:50:32 GMT
ETag: "639ccc08-14224"
Expires: Tue, 03 Jan 2023 10:57:12 GMT
Cache-Control: max-age=1209600
X-Host: blu12.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 259033
X-Served-By: cache-sjc10076-SJC, cache-bma1668-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 10, 1
X-Timer: S1671792866.858038,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  TrueType Font data, 16 tables, 1st "OS/2", 24 names, Unicode\012- data
Size:   48317
Md5:    619f6a9b7fae197ccc321cf8f54e448e
Sha1:   fde2fc807c7c596af8b49a8e3295bc1f4b1fa557
Sha256: 2b1752beda24f301b7c802af5ed323bd7ec374c3a59312f7ff165e0bbcf713f0
                                        
                                            GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 46524
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 20 Dec 2022 14:12:39 GMT
Expires: Wed, 20 Dec 2023 14:12:39 GMT
Cache-Control: public, max-age=31536000
Age: 247306
Last-Modified: Mon, 18 Jul 2022 19:58:01 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Size:   46524
Md5:    c1fd378f54921c75e4ae1821e7b8fff6
Sha1:   2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
Sha256: 405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1655
Cache-Control: max-age=113631
Date: Fri, 23 Dec 2022 10:54:25 GMT
Etag: "63a49b49-1d7"
Expires: Sat, 24 Dec 2022 18:28:16 GMT
Last-Modified: Thu, 22 Dec 2022 18:00:41 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /s/gentiumbasic/v18/Wnz9HAw9aB_JD2VGQVR80We3LA2JiA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 22300
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Dec 2022 14:18:11 GMT
Expires: Thu, 21 Dec 2023 14:18:11 GMT
Cache-Control: public, max-age=31536000
Age: 160574
Last-Modified: Mon, 18 Jul 2022 19:39:24 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 22300, version 1.0\012- data
Size:   22300
Md5:    52816d3afe8fe9387bedba3ead9ea741
Sha1:   7b1d04d4a5668d54eecce9f1e2532bc3cdcdc351
Sha256: d797eb315470e8d46f5253a69a148138ba87353a08d2e566c1b35fb58ae152d9
                                        
                                            GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 30928
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 16 Dec 2022 13:33:46 GMT
Expires: Sat, 16 Dec 2023 13:33:46 GMT
Cache-Control: public, max-age=31536000
Age: 595239
Last-Modified: Mon, 11 Jul 2022 18:57:39 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Size:   30928
Md5:    ac0d2859ea5f8fd6bcb3c305c08ec184
Sha1:   7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
Sha256: ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
                                        
                                            GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 35764
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 20 Dec 2022 15:03:47 GMT
Expires: Wed, 20 Dec 2023 15:03:47 GMT
Cache-Control: public, max-age=31536000
Age: 244238
Last-Modified: Mon, 18 Jul 2022 19:06:36 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Size:   35764
Md5:    60f23230f1a8d5c3b7d25b73f5b5ce23
Sha1:   ed08ada85d017893b9bcb8224e99154c6708f5d2
Sha256: 22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
                                        
                                            GET /s/gentiumbasic/v18/WnzgHAw9aB_JD2VGQVR80We3JLasnT0ebQ.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://fonts.googleapis.com/

search
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff2
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 23092
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 18 Dec 2022 17:18:06 GMT
Expires: Mon, 18 Dec 2023 17:18:06 GMT
Cache-Control: public, max-age=31536000
Age: 408979
Last-Modified: Mon, 18 Jul 2022 19:21:41 GMT


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 23092, version 1.0\012- data
Size:   23092
Md5:    fbc48f4ba67342809d14d913827fe06e
Sha1:   65c83346eba829399cc81adbcd92ec3310516bd2
Sha256: 93fee62a91f4982e7e8b93a0f1e19d1d2d99bbdd7c8cf5f4bfee53368fe26032
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4278
Cache-Control: max-age=170620
Date: Fri, 23 Dec 2022 10:54:25 GMT
Etag: "63a56fa7-1d7"
Expires: Sun, 25 Dec 2022 10:18:05 GMT
Last-Modified: Fri, 23 Dec 2022 09:06:47 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /uploads/4/6/8/5/46854823/published/logomitsternen.png?1642423247 HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Content-Length: 27562
Connection: keep-alive
Last-Modified: Mon, 17 Jan 2022 12:40:47 GMT
x-rgw-object-type: Normal
ETag: "d30d60ada9df7ec8b252a83157207e71"
x-amz-request-id: tx00000000000004e6e89a6-0063a4820e-c669cc6-sfo1
X-Storage-Bucket: zf740
X-Storage-Object: f7401c241ab569745c1202e61b4ce8156c3bc6bcc1fad30f8340b64f770894c6
X-Host: grn72.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 399 x 64, 8-bit/color RGBA, non-interlaced\012- data
Size:   27562
Md5:    d30d60ada9df7ec8b252a83157207e71
Sha1:   4c08cedef45ec137e2ec57dcdd398fce3c3e59cb
Sha256: f7401c241ab569745c1202e61b4ce8156c3bc6bcc1fad30f8340b64f770894c6
                                        
                                            GET /uploads/4/6/8/5/46854823/sep_1.png?1476887489 HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Content-Length: 154
Connection: keep-alive
Last-Modified: Fri, 24 Jan 2020 10:27:40 GMT
x-rgw-object-type: Normal
ETag: "81daccb6b95aea1d75f1c6bb90580884"
x-amz-request-id: tx00000000000004e8838e3-0063a43870-c695612-sfo1
X-Storage-Bucket: zc0e0
X-Storage-Object: c0e0325205b7a72229696d0b4f825ba8567ce5fb4076d8f96ea3c6e680a1ff94
X-Host: grn141.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 39 x 12, 8-bit/color RGBA, non-interlaced\012- data
Size:   154
Md5:    81daccb6b95aea1d75f1c6bb90580884
Sha1:   2feee369ab0a6c49bc350ea5f4fa935b26ed70b0
Sha256: c0e0325205b7a72229696d0b4f825ba8567ce5fb4076d8f96ea3c6e680a1ff94
                                        
                                            GET /uploads/4/6/8/5/46854823/icon-phone_1_orig.png HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Content-Length: 910
Connection: keep-alive
Last-Modified: Wed, 26 Oct 2022 01:18:54 GMT
x-rgw-object-type: Normal
ETag: "a52c0724e94161902ce0cd4ae934e393"
x-amz-request-id: tx00000000000004161456a-00638d1dfd-c695612-sfo1
X-Storage-Bucket: z34c1
X-Storage-Object: 34c13e0aac11e57c45d1f40f66d8e57722c29cc7678625d8a222338b15b398ee
X-Host: grn14.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 30 x 31, 8-bit/color RGBA, non-interlaced\012- data
Size:   910
Md5:    a52c0724e94161902ce0cd4ae934e393
Sha1:   18b3577e56e18cff2a19492c73d4994149b4be3d
Sha256: 34c13e0aac11e57c45d1f40f66d8e57722c29cc7678625d8a222338b15b398ee
                                        
                                            GET /js/wsnbn/snowday262.js HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 25752
Server: nginx
Last-Modified: Fri, 16 Dec 2022 19:54:04 GMT
ETag: "639cccdc-124fe"
Expires: Thu, 05 Jan 2023 08:38:41 GMT
Cache-Control: max-age=1209600
X-Host: blu75.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 94544
X-Served-By: cache-sjc10061-SJC, cache-bma1670-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 30, 822
X-Timer: S1671792866.943455,VS0,VE0
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
Magic:  ASCII text, with very long lines (2512)
Size:   25752
Md5:    234327230add9a5a5d61a48829ea4565
Sha1:   7966cc0e4bd76f88ff193c8a99a067de804b7129
Sha256: bb696c58d9ae5fa635b3ff22efdf60de9ac2f8ef9df5e2f2d58dd5f8dc99df75
                                        
                                            GET /plugins/like.php?href=https%3A%2F%2Fwww.facebook.com%2FAnden5Birken&width=102&layout=box_count&action=like&size=large&show_faces=false&share=false&height=65&appId HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         31.13.72.36
HTTP/2 200 OK
content-type: text/html;charset=utf-8
                                        
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: FVcYpZ/SaLxO0VKYsyl6fs84AbGgvvwUBRYRFAt/nZ1MqgLyGZWe7TfbLSjEPyusngr7KXJikq4xp4pf4+NP0Q==
content-length: 0
date: Fri, 23 Dec 2022 10:54:25 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1655
Cache-Control: max-age=113631
Date: Fri, 23 Dec 2022 10:54:25 GMT
Etag: "63a49b49-1d7"
Expires: Sat, 24 Dec 2022 18:28:16 GMT
Last-Modified: Thu, 22 Dec 2022 18:00:41 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            OPTIONS /apps_und_mehr/website/ajaxwidget/ HTTP/1.1 
Host: www.wetter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-requested-with,x-widget-format,x-widget-id,x-widget-location,x-widget-type
Referer: http://www.ferienhaus-anden5birken.de/
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.98
HTTP/2 204 No Content
                                        
access-control-allow-credentials: true
access-control-allow-headers: Content-Type,Accept,Origin,User-Agent,Cache-Control,Keep-Alive,X-Requested-With,If-Modified-Since,X-Widget-Id,X-Widget-Format,X-Widget-Type,X-Widget-Location,x-filter-country,x-filter-channel,x-filter-sortkey,x-filter-sortorder,x-filter-page,x-filter-values
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3600
cache-control: public
date: Fri, 23 Dec 2022 10:49:21 GMT
expires: Fri, 23 Dec 2022 11:49:21 GMT
grace: none
referrer-policy: strict-origin-when-cross-origin
x-backend: blue
x-cache-hits: 0
x-content-type-options: nosniff
x-forwarded-proto: https
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
vary: X-Requested-With,X-Widget-Id,X-Widget-Format,X-Widget-Type,X-Widget-Location,User-Agent
x-cache: Hit from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: b2GCXnvi_-g9UsqnpNyyV0b-svnmqBCg91JyQoL8kDrnuPi1cOwWGQ==
age: 305
X-Firefox-Spdy: h2

                                        
                                            GET /apps_und_mehr/website/ajaxwidget/ HTTP/1.1 
Host: www.wetter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
X-Widget-Id: wcom-2302caf270f6543608dff861c5218a1b
X-Widget-Location: DE0006543001
X-Widget-Format: 300x250
X-Widget-Type: summary
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         143.204.55.98
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
content-length: 895
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-headers: *
access-control-allow-methods: GET, HEAD
access-control-allow-origin: *
cache-control: public
content-encoding: gzip
date: Fri, 23 Dec 2022 10:54:26 GMT
expires: Fri, 23 Dec 2022 11:54:26 GMT
grace: none
referrer-policy: strict-origin-when-cross-origin
x-backend: blue
x-cache-hits: 0
x-content-type-options: nosniff
x-forwarded-proto: https
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
vary: X-Requested-With,X-Widget-Id,X-Widget-Format,X-Widget-Type,X-Widget-Location,User-Agent,Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 71c98156ae29b36a903974f9dd2568f8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: QZiZ77v7CSBJ0dU3D-VmamxMKzYjwjESxfa03mUEQ5G9d_Ma4toYbw==
age: 0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   895
Md5:    27141ebfc6f41f7dbbdb9402eba4a440
Sha1:   1dc384ed44a1aa56e351ab1eb786b8e6e74ea401
Sha256: 1c013d1fcfa5721e43e697de79f99f26a1fe05e33cb13f6326d8e44a81026a86
                                        
                                            GET /uploads/4/6/8/5/46854823/published/8c225f52-24d7-4c20-8dfd-959e4fb48f56.jpeg?1613559086 HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 13266
Connection: keep-alive
Last-Modified: Wed, 17 Feb 2021 10:51:26 GMT
x-rgw-object-type: Normal
ETag: "58ad5b0834d5701a2ca72d4d87575119"
x-amz-request-id: tx00000000000004d85d238-0063a4820f-c67eadd-sfo1
X-Storage-Bucket: ze8d7
X-Storage-Object: e8d7eef76d8b3b4dbfee0d01c15234364e4490f76d8a13b10ff3a8c5fc77a428
X-Host: grn14.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 515x135, components 3\012- data
Size:   13266
Md5:    58ad5b0834d5701a2ca72d4d87575119
Sha1:   0fd6c550ae65371ca6c616680cd785372a989d52
Sha256: e8d7eef76d8b3b4dbfee0d01c15234364e4490f76d8a13b10ff3a8c5fc77a428
                                        
                                            GET /uploads/4/6/8/5/46854823/logo-eifel.jpg HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 8530
Connection: keep-alive
Last-Modified: Fri, 24 Jan 2020 10:26:19 GMT
x-rgw-object-type: Normal
ETag: "9e10f037ad3220771fd39ca55fe17d6c"
x-amz-request-id: tx00000000000004eef528a-0063a588e2-c669cc6-sfo1
X-Storage-Bucket: zf512
X-Storage-Object: f51219b4fe1b16aa2c6ab666b9701de86a599a0db9cffc51ed9c879e02b4e07a
X-Host: grn73.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 101x145, components 3\012- data
Size:   8530
Md5:    9e10f037ad3220771fd39ca55fe17d6c
Sha1:   9cd638ab7e42d1615f5db1f5ba18280e2600adae
Sha256: f51219b4fe1b16aa2c6ab666b9701de86a599a0db9cffc51ed9c879e02b4e07a
                                        
                                            GET /rsrc.php/v3/yn/l/0,cross/-HGPTKcj37t.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 15:32:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 1joCzofAf/z6hp/vf8XyMw==
x-fb-debug: 4IUIs+VkoLHDgtFP2JuGWbpu1NF3pAPGoZk4O4LFlqQo0rQ7D4ZAQ77agQzBQ/qGLouza/xw5OoSx+lG8TWvpA==
priority: u=3,i
content-length: 830
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (724)
Size:   830
Md5:    d63a02ce87c07ffcfa869fef7fc5f233
Sha1:   cae745fef84088abe3525bb77f75c55cd1d4cc2c
Sha256: bf9d4d71541a0a1f31b10be351add847ee935da6de355756314c8ca96512444d
                                        
                                            GET /plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2FAnden5Birken&tabs=timeline&width=500&height=800&small_header=true&adapt_container_width=true&hide_cover=false&show_facepile=false&appId HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.36
HTTP/2 200 OK
content-type: text/html; charset="utf-8"
                                        
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
x-fb-debug: NZg9+19p5+WI9AMul+jePNl/VjL7AUDpXMLI2r6XTKAuMqaFpUnbKH1QPqL3zO3gQg4xkrOSxutNz3ha73XT5Q==
date: Fri, 23 Dec 2022 10:54:26 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (16835)
Size:   19847
Md5:    0df28495a5cdbe9087c38f2a5578e41a
Sha1:   af8baadf138d3c93037b58e736d376ad97a2121e
Sha256: c9db5aa74639415c33409f35d3679bb84ded66a7f1298c2fc3e2bd49de2adff2
                                        
                                            GET /rsrc.php/v3/yv/r/GG1Y0sYc7My.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 13:47:36 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: koakLGY1v5R2GWTxsSnA3g==
x-fb-debug: WcHbJWlvUdzpL+hxxdaY4u14r8KvrfP1dpQOMFVhsfPshD5cS/3aP2YuPmwz06o9j0A1bx/mZ6O+RSxfTqLKtQ==
content-length: 1615
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1984)
Size:   1615
Md5:    9286a42c6635bf94761964f1b129c0de
Sha1:   21d966c8e5833bec35fd039f80e6f7e47185743a
Sha256: da4067af50abaeaa27b4dfc7f3accf1346f13d9fd9d3821222bc820378c7ed00
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8lojv5vKBuRCyrQCIT1I4A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.43.58.150
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: i3DYulwlBgCA6geDluM6wVb56U0=

                                        
                                            POST / HTTP/1.1 
Host: status.rapidssl.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5293
Cache-Control: 'max-age=158059'
Date: Fri, 23 Dec 2022 10:54:26 GMT
Last-Modified: Fri, 23 Dec 2022 09:26:13 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /rsrc.php/v3/yZ/r/0cKQbVrk19s.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Dec 2023 16:25:00 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: q8AcXLnh9lqBhL0/oorl3w==
x-fb-debug: PEI5GX+hbcDjnmK2QswxK1U+h5VvfYoRdBVHOQyty027ZXRTYHPsy1/MvHR3FBETfOcn3qWds4Vy5T9k2WqFxA==
content-length: 6166
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (10595)
Size:   6166
Md5:    abc01c5cb9e1f65a8184bd3fa28ae5df
Sha1:   9483687c254802204e18d50976e413162fa21481
Sha256: 482ebf05a0d3aaa255cf9fe29ae7016d2f0efcf0a88d5e31da31c9ad2f14a9e8
                                        
                                            GET /rsrc.php/v3/yf/r/uftvpBOwAM5.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 12 Dec 2023 19:18:07 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: 7vivW+h1XiwwTf7Kl8bIuQ==
x-fb-debug: DQA7CEEalbLyIkINdpmwdck54KCYNaa5CFNV2SfQ0SuGwzMnQgtrq2P1AgHtLZ3KwDNZtvKOGDEBPJpGvK9nXQ==
content-length: 5272
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5828)
Size:   5272
Md5:    eef8af5be8755e2c304dfeca97c6c8b9
Sha1:   c712189796acf6eb6fcceaffe551b25efd475a14
Sha256: c3e1914f40e29bafe042cbd8f9f2bd58a257523c0ef86764eb91a18ed2980c42
                                        
                                            GET /rsrc.php/v3/yL/r/PlsnJC666Fj.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 16 Dec 2023 10:01:55 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: hVuam4DUwYYlPrpODRSxjQ==
x-fb-debug: 79PRpUI5725nFdxoLMb3MWriQQrcaSKEiQJkfONF+NGYqMlCrFsl9G/jdR7CMP0SlYUafsrpormDeILmdh7Ckg==
content-length: 6772
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (7780)
Size:   6772
Md5:    855b9a9b80d4c186253eba4e0d14b18d
Sha1:   9af34af716b9116d91c7e2012f35cc756afdfbd3
Sha256: 39f68beab2325364f3a27998ec9692c7275ae0fb6d979fc3730bf881b65975ce
                                        
                                            GET /rsrc.php/v3/y6/r/8LoDHCcRMmF.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Dec 2023 02:03:09 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: GtFa/ANPMQQnyBsHWWA6Kw==
x-fb-debug: qzWSlkajReW9Myxaw0qgu0wZzVwIDt5a2Qv7OVAzL853BZmj4xEq2lH+gM4PWHvAcixloP+naH9ZQEjs/oxAAw==
priority: u=3,i
content-length: 12334
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (5542)
Size:   12334
Md5:    1ad15afc034f310427c81b0759603a2b
Sha1:   e5efd1d029dccf5fa8128c84aadb6544a4ab60e0
Sha256: fedf63f655f9eef24c517c3d6762fb07b142213ba623d4a0b06614fb5d9754bd
                                        
                                            GET /rsrc.php/v3/yR/r/bPhRbIw5d4Y.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 16:05:40 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: yS75TjCi3ZRz/Z/lM0crcw==
x-fb-debug: evfItOvloioR/c07+wzrqPKDMVqsk/rikSZVsPDWuuSLYzVS0mhaVWm1QUEZB+vjKQxZfthMJ9fa+d0PRM5ryg==
priority: u=3,i
content-length: 16232
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  C source, ASCII text, with very long lines (8741)
Size:   16232
Md5:    c92ef94e30a2dd9473fd9fe533472b73
Sha1:   97049e47de026939c75a885df9e8bb0fb56515ba
Sha256: f2981c7109e60cf9f5a9e846a25800dbec20a923db028f310b6feb79415650bb
                                        
                                            GET /rsrc.php/v3/yF/r/p55HfXW__mM.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 17:31:15 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: L5E9gSgR735vyjAzTFly4g==
x-fb-debug: JozAmGbv6Q/ypW/9mFDVhGRDvJLzH96hRCFe+yQPfrlShbw5A4aCDLFTAzn9dp0NGAOLoyROVOJyykTX7wApIw==
content-length: 293
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (327)
Size:   293
Md5:    2f913d812811ef7e6fca30334c5972e2
Sha1:   d17caaa167443dc08696c672380f237e0db3fb02
Sha256: ee8918a2f5d163099104b70f79065abc8fd309e69add57170546f2706956eef8
                                        
                                            GET /rsrc.php/v3iLl54/yd/l/en_US/h-L8FQ7MyJY.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Fri, 15 Dec 2023 00:14:50 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: s9m754Y5dqpbRuAsd5isyA==
x-fb-debug: 3BLS+Qm1ZUHLXx82YSKNT1gnfbKWPgiF7O/N3DuBIKFX6StRH+n3Dcp5m4K1meSXwOLPfnt9NrJ8jHz6AAbd5A==
priority: u=3,i
content-length: 7100
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2905)
Size:   7100
Md5:    b3d9bbe7863976aa5b46e02c7798acc8
Sha1:   f3534203ec245879da839b07de21385a5203556d
Sha256: f29d8841fd47e887686263e49027672a365baa6362e277192f635b303c9e016d
                                        
                                            GET /rsrc.php/v3/yY/r/7Nmln25n6YE.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Thu, 14 Dec 2023 23:55:55 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: fLiXl86iqEuUjfrlPQyQ1A==
x-fb-debug: pAY8ZAeet6yD0eOLrGuNEV4u5iYA343gdKx7UPMMviWL50Yvn8ZkonCOplMS1HSj7Sw/t2GUzrJHghUx3NftDQ==
priority: u=3,i
content-length: 7199
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4057)
Size:   7199
Md5:    7cb89797cea2a84b948dfae53d0c90d4
Sha1:   312bdda4ae1efe3ab71fb0aec473ddc725627f5b
Sha256: 9093dc3e084b6a216b34c7a603eae5a93f793dc5b0a606ccb0da051d5aa12cd4
                                        
                                            GET /uploads/4/6/8/5/46854823/background-images/600869306.jpg HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 125446
Connection: keep-alive
Last-Modified: Fri, 24 Jan 2020 10:26:45 GMT
x-rgw-object-type: Normal
ETag: "b692277f9224093488b75be77990ab65"
x-amz-request-id: tx00000000000004e5ee9c6-0063a4a312-c696eea-sfo1
X-Storage-Bucket: z8071
X-Storage-Object: 80716154e70cd858c365b451b9329370f65abfaeae98a056f6ad349ff36b0b64
X-Host: grn132.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Panasonic, model=DMC-FZ28, resolutionunit=2, software=MAGIX Web Designer 11 Premium, datetime=2014:09:14 21:36:26], baseline, precision 8, 900x488, components 3\012- data
Size:   125446
Md5:    b692277f9224093488b75be77990ab65
Sha1:   a777bd774b71e26798ae24869586e714e8eb402b
Sha256: 80716154e70cd858c365b451b9329370f65abfaeae98a056f6ad349ff36b0b64
                                        
                                            OPTIONS /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://www.ferienhaus-anden5birken.de/
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive

search
                                         44.232.197.188
HTTP/1.1 200 OK
                                        
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 0
Connection: keep-alive
Server: nginx
Access-Control-Allow-Origin: http://www.ferienhaus-anden5birken.de
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, SP-Anonymous
Access-Control-Max-Age: 600

                                        
                                            GET /uploads/4/6/8/5/46854823/icon-map_1_orig.png HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 781
Connection: keep-alive
Last-Modified: Mon, 06 Jun 2022 23:07:42 GMT
x-rgw-object-type: Normal
ETag: "65b968d8c46cfecc3f3c4c6a8f1f07c2"
x-amz-request-id: tx0000000000000259c0a9d-0062fc5c6b-c0351b0-sfo1
X-Storage-Bucket: z9eea
X-Storage-Object: 9eea27e7ece1faabaad5ef63a995d3515e317a921b19316e1b8fb463eed00064
X-Host: grn141.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 20 x 30, 8-bit/color RGBA, non-interlaced\012- data
Size:   781
Md5:    65b968d8c46cfecc3f3c4c6a8f1f07c2
Sha1:   17764e89564e283d671c5d2baa8264474f1deee0
Sha256: 9eea27e7ece1faabaad5ef63a995d3515e317a921b19316e1b8fb463eed00064
                                        
                                            POST /com.snowplowanalytics.snowplow/tp2 HTTP/1.1 
Host: ec.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
Content-Length: 1783
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         44.232.197.188
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
                                        
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 2
Connection: keep-alive
Server: nginx
Set-Cookie: sp=880b293b-cced-478c-bed6-66ea2b63534f; Expires=Sat, 23 Dec 2023 10:54:26 GMT; Domain=; Path=/; Secure; SameSite=None
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR NID PSA OUR IND COM NAV STA"
Access-Control-Allow-Origin: http://www.ferienhaus-anden5birken.de
Access-Control-Allow-Credentials: true


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    444bcb3a3fcf8389296c49467f27e1d6
Sha1:   7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
Sha256: 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
                                        
                                            GET /uploads/4/6/8/5/46854823/f98d0826-d139-46aa-990e-1725851b7ff8.jpeg HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Content-Length: 199607
Connection: keep-alive
Last-Modified: Thu, 08 Apr 2021 16:28:02 GMT
x-rgw-object-type: Normal
ETag: "e779742364f0094f608b6d4a6efc5376"
x-amz-request-id: tx00000000000004d5f3ffe-0063a498ee-c6aed46-sfo1
X-Storage-Bucket: z7719
X-Storage-Object: 7719a0f3923d2baed8a7f2b4c2ee18cddc0f0d18552d1dd3231115663fc27a9e
X-Host: blu146.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x600, components 3\012- data
Size:   199607
Md5:    e779742364f0094f608b6d4a6efc5376
Sha1:   b1b62332e7ae6c725b14b80245b394316087f2a1
Sha256: 7719a0f3923d2baed8a7f2b4c2ee18cddc0f0d18552d1dd3231115663fc27a9e
                                        
                                            GET /uploads/4/6/8/5/46854823/icon-email_1.png?52 HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 1867
Connection: keep-alive
Last-Modified: Tue, 08 Oct 2019 22:51:32 GMT
x-rgw-object-type: Normal
ETag: "3d942927fe5f20dbc6b6c84a44fc605e"
x-amz-request-id: tx000000000000045f630b0-0063975694-c6aed46-sfo1
X-Storage-Bucket: z6b74
X-Storage-Object: 6b744df9ed0cbb3273e8ccbaa945bef6209f8046e70d5cc438544409c517862c
X-Host: grn77.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image data, 51 x 34, 8-bit/color RGBA, non-interlaced\012- data
Size:   1867
Md5:    3d942927fe5f20dbc6b6c84a44fc605e
Sha1:   aa78f961d51e73cb34efb6450e84f5c10b20a89a
Sha256: 6b744df9ed0cbb3273e8ccbaa945bef6209f8046e70d5cc438544409c517862c
                                        
                                            GET /uploads/4/6/8/5/46854823/background-images/1889606702.jpg HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 74504
Connection: keep-alive
Last-Modified: Fri, 24 Jan 2020 10:29:10 GMT
x-rgw-object-type: Normal
ETag: "0c4448670b9e4c41221ece6d4b2f745d"
x-amz-request-id: tx00000000000004e25a19f-0063a43871-c696eea-sfo1
X-Storage-Bucket: z8420
X-Storage-Object: 84209498d5860bf4d34e07a93447b81a2115c30b26f049a5cb55fea24c3d2d61
X-Host: blu149.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=11, manufacturer=Panasonic, model=DMC-FZ28, resolutionunit=2, software=MAGIX Web Designer 11 Premium, datetime=2013:07:15 15:50:27], baseline, precision 8, 900x489, components 3\012- data
Size:   74504
Md5:    0c4448670b9e4c41221ece6d4b2f745d
Sha1:   f9ff82b0eef7830afd15fb57faa99a6506cb0f56
Sha256: 84209498d5860bf4d34e07a93447b81a2115c30b26f049a5cb55fea24c3d2d61
                                        
                                            GET /uploads/4/6/8/5/46854823/background-images/1585029612.jpg HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 273401
Connection: keep-alive
Last-Modified: Fri, 24 Jan 2020 10:29:17 GMT
x-rgw-object-type: Normal
ETag: "019ec03e69a3d2a5cc0bd431afc961ac"
x-amz-request-id: tx00000000000004dae8d63-0063a30dab-c669cc6-sfo1
X-Storage-Bucket: ze773
X-Storage-Object: e773423f9d4229254aa16863db366355798e4f8d6dc8661f7c63984aff1d4b0e
X-Host: blu61.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1300x975, components 3\012- data
Size:   273401
Md5:    019ec03e69a3d2a5cc0bd431afc961ac
Sha1:   09763bbcf4650d501c0665bd75b43c7ee5300d31
Sha256: e773423f9d4229254aa16863db366355798e4f8d6dc8661f7c63984aff1d4b0e
                                        
                                            GET /uploads/4/6/8/5/46854823/grillkota-min-2_orig.jpg HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 217687
Connection: keep-alive
Last-Modified: Fri, 24 Jan 2020 10:29:30 GMT
x-rgw-object-type: Normal
ETag: "c688ae541a5f5fe1de22f9f87407f134"
x-amz-request-id: tx00000000000004a958b61-00639f63c2-c6aed46-sfo1
X-Storage-Bucket: za572
X-Storage-Object: a572db7c9ac3aa5305f70d88673eeea66b08da1a319b90746f9f9c6210e65115
X-Host: grn152.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 800x600, components 3\012- data
Size:   217687
Md5:    c688ae541a5f5fe1de22f9f87407f134
Sha1:   ca2c7a98d2c747f862f32f14e4c0d18798dc50c0
Sha256: a572db7c9ac3aa5305f70d88673eeea66b08da1a319b90746f9f9c6210e65115
                                        
                                            GET /uploads/4/6/8/5/46854823/b88ead81-66bc-4b50-9768-3a8432831209_orig.jpeg HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:26 GMT
Content-Length: 121886
Connection: keep-alive
Last-Modified: Wed, 17 Feb 2021 10:45:49 GMT
x-rgw-object-type: Normal
ETag: "837ce30b36a4f674d100ff54455b7162"
x-amz-request-id: tx00000000000004eda8422-0063a5508b-c669cc6-sfo1
X-Storage-Bucket: z512f
X-Storage-Object: 512ffa15920289a55a49e8f57050a5da067ecbbbffcce0497e895b28ef9b68a2
X-Host: grn82.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1067x800, components 3\012- data
Size:   121886
Md5:    837ce30b36a4f674d100ff54455b7162
Sha1:   1c7eb6e3cb7c19bf8c46aa1957183ce88a53ba30
Sha256: 512ffa15920289a55a49e8f57050a5da067ecbbbffcce0497e895b28ef9b68a2
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14358
Expires: Fri, 23 Dec 2022 14:53:45 GMT
Date: Fri, 23 Dec 2022 10:54:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14358
Expires: Fri, 23 Dec 2022 14:53:45 GMT
Date: Fri, 23 Dec 2022 10:54:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14358
Expires: Fri, 23 Dec 2022 14:53:45 GMT
Date: Fri, 23 Dec 2022 10:54:27 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14358
Expires: Fri, 23 Dec 2022 14:53:45 GMT
Date: Fri, 23 Dec 2022 10:54:27 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdce5468-cf1b-4a55-968b-1aaa101e60d6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11939
x-amzn-requestid: a00e5ab5-ad16-4576-b046-381e36456998
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dkUhqE94oAMFu5A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a4ce0a-28687ad51eea1f6f3ce8cc86;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uIDvI3BVK0v68x1jkgw9GB0U1i3l2kyW81q2Kiy3ZDREqQmyUTXCnQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 21:38:11 GMT
age: 47776
etag: "eafb4e029313caabcdbdc1002abcab95f66e91b1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11939
Md5:    38cc82b5e5d8c2fee6f51021e156ec81
Sha1:   eafb4e029313caabcdbdc1002abcab95f66e91b1
Sha256: b8cad011e1a98ee4e896f00263495aab7f9cab986736a7a5b4187b8e94c46493
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba282dd4-f1e4-4f5c-9a46-b6e71aa327de.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8732
x-amzn-requestid: 25cbd9e6-ad97-4369-a02c-e740030b437c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: defNLECQIAMFiQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a278ba-4e1a2cd801c389584e320ffe;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: qHW93j1deKtsnRU5YYgcKJEJJfWQrYE85yG_4y9M1ECrfLtaiSYxiA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 a3b5bb90516201e5ddd137696b7b0f50.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 04:43:00 GMT
age: 22287
etag: "c2c523d207935363931aa17cd9aaabb9a48c28a0"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8732
Md5:    e49802d7e560d6e9b5d17111d531af4d
Sha1:   c2c523d207935363931aa17cd9aaabb9a48c28a0
Sha256: 255ac832533c579d57dac6adc330f83d39de222b3496277b2394afc15fe74535
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F46c838f6-5365-43bb-981e-8ddefc5f3f14.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5659
x-amzn-requestid: bc225a93-868b-42d4-aa94-c8fa16ef2c64
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dk33gHUqIAMFg1A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a50696-7710727f0f086a791a0e7939;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 01:38:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FGP2S7V05eAwwnHzdlYQJC9ZW-5xLD8Aqi7XBCcJtaqbVoNCocGFhw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 01:50:42 GMT
age: 32625
etag: "98fb13feecfada3cc8b467aa48d7cdf1ed8ab001"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5659
Md5:    2d4cf077d410b94f1326e942304f9e9b
Sha1:   98fb13feecfada3cc8b467aa48d7cdf1ed8ab001
Sha256: ec82cd83bfd4da849888b0535c9764cd4d462ef9e12c5934512858375908dfe4
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff0029f3f-e2c3-472b-b92b-917899b028d4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11436
x-amzn-requestid: 03a50026-b390-40c1-87f2-c374611ebe40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dk3RrHRQIAMFwtQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a505a4-7fad45da7d9afcc118c87170;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 01:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: VKTapcGdo8L9PpJe7PZkQSnlxDALHa0u_Dob4_pqE1lYLw_X4VLAGQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 01:50:42 GMT
etag: "fdcf061d2b42818fb4d4767a6f449755a0b86610"
age: 32625
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11436
Md5:    6245b142f904aef8824a55847539c0e8
Sha1:   fdcf061d2b42818fb4d4767a6f449755a0b86610
Sha256: 5b593e66cbf266e4d551390774d2d391b9e42e348fb6a8447e5f37c574fc606f
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90b79dbf-e3b6-4ad2-b197-fb6b74218bd0.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6139
x-amzn-requestid: caacc528-02d9-44a8-992f-9fb2e62544f7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhBhQFbgoAMF_nA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a37c6e-56b3cdd227cbc7884c48b380;Sampled=0
x-amzn-remapped-date: Wed, 21 Dec 2022 21:36:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: KsKMm9hON3UeMHMXa8KzDgtFEQXmTXP626jtiKAuSf7KD5i-LuhiYA==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 22:33:10 GMT
age: 44477
etag: "227cdc06cd59c7814312e5c5ab98e428ebc0d68d"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6139
Md5:    9de9a9418a2a6dbe33d5e7cdb3dbd8d8
Sha1:   227cdc06cd59c7814312e5c5ab98e428ebc0d68d
Sha256: f9920b5ef389a504181ba8e5078ba056a88470c9bb8b5f9290618374e5e0c217
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F83ec12d8-0f25-4455-b9fc-9581d059158b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9158
x-amzn-requestid: 2047fa50-737a-420b-8bcd-6ba2d79b60eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dOjrhHuiIAMF5JQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639c197c-0103d96966f2f8924b8c8a10;Sampled=0
x-amzn-remapped-date: Fri, 16 Dec 2022 07:08:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MAD0zRheKGRmq1aqcKD5oOfjQFY_8CeffvGAvwTxjhKihl6PqbzV8Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Thu, 22 Dec 2022 16:52:36 GMT
age: 64911
etag: "ef8fd938e82dec810c56e4497441c452012e5a22"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9158
Md5:    1c618f418af677595dddd2e7ed9e6a1f
Sha1:   ef8fd938e82dec810c56e4497441c452012e5a22
Sha256: 677f7502d2a69e2bdfad9fa2329ce8c78b7e413b4d7bd9cb414a768e381819cb
                                        
                                            GET /ga.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Fri, 23 Dec 2022 09:06:10 GMT
Expires: Fri, 23 Dec 2022 11:06:10 GMT
Cache-Control: public, max-age=7200
Age: 6497
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT


--- Additional Info ---
Magic:  data
Size:   42805
Md5:    aa9e189a7d1b0a6cb70bfad6e08b7153
Sha1:   564809dddecce852d8438b06db619be89f76d4ca
Sha256: 47fff09be72e76583cb188e17dc92ee536159878831bc53d881e301a63b5f636
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Dec 2022 10:54:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.206
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Fri, 23 Dec 2022 10:41:11 GMT
expires: Fri, 23 Dec 2022 12:41:11 GMT
cache-control: public, max-age=7200
age: 796
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 23 Dec 2022 10:54:27 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?v=1&_v=j98&a=1111337785&t=pageview&_s=1&dl=http%3A%2F%2Fwww.ferienhaus-anden5birken.de%2F&ul=en-us&de=UTF-8&dt=Ferienhaus%20%C2%A0%22An%20den%205%20Birken%22%20-%20Urlaub%2C%20Familie%20%26%20Hund&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=1123796638&gjid=472349024&cid=735521315.1671792866&tid=UA-86103369-3&_gid=237204616.1671792866&_r=1&_slc=1&z=919975177 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.206
HTTP/2 200 OK
content-type: text/plain
                                        
access-control-allow-origin: http://www.ferienhaus-anden5birken.de
date: Fri, 23 Dec 2022 10:54:27 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   2
Md5:    38684612f0c6bb6dfa16da92f4a6878f
Sha1:   6fe62d0dd7db314b7f9bb945672f078e01d27f0f
Sha256: a048e640908046be06e00eab37742b5d5ff80964af58cfd22f7cb2de4dfe375f
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en; _snow_ses.3d5c=*; _snow_id.3d5c=e635a2ab-4804-45dc-acdc-4b0a58ab1881.1671792865.1.1671792865.1671792865.881fa8ab-eb54-4667-8dfa-f39e4a91e05e

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:27 GMT
Content-Length: 4286
Connection: keep-alive
Last-Modified: Fri, 24 Jan 2020 10:27:00 GMT
x-rgw-object-type: Normal
ETag: "5fda3715e0e65bfa7835c4865071a149"
x-amz-request-id: tx00000000000004e5d88ed-0063a4a0dc-c696eea-sfo1
X-Storage-Bucket: zd533
X-Storage-Object: d533e3a2a6fb0c2947870572f732f48b29b728d39e3d982fa099e95ba4af93a8
X-Host: blu81.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel\012- data
Size:   4286
Md5:    5fda3715e0e65bfa7835c4865071a149
Sha1:   1706107494b814f25687480cb5a9a1f341f387f3
Sha256: d533e3a2a6fb0c2947870572f732f48b29b728d39e3d982fa099e95ba4af93a8
                                        
                                            POST /ajax/api/JsonRPC/CustomerAccounts/?CustomerAccounts[CustomerAccounts::getAccountDetails] HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/json; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 83
Origin: http://www.ferienhaus-anden5birken.de
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en; _snow_ses.3d5c=*; _snow_id.3d5c=e635a2ab-4804-45dc-acdc-4b0a58ab1881.1671792865.1.1671792865.1671792865.881fa8ab-eb54-4667-8dfa-f39e4a91e05e

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Date: Fri, 23 Dec 2022 10:54:27 GMT
Server: Apache
Vary: X-W-SSL,User-Agent
Set-Cookie: language=en; expires=Fri, 06-Jan-2023 10:54:27 GMT; Max-Age=1209600; path=/
X-Host: blu84.sf2p.intern.weebly.net
X-UA-Compatible: IE=edge,chrome=1
Content-Length: 348
Keep-Alive: timeout=10, max=73
Connection: Keep-Alive


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (348), with no line terminators
Size:   348
Md5:    a944dd688c99d2901d6719be713271c0
Sha1:   4f5454d5d434829baf46671638610791758725d9
Sha256: adb97e1bc686c58b4286f1208d2bd969687c6cf3e2fc468697dfd956d260de49
                                        
                                            GET /uploads/4/6/8/5/46854823/fb6fa486-0d3a-403e-a81f-3823e8b0e758_orig.jpeg HTTP/1.1 
Host: www.ferienhaus-anden5birken.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Cookie: is_mobile=0; language=en

search
                                         199.34.228.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 23 Dec 2022 10:54:25 GMT
Content-Length: 191638
Connection: keep-alive
Last-Modified: Sat, 05 Sep 2020 16:05:19 GMT
x-rgw-object-type: Normal
ETag: "a0df1416d3844ffa29ef3befeb8f2a60"
x-amz-request-id: tx00000000000004de6f382-0063a36673-c669cc6-sfo1
X-Storage-Bucket: zd6ef
X-Storage-Object: d6ef9f3ebe4a0b08c434bb82bda76eea0beba34590e455b806cf88e926b9f3a6
X-Host: grn152.sf2p.intern.weebly.net
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1067x800, components 3\012- data
Size:   191638
Md5:    a0df1416d3844ffa29ef3befeb8f2a60
Sha1:   4ecc0c610724771e140222c094d1e51b79b297b0
Sha256: d6ef9f3ebe4a0b08c434bb82bda76eea0beba34590e455b806cf88e926b9f3a6
                                        
                                            GET /wcomv5/images/icons/weather/d_e_61.svg HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         143.204.55.49
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Fri, 23 Dec 2022 10:54:28 GMT
Content-Length: 167
Connection: keep-alive
Location: https://cs3.wettercomassets.com/wcomv5/images/icons/weather/d_e_61.svg
X-Cache: Redirect from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: nAAwVaN6k8tOhXsHNBWdLidnuQj6neA_0eyyu2uloSuFsfgmKTISPw==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /wcomv5/images/icons/additional/warnicon_s.png HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         143.204.55.49
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Fri, 23 Dec 2022 10:54:28 GMT
Content-Length: 167
Connection: keep-alive
Location: https://cs3.wettercomassets.com/wcomv5/images/icons/additional/warnicon_s.png
X-Cache: Redirect from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: W6vGCGg6GCdyatUrQinwlSdvIeE5SlD2SeMPIQk5irdicRtR8ALOTg==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /wcomv5/images/icons/weather/d_w_61.svg HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         143.204.55.49
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Fri, 23 Dec 2022 10:54:28 GMT
Content-Length: 167
Connection: keep-alive
Location: https://cs3.wettercomassets.com/wcomv5/images/icons/weather/d_w_61.svg
X-Cache: Redirect from cloudfront
Via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: LHgpOqWJJettOUiXMm20yk1mjwMVeLDXIrNjWLOMW7ZR8EndBUdshQ==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /woys/5/images/wetter.com_60x12.png HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         143.204.55.49
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Fri, 23 Dec 2022 10:54:28 GMT
Content-Length: 167
Connection: keep-alive
Location: https://cs3.wettercomassets.com/woys/5/images/wetter.com_60x12.png
X-Cache: Redirect from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 9B40-bfbVaCjb3R6N4hos0V7uihG8NRtSsb8i75r5_gwNQU_MpxHUw==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /woys/5/images/play_icon.png HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         143.204.55.49
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Fri, 23 Dec 2022 10:54:28 GMT
Content-Length: 167
Connection: keep-alive
Location: https://cs3.wettercomassets.com/woys/5/images/play_icon.png
X-Cache: Redirect from cloudfront
Via: 1.1 96c778ce6156d12f24b8b6cdaa0cbf66.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: vdbAFtzNyQx8bJ3ZUCFlJkThZFjVfmKjyTmWNmWaWZ52PZexD1fX1g==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /wcomv5/images/icons/weather/d_3.svg HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         143.204.55.49
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Fri, 23 Dec 2022 10:54:28 GMT
Content-Length: 167
Connection: keep-alive
Location: https://cs3.wettercomassets.com/wcomv5/images/icons/weather/d_3.svg
X-Cache: Redirect from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: 5RSKyddCgU0G3enDFWRQXGFAQnEh_-xoQ8kcOkOIxUOEhlSvGEkiWQ==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /wcomv5/images/icons/additional/warnicon_s.png HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ferienhaus-anden5birken.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.49
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 1025
last-modified: Thu, 01 Dec 2022 10:49:12 GMT
x-amz-version-id: gvw1_jQ_XdZWtqYqNBsnypt20AN_6iZy
server: AmazonS3
date: Fri, 23 Dec 2022 10:54:28 GMT
cache-control: max-age=31536000,public
etag: "9247ed739020e1c2b9bf66758c7a3083"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: li9r41mmKnrQfAdr4dG_6M1FfsvLdh5H3lwXXvzEk0NflF_aZZPpdw==
age: 338
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 30 x 26, 8-bit colormap, non-interlaced\012- data
Size:   1025
Md5:    9247ed739020e1c2b9bf66758c7a3083
Sha1:   2fa99ec033f0d4e9a501fe5984dc90f874873465
Sha256: 302c6ff612747b7f54a9f2d0a8db1605a373856cefa56695e843143fdd6f7247
                                        
                                            GET /woys/5/images/wetter.com_60x12.png HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ferienhaus-anden5birken.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.49
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 1656
last-modified: Tue, 29 Aug 2017 10:47:50 GMT
x-amz-version-id: xanGio4mFcLrTkG5aAxGMXVr.vJhbZzr
server: AmazonS3
date: Fri, 23 Dec 2022 10:54:28 GMT
etag: "7fccfb0099a9a204bc625d714d793d06"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 5RYPwzm_5uo56NH77SXGrs_NFwmXSf6AXvU65RtJi_Dat42grCrPHA==
age: 868
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 60 x 12, 8-bit/color RGBA, non-interlaced\012- data
Size:   1656
Md5:    7fccfb0099a9a204bc625d714d793d06
Sha1:   bce0fed737542f313c36275b39d8fbb9f7b626d9
Sha256: 8349e6034e613530f483a717d0419f6588d67e52649b86db8916383e243b1ffc
                                        
                                            GET /woys/5/images/play_icon.png HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ferienhaus-anden5birken.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.49
HTTP/2 200 OK
content-type: image/png
                                        
content-length: 1176
last-modified: Mon, 23 Oct 2017 13:26:58 GMT
x-amz-version-id: iA54yS7M4LXELLQuyfWYEuU99XL7127z
server: AmazonS3
date: Fri, 23 Dec 2022 10:54:28 GMT
etag: "4ff92c7307593b8daf814722db52eab2"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: 3MgKEb1YctYMHgaOE6tfuhqyL2CruwdIniFRbBxA1XA3GbSuFQ9LyQ==
age: 79
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 12 x 12, 8-bit/color RGBA, non-interlaced\012- data
Size:   1176
Md5:    4ff92c7307593b8daf814722db52eab2
Sha1:   787035d49a536276cbe38ab4fc4445adb3d5e5c9
Sha256: d1ce4d50b57ee8fc30f0280224f6c214b2cb0100060f78765d448137fe120817
                                        
                                            GET /v/t1.6435-9/203806875_2166656803633594_3468666789398365008_n.jpg?stp=dst-jpg_p526x296&_nc_cat=105&ccb=1-7&_nc_sid=110474&_nc_ohc=FVOlIBxbLBQAX9m8yiC&_nc_ht=scontent-arn2-2.xx&oh=00_AfDXQXvhpebVepCiXQNgSmrIOCuJxC7GGC_GVBAeRqH0sw&oe=63CCF5AE HTTP/1.1 
Host: scontent-arn2-2.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         157.240.194.27
HTTP/2 200 OK
content-type: image/jpeg
                                        
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Tue, 22 Jun 2021 19:03:12 GMT
x-haystack-needlechecksum: 3074643585
x-needle-checksum: 609801121
content-digest: adler32=1605159144
content-length: 59003
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:28 GMT
x-fb-edge-debug: 42r85uZBDOaMgUQ2NvPcZNl4sB8P1Q5_N0tNA5nniqIFcZhBFtm_fsbDVbqD7tl6YBf7CNwFPZB9ILylCdSUYwskdtcYCg0ub7vraH-I5nU
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 526x395, components 3\012- data
Size:   59003
Md5:    a73db2526d241ddb343a3ba5aac73c6d
Sha1:   31a33c524030fb3b201ff855dc3ad40a3e5ab2e7
Sha256: 64987a3c682f20c5bada9c14315de65d9bf8a1b2daf2f5fd05b5bafeb3621d6b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         143.204.42.88
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=117604
Date: Fri, 23 Dec 2022 10:54:28 GMT
Etag: "63a4a7f9-1d7"
Expires: Sat, 24 Dec 2022 19:34:32 GMT
Last-Modified: Thu, 22 Dec 2022 18:54:49 GMT
Server: ECS (nyb/1D1A)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: C8FZkva_ZO6WcrBe6dpOCz7pxKZzvqjyK0CnoqXmRngiZU2T7tz3dQ==
Age: 2383

                                        
                                            GET /v/t39.30808-6/249854551_388936416256326_5197021519389992006_n.jpg?stp=dst-jpg_p526x296&_nc_cat=108&ccb=1-7&_nc_sid=110474&_nc_ohc=KcBv1pKj3OwAX-xx8xK&_nc_ht=scontent-arn2-2.xx&oh=00_AfB3-Q237ue86dS4jMcwj0nCWuRB3Y9Vi4wW4BB4QlIM8g&oe=63AB748D HTTP/1.1 
Host: scontent-arn2-2.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         157.240.194.27
HTTP/2 200 OK
content-type: image/jpeg
                                        
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 27 Oct 2021 18:14:37 GMT
x-haystack-needlechecksum: 1621020437
x-needle-checksum: 84223516
content-length: 45507
content-digest: adler32=4205471698
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
accept-ranges: bytes
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:28 GMT
x-fb-edge-debug: iZOl34lun5EZOVm2xQ8qY85M4wecbZMRcT9T_bJ2PC47FEmDaPDxNR2sbXWrDWUyzti3LfD_gaatuUMnnfBj0EVfiN6MfMhnIHacJVJQ-4U
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 526x395, components 3\012- data
Size:   45507
Md5:    dd78767329d20aaecb07435ebb6cef18
Sha1:   d1343cb043ce209e11745048bc9138342151fa9c
Sha256: 7e34f0d2a6fbbfa956913916a095664ed043a119c2a589c485988c5985767914
                                        
                                            GET /rsrc.php/v3/yW/r/ScVP74LB7Aq.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Tue, 19 Dec 2023 12:11:01 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: oiqLZivi+UZsJviHKdhGNg==
x-fb-debug: Gks8VX6y5JxX9EvPbOgM6GWs6EWOgq/WXGtD6BRTYeDa8uT0W2Pey8LfPAUqvvImtX8vDJNSRxT4mJHMXjeOwA==
content-length: 85039
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /rsrc.php/v3iEpO4/y1/l/en_US/ACK0uX4zgFf.js?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         31.13.72.12
HTTP/2 200 OK
content-type: application/x-javascript; charset=utf-8
                                        
content-encoding: br
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Wed, 13 Dec 2023 19:55:48 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: dSRUDJZeYv0zkPaqQn9UQw==
x-fb-debug: xMvJ+RkNiRVZbwVigObKFuw6q5qnvcsnXw0NyCAnMEJDvn9jvnflObaB5s5Wgsbtsrcczp4+3RFEvBqJWMFYkw==
priority: u=3,i
content-length: 23498
x-fb-trip-id: 1904183273
date: Fri, 23 Dec 2022 10:54:26 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /polyfills/promise-7.0.4.min.js HTTP/1.1 
Host: www.promisejs.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         188.114.96.1
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Fri, 23 Dec 2022 10:54:25 GMT
x-amz-id-2: UV22hN2mtPUbxfGvI7vffeUFGACFdjQM+8AoO/iAkk7/3Tvgk+Dhh2A5L17QFmpgrY6c6DN+joE=
x-amz-request-id: ZAD0FRQJAVBXZXKN
last-modified: Wed, 22 Aug 2018 16:12:33 GMT
etag: W/"d9ba685d045bdb65d8d2cfa53d99294b"
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1834938
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UH96f5d3gARbvQYnTEvZL69DqoJFLhJ72HOd6km1es17UX%2BPr%2BtboNx%2BakEZeNdd6BKKK97b5pjFmK9iBWrlNrjmWqSXUY428K3lA4VDLTz3S1JPbrOIZwhfuCGqR6veKSegZw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 77e08f1f2ccc0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wcomv5/images/icons/weather/d_3.svg HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ferienhaus-anden5birken.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.49
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Thu, 24 Nov 2022 10:41:28 GMT
x-amz-version-id: mHTIhqa7Y3hgXrAg_XfIFaKRxp9WKkfT
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 10:50:31 GMT
cache-control: max-age=31536000,public
etag: W/"197710a815cb102d92f8c3f68a7ef7d6"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: tSDE2AD3F8pY1MZtlgnzrizLXvOb5hHzH3V6poIUdsktECxY_0Hhww==
age: 439
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /js/site/main-customer-accounts-site.js?buildTime=123412341234 HTTP/1.1 
Host: cdn2.editmysite.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.ferienhaus-anden5birken.de/

search
                                         151.101.65.46
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Connection: keep-alive
Content-Length: 158930
Server: nginx
Last-Modified: Tue, 13 Dec 2022 23:22:40 GMT
ETag: "63990940-8250f"
Expires: Thu, 29 Dec 2022 10:37:28 GMT
Cache-Control: max-age=1209600
X-Host: grn39.sf2p.intern.weebly.net
Content-Encoding: gzip
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Fri, 23 Dec 2022 10:54:25 GMT
Age: 692216
X-Served-By: cache-sjc10030-SJC, cache-bma1670-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 26, 1
X-Timer: S1671792865.106469,VS0,VE1
Vary: Accept-Encoding
Access-Control-Allow-Origin: *
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400


--- Additional Info ---
                                        
                                            GET /woys/5/css/w.css HTTP/1.1 
Host: static1.wetter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ferienhaus-anden5birken.de/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.125
HTTP/2 200 OK
content-type: text/css
                                        
last-modified: Thu, 08 Nov 2018 17:08:26 GMT
x-amz-version-id: EtxMfRNCWILs2lIcXPGxKYMPE9zdI0tu
server: AmazonS3
content-encoding: gzip
date: Thu, 22 Dec 2022 17:53:27 GMT
etag: W/"c76f92c185e33d0c2f2b7d76ceaa27fc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: W_OuvgipTOXTIruIO_WOCLn8GfeOdH8AYQCdXTnJIYIv4lahcBOlqg==
age: 61483
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wcomv5/images/icons/weather/d_e_61.svg HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ferienhaus-anden5birken.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.49
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Thu, 08 Dec 2022 12:16:02 GMT
x-amz-version-id: z1G_tMgxZwmMFDOyMnXlF2WkTGDj6qkr
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 10:54:28 GMT
cache-control: max-age=31536000,public
etag: W/"f28d66e16aa4bcc9897b778480600202"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: EWM5_mHr588-9pbGuXGDxccEXlDD1NxwrVc8Fuzax5qPSNYN8aYjMg==
age: 396
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /wcomv5/images/icons/weather/d_w_61.svg HTTP/1.1 
Host: cs3.wettercomassets.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.ferienhaus-anden5birken.de/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.49
HTTP/2 200 OK
content-type: image/svg+xml
                                        
last-modified: Thu, 08 Dec 2022 12:16:03 GMT
x-amz-version-id: JX7lza685dcOzFGFF9fp.66x53AkZ7iX
server: AmazonS3
content-encoding: gzip
date: Fri, 23 Dec 2022 10:54:28 GMT
cache-control: max-age=31536000,public
etag: W/"362a37303f83ebc1e558f0b1087bc512"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: TdAWAMQ1ssBavETNfmrglkGEzwsgXNclLl7sFHWAc9RcaWBC0GNG5g==
age: 545
X-Firefox-Spdy: h2


--- Additional Info ---