de-checking-6019.cfd/de/Kontrolle/spark/
200 OK 465 B URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 5a3c9f6a965c4f993b400899adc0891c
0147f5aaab495fb5502ae517b4c6cc6b9b863b92
5e8c51c8f64535d3a77e15c20dddbcc54231b8a4945465e5983eb53bdc2faaee
Analyzer Verdict Alert openphish Sparkasse Bank
fortinet Phishing
GET /de/Kontrolle/spark/ HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: real=OK
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ckZdbpS%2FkgQsd41kNFMSbycvFSxP8VQ5KsQEuNkWIIEFenHwSp7XNHLUJ9XRH5Z9ej2ygJyRyJmG7LyifzZgSvLQ5G1wGSKWjzDO8IaolqO07E90JA8ZvgGU8dxAMdMEQZJjACyJKw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bb69c8fb500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4c9ec202b798d350b6582220b7bb8457
d16ca24cd60b349231ad06fa5db32f54a3bc9e09
df036d315a613ac6396b77afb0a4ea5f793091786be0cbf3f3a0d043bc1d1d3c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DF036D315A613AC6396B77AFB0A4EA5F793091786BE0CBF3F3A0D043BC1D1D3C"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4583
Expires: Wed, 26 Oct 2022 19:19:45 GMT
Date: Wed, 26 Oct 2022 18:03:22 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2542
Cache-Control: max-age=144602
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 18:03:22 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 10:13:24 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 45bfdf3b823cd24564c8ac296a8b5b19
b0c442eb4f87556b3beb18ca8039dd4399b73f16
32113c679dda1f710ba67e537fdd0d435ccc186a238e3b14e48deb7b0700c693
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2253
Cache-Control: max-age=144313
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 18:03:22 GMT
Etag: "6358fe56-1d7"
Expires: Fri, 28 Oct 2022 10:08:35 GMT
Last-Modified: Wed, 26 Oct 2022 09:31:02 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a39eea1096852891690eaee02a64383e
c273000f799fc3676e8e3ef3617611a31252cffc
d9d95319013d64bc2ef6d9870f4adba902ee970b6f9e96279c9ed86f556e0001
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9D95319013D64BC2EF6D9870F4ADBA902EE970B6F9E96279C9ED86F556E0001"
Last-Modified: Mon, 24 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7575
Expires: Wed, 26 Oct 2022 20:09:37 GMT
Date: Wed, 26 Oct 2022 18:03:22 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: dvhnsRqc7UaXkviz22O47cbXp/xry8JB+7j1duotX+IGK3bew58WsBwcfyLEsu9j8xSKnI78fCU=
x-amz-request-id: C8EYQ17BCVKS8JT0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 26 Oct 2022 17:09:27 GMT
age: 3235
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 26 Oct 2022 18:03:22 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
de-checking-6019.cfd/favicon.ico
404 Not Found 236 B URL HTTP/1.1 de-checking-6019.cfd/favicon.ico
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9f37e4ad91fd2da1f773c223f2926e94
92327690901d6cbb77699474306c6d946311e5b8
7bfbbbad94cb1968f0458d0dc1b71c38ef001ec2ce03f4e83dfa62412ca145a1
GET /favicon.ico HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/
HTTP/1.1 404 Not Found
Date: Wed, 26 Oct 2022 18:03:22 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xcCxBoT1ImQ9ck7MZu%2F1ppjXQzo1TppFBjwtX9iHAfAtv%2F%2BTm49JCfjdrUjcC4ff7llLXESZKl0iyekZYvq1StRv7Lx7yaQGVaqvfUO9%2FTdzpRcYYWzb5wDEAI2zeDNMWuUPUpSQww%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76051bb96961b500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 471 B IP
Hash dd283dfc036535bdeb8a8be1310ef930
d3b1c300dd75d7af630e0f3112e49d7492d66c17
578f9256faa188facb3f2d68b02b0c7fb2e30e02e2e74234d015429563cba7aa
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2256
Cache-Control: max-age=139260
Content-Type: application/ocsp-response
Date: Wed, 26 Oct 2022 18:03:23 GMT
Etag: "6358ea97-1d7"
Expires: Fri, 28 Oct 2022 08:44:23 GMT
Last-Modified: Wed, 26 Oct 2022 08:06:47 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: NPpRzsJaKriYf0DRR1mcsQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: vDgVEpWoUEvVHrL6NQYsr+MUSmA=
de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699?
301 Moved Permanently 382 B URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash cf265d22a7c223e163a42f6e90522776
776c4e73fffe607ad62ded1edff455af273c3ae3
3560c28677c0a93b0a3f0112fb19845985630936b9e060518813f5ad0481e996
Analyzer Verdict Alert fortinet Phishing
GET /de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699? HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/
Cookie: real=OK
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/?
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=phcyYCzlnV%2BWZ4usqioFY1%2FiYVYXQouKLrqXbYM6oPsNDLWpWx3gixlEeo7bEeR%2B8Vr29G6zGymeqqbcvRmO%2Fux0iMxbeQxEO%2FZor22bhvWHolyTJ%2B%2FVzXHxQaiNRrpbRWKBTFPfCA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bbf1ab2b500-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/?
302 Found 0 B URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/?
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/? HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/
Connection: keep-alive
Cookie: real=OK
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: bid=595c01a5ab0c681fc6ec388cbe7db699; expires=Fri, 25-Nov-2022 18:03:23 GMT; Max-Age=2592000; path=/
location: start/?
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2cOS2D%2BXYqmPqA6HJaHQzeZKL8sOAw6AepUKrRAcqmMgPiqfHaNUMfb%2FkHE9hMMMJ9CAjFAGfDgVJkJBeXaBdYei8suOCRonuQWA1wIyx84ytE0ile74JJKdO2%2B%2FgHlBivrHUJ70TQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bbf4af9b500-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/?
200 OK 347 kB URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/?
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (5585)
Size 347 kB (346879 bytes)
Hash 6da2cc5b01bdf35a7b6f58d0b85eada2
495e87f0332182b778337bb5e1c7a5703880d427
2f567c24995e2fd84da85178d1d3119acdf3d826eac79f600957f1c04a002457
GET /de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/? HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/
Connection: keep-alive
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Vary: Accept-Encoding
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jHzte8eGNWShApwb2zFfg2vufYdVPhBJogSOg13NcH9FRgi5X7S1HKlW7giZ0Iy6TFZGIq2QoYZcZQzVD5RsOHyJury0EQ2YOz2e8ynPGPmz2ta4Oao%2FekV8BjGIS93wUCN2FsIz7A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bbf8b6fb500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/bower_components/ua-parser-js/dist/ua-parser.min.js
200 OK 6.1 kB URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/bower_components/ua-parser-js/dist/ua-parser.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (16817)
Hash 14da93cff6d49885bf214d2503f614db
04d64d738cd0fd2b4eee3b8abc5326dfda3f1dea
49e584e9a0aee55b81771b9e010ccf1da6278da03fb8ddba07ef7a1f0a126732
Analyzer Verdict Alert fortinet Phishing
GET /de/Kontrolle/spark/bower_components/ua-parser-js/dist/ua-parser.min.js HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/?
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: application/javascript
Content-Length: 6063
Connection: keep-alive
Last-Modified: Thu, 12 Oct 2017 09:16:24 GMT
ETag: "4298-55b55fe848a00-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YT98jbyOlMqQywY6BdJ10nKN%2FJLShs7T4QFw%2FhPcvLWZRhSIon%2BxKVFtAXFWFssy3R6pOSLeIKdDAlz4O%2BvPfYzTccEJRc1CV6tQvlKHPmNv4g4HEkY2xOQvet7MOjIE6VrUrOZX7A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc01a48b4f3-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/bower_components/font-awesome/css/font-awesome.min.css
200 OK 7.1 kB URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/bower_components/font-awesome/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 52f1a8a2ce85fa8432308b33bc1a2e79
fd80917af5371c8ecad0198592a1e7cce4b77b0e
07bd6a9ea0213e20f362485aadc17a88c486ecfb394004b41b8b38db6e6a35f6
GET /de/Kontrolle/spark/bower_components/font-awesome/css/font-awesome.min.css HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/?
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: text/css
Content-Length: 7053
Connection: keep-alive
Last-Modified: Sun, 09 Apr 2017 05:29:24 GMT
ETag: "7918-54cb524381500-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2mcZLuGabrCdWcJzlMgLLERd4FxUyWW8%2F5Bt%2FEFm04uXDTdxShEaKjYvsWetxJtwR7hQfJYu4gnJ5RzDwSKS35JJge72RoUnL5HrE%2BCI2Vu13yL2%2F7d%2BMCeNSk5k57d9qos%2FFOQYpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc01cc4b512-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/core/form/core_form.js
200 OK 9.3 kB URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/core/form/core_form.js
IP
File type ASCII text, with very long lines (8162)
Hash 2dd746201db197b78c8fb382b997df09
4a819368bc0b05376b24b4dfcebfecd9bb186ca5
9124edea188dc71ec6fdb66e30a6a5f9f873726749629bc5f313cd8d365e626a
Analyzer Verdict Alert fortinet Phishing
GET /de/Kontrolle/spark/core/form/core_form.js HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/?
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: application/javascript
Content-Length: 9348
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 11:48:08 GMT
ETag: "6d87-5e7eca7426e00-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tlyYZYXfXYnqdP14u341Vb0mlVggTVtElmekP6hmlbX8tyJ2RiNwcNjmTY%2F8e0FG7YhFIgiAQ0w6HIqXlb9NTv72gjF187nJ1qXxGerGwwp3h3MRBfnC9LvdSQ%2BAPEDV9YTSIvYgcw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc01bcfb50b-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/core/token/core_token.js
200 OK 1.9 kB URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/core/token/core_token.js
IP
Hash 9b9283cb3a86264ef06023578a517654
9dd2e99dccf73c134044c0132599c226411587b4
afee7869619a2487caf6171a19a9124fa696baad345a0a650704fd9312453fa8
Analyzer Verdict Alert fortinet Phishing
GET /de/Kontrolle/spark/core/token/core_token.js HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/?
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: application/javascript
Content-Length: 1863
Connection: keep-alive
Last-Modified: Mon, 05 Sep 2022 11:48:50 GMT
ETag: "55ef-5e7eca9c34c80-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DhlKEAAK8yuJQ0GGaCfzdKxPOZ3Jl8YaTFRaarAbmZn9T5N3vciqtJXRhjVMFcvgP9gmJ4lAe42%2BeaVTyd8oHV5Ilq8LsNvHlXJjNjZG40JebdNWvoQUbxginXx43jDA5VipUqEyng%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc02d8dfac8-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/bower_components/jquery/dist/jquery.min.js
200 OK 30 kB URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/bower_components/jquery/dist/jquery.min.js
IP
File type ASCII text, with very long lines (32058)
Hash 3430607b4301113ad9394c9260eef3f0
8c4db68b161b17e31be300e968a30ab0116b3193
31e4d11375322cd6f94dba7338570426f2412d6c5fa670427966d45c3648098c
Analyzer Verdict Alert fortinet Phishing
GET /de/Kontrolle/spark/bower_components/jquery/dist/jquery.min.js HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/?
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: application/javascript
Content-Length: 30138
Connection: keep-alive
Last-Modified: Mon, 05 Jun 2017 04:55:06 GMT
ETag: "15283-5512f4e81de80-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ylQ8sl3mKUWj5dkqCODrCuHgz9D5ZEe%2BC8s8YY7NF855o25YpzOaeK3VfkbqFe%2Fi0LfPgkqM97GmC5jNuhUEBiQRiXyQhvzmH0b1yNYfjzQwi3gqJmNk1ujxvo0y3RyrL%2BrP6akx4w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc01d9bb4e8-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/core/form/core_form.css
200 OK 742 B URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/core/form/core_form.css
IP
Hash 3ce59cdc7b1383a57b739b46c9ac8bd9
06268b023182ae7e6f23160123f8c9f391189d06
a96498974b745f52a1e426f96572a82c1b95d8184363e6402329517f7a3e72b7
GET /de/Kontrolle/spark/core/form/core_form.css HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/?
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: text/css
Content-Length: 742
Connection: keep-alive
Last-Modified: Tue, 26 May 2020 17:08:40 GMT
ETag: "b6a-5a690259b7600-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6%2FbU2h%2FTZHFxI2g39gVqoLsenN1wH0DLh%2FSndl9K%2BrTrJMU4QoC9Y3HezxuwpZV9xNa%2B5C8ySz81UWvIvrnTD0S4lKHXRNlVYReQwCwp01vKlh50OSsY3r2wme9GABCWZHc2dNawSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc09ae1b4f3-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/start/token/token.js?v=6359766b8922f
200 OK 517 B URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/start/token/token.js?v=6359766b8922f
IP
Hash 96b1884d4273ecc3d8e40182b66fc8b7
1ed73362f80eeb83331f04a1fa5d9223a2dd2594
ee3d1157ce967c7462f079dfdc9c479ae54d61dfa5ae109aca7642d83ebdf7af
Analyzer Verdict Alert fortinet Phishing
GET /de/Kontrolle/spark/start/token/token.js?v=6359766b8922f HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: application/javascript
Content-Length: 517
Connection: keep-alive
Last-Modified: Tue, 25 Oct 2022 17:11:01 GMT
ETag: "4c0-5ebdefe168798-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E6gAipwNfYUsaBcqAGSA5FEBsCOT%2FlKwf78xGzqwjT91W1SaJUMPduuH46GFM1etvIIyLwOqcOaBiXMLjuLPBaPoMtBewQakErY7CIq1vhd4jX05G1HpBJk%2Fiz9VxDZOKD7GbD7%2Bmw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc09df6fac8-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/start/ng/ng.js?v=6359766b8922e
200 OK 2.0 kB URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/start/ng/ng.js?v=6359766b8922e
IP
Hash d0af19ee8644d9d11911852b515d5bbb
dc3d2b0ff293e24ee7afd973eb2ad1e1d1c47015
d8120eb89c7ed57e629c5230f13694bedb5c0482a276be2a1111a0c0aecb0106
Analyzer Verdict Alert fortinet Phishing
GET /de/Kontrolle/spark/start/ng/ng.js?v=6359766b8922e HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: application/javascript
Content-Length: 1992
Connection: keep-alive
Last-Modified: Mon, 12 Sep 2022 15:44:22 GMT
ETag: "1ca8-5e87cc4fc2180-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cVBSiXF80vwvXTdIDSATBX%2FoqJ9kocpr00SZmJ3wMwgZOab0iEccmvASl4Nrrr3MxgFO%2Fb0vdM2UGl3QzB4tOqcDfuTyH2ZqQHe5zHHg4Yyo9GY2kmCrHGmTptsZCXBKNMeQoCMDUQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc09d7bb512-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/start/form/form.js?v=6359766b8922a
200 OK 711 B URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/start/form/form.js?v=6359766b8922a
IP
Hash e1eda9b0a81b7dfaac0eb73bdef22491
2d801552a203637ab833d77fb3ae6ec77c07eaa4
f71e0a6d272a1d022a661c6bc6275edbffd44e1ee7349b379c306755a05f5621
Analyzer Verdict Alert fortinet Phishing
GET /de/Kontrolle/spark/start/form/form.js?v=6359766b8922a HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: application/javascript
Content-Length: 711
Connection: keep-alive
Last-Modified: Tue, 06 Sep 2022 13:10:50 GMT
ETag: "bf8-5e801ecdbea80-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zziifoffrFP%2FpcJYZZd8pmsWqgg8F6eBHnEZUAHf8Fz62QbVQzeOrwm%2FBUkudm%2BKF63Gvfruicfm8ohj0qUUyDSif4tCEGbwD39C%2F%2FU9MnFWI38eR%2BBY7XO%2Bg3l5ybJpe7kpWw0W3w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc09c61b50b-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/bower_components/angular/angular.min.js
200 OK 59 kB URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/bower_components/angular/angular.min.js
IP
File type ASCII text, with very long lines (552)
Hash ef8273bb5f21cf02cdb9ccd56513e7c1
0de400b680cfc9a05f3d182ea010b4ecb6166f7a
369f26576626b7705342e67ae37363858a5655c66755ddff450054dfe9c70bc4
Analyzer Verdict Alert fortinet Phishing
GET /de/Kontrolle/spark/bower_components/angular/angular.min.js HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://de-checking-6019.cfd/de/Kontrolle/spark/a1b2c3/595c01a5ab0c681fc6ec388cbe7db699/start/?
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:23 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 18 Aug 2017 15:37:28 GMT
ETag: "2937c-55708e80bde00-gzip"
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=btfMpam6OlioqCVBqLDyVTW8Qrf1%2Bi409ZxGaStZ1VNsCEFOWTWz5OUloPnCxlWUocQWS4yHUisi9g3uqZ%2FopxERY4MgG%2FrkQzBnYU%2FelZXutpnhGuuxxNwi86BYMijHGPCQcHl8Gg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc09cb4b500-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/Kontrolle/spark/start/form/newloader.gif
200 OK 557 kB URL HTTP/1.1 de-checking-6019.cfd/de/Kontrolle/spark/start/form/newloader.gif
IP
File type GIF image data, version 89a, 480 x 480\012- data
Size 557 kB (557122 bytes)
Hash ef8d4e6b20b0cf0d68713fb2f6069042
d62bb4b1a169c88879de3bd2f5c4292b6259a952
32bfc673211421c1a5a33acc98291840183582f11d15490954b42a81d79d4630
GET /de/Kontrolle/spark/start/form/newloader.gif HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: real=OK; bid=595c01a5ab0c681fc6ec388cbe7db699
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:24 GMT
Content-Type: image/gif
Content-Length: 557122
Connection: keep-alive
Last-Modified: Mon, 16 Sep 2019 07:51:56 GMT
ETag: "88042-592a6e0b8ff00"
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CG%2BOoHjNr5Q5R4viayQAQ%2F8C7XIGin2rJ4fK3SrYIbLSYgMObI5fb836mbk1IV6R3b5ZmMIliI9LpPHQcFmwPwLSW5cJbvlkYZyuskAggniZcA7kSiG2GOf92iaxvEbIv2p3X18U%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76051bc26a08b4e8-OSL
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/uadmin/gate.php?pl=token&link=sparkasse-shima&bid=595c01a5ab0c681fc6ec388cbe7db699&callback=jQuery321017086822104857557_1666807400086&data=%7B%22online_bider%22%3A1%2C%22w%22%3A0%2C%22dev%22%3A3%7D&_=1666807400087
200 OK 84 B URL HTTP/1.1 de-checking-6019.cfd/de/uadmin/gate.php?pl=token&link=sparkasse-shima&bid=595c01a5ab0c681fc6ec388cbe7db699&callback=jQuery321017086822104857557_1666807400086&data=%7B%22online_bider%22%3A1%2C%22w%22%3A0%2C%22dev%22%3A3%7D&_=1666807400087
IP
File type ASCII text, with no line terminators
Hash 66b6279c431a8b4e5f2b8837cc85364f
31e01c16996c13db8f605b214ada7ef3bbb5b2f8
f0c6cd2e5e5d80c06752c135d1b9c4694074834047b8606dcb2422be1f89ed68
GET /de/uadmin/gate.php?pl=token&link=sparkasse-shima&bid=595c01a5ab0c681fc6ec388cbe7db699&callback=jQuery321017086822104857557_1666807400086&data=%7B%22online_bider%22%3A1%2C%22w%22%3A0%2C%22dev%22%3A3%7D&_=1666807400087 HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: bid=595c01a5ab0c681fc6ec388cbe7db699; lng=de
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iqzAwLjIyw1UyHsdNZhaiP%2Fh1WuUfKAvODVmdlP7WswWJ9dDXow90gHcRCUVcXISatRiErx80Hwgcgkoo77Xl2hSIl7I0ZsP3YZkd07srF6oG5Tkuhw%2FnvhfURqrYpn0HMYC%2BLIYZg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc27e96b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
de-checking-6019.cfd/de/uadmin/gate.php?pl=token&link=sparkasse-shima&bid=595c01a5ab0c681fc6ec388cbe7db699&callback=jQuery321017086822104857557_1666807400088&data=%7B%22mes%22%3A%22User%20on%20start%20page%22%7D&_=1666807400089
200 OK 84 B URL HTTP/1.1 de-checking-6019.cfd/de/uadmin/gate.php?pl=token&link=sparkasse-shima&bid=595c01a5ab0c681fc6ec388cbe7db699&callback=jQuery321017086822104857557_1666807400088&data=%7B%22mes%22%3A%22User%20on%20start%20page%22%7D&_=1666807400089
IP
File type ASCII text, with no line terminators
Hash 1ec2460ab8db8915a5cb24237ebbc026
43bb6a8669a24912d69961b8272d6cb6635209cc
9071abbae4b9c6f1dda12abf6b19c0fac874eeb5908e24ec9c3de8308ed73990
GET /de/uadmin/gate.php?pl=token&link=sparkasse-shima&bid=595c01a5ab0c681fc6ec388cbe7db699&callback=jQuery321017086822104857557_1666807400088&data=%7B%22mes%22%3A%22User%20on%20start%20page%22%7D&_=1666807400089 HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: bid=595c01a5ab0c681fc6ec388cbe7db699; lng=de
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:24 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YLBE2O7lJ%2FImwjBKry%2By8ot7qM0ahR2lZjqLLA4YWm%2BtmJKs7a%2BPbhgrl0wHxpiGfFL9Lk5feCukV931x9kbeX%2F30bpnWCCXNczcPjWLiscv4T86TFfjdzfkTeqDlptJCu6ckNzYbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051bc2782ab512-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2435
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 18:03:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2435
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 18:03:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2435
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 18:03:24 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 262ee317a7d41424cef3f541f6e538d3
1c298c901f93a95e99bdc63259f415ab84a13783
c263ddf8d0a398b0b7e11f7efa9cb901bf877d939f388eb6089a236bbbdc2be4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C263DDF8D0A398B0B7E11F7EFA9CB901BF877D939F388EB6089A236BBBDC2BE4"
Last-Modified: Wed, 26 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2435
Expires: Wed, 26 Oct 2022 18:43:59 GMT
Date: Wed, 26 Oct 2022 18:03:24 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c3ae78510434fd68063fc144bf614382
3bb87ca5274ce9f6d81da60ab940d23ccd12843b
f42d89328435cb37cba1111903a6bd5e900857d0942e1506ea2115b4e6301541
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fe27cf2-33a8-42cc-a8cd-f5e804e60e26.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7929
x-amzn-requestid: 6324abd6-8e27-4903-8bfc-a0fc6a8625be
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alK9LEeoIAMF5mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585854-2900343b1ae208a903fe58fd;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:42:44 GMT
x-amz-cf-pop: SEA19-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5MR4UzoW6rVsSpEyPAWrcFb2LCRICaG-toy3JflaXRrzZwcgMs48VQ==
via: 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:49:35 GMT
age: 72829
etag: "3bb87ca5274ce9f6d81da60ab940d23ccd12843b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5987bcd44ab0db5313aa4f409a8a212f
691a36cde98a9fe1660745dd811e0be2ae67036c
e47ce3587c647b52669f675dc7e84e21555f82138091fb04febc951b4c06ba30
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5da11cdb-c8be-46f4-95b0-792c49d930a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8553
x-amzn-requestid: 69931a9c-027e-428e-a88d-61c5fac64daa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ2iEnzoAMFZAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585690-12c78c5157fb3fa41a13548c;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:12 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: E4t7XezEVl1x_4sbidtDPjCuZoCh7N01y7ZeYZWlAL1w8ut4Qx95TA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 2f7934de1dfe281c3e4446892eab6462.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:46:50 GMT
age: 72994
etag: "691a36cde98a9fe1660745dd811e0be2ae67036c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp
200 OK 3.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 494a826ce7609ee5cc8157ea5de5f4f7
3d28f2daeef33f37c91bd26cb527793288635103
09f702f40e29e6b0c27abc5c7bb4605e504453b543c92805ba4045bd3d65c4d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feac38eda-2bed-4703-8560-7d07ad90dabc.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3337
x-amzn-requestid: 5a06b710-2b88-435e-8863-3e0e58742e6d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: alJ21FjooAMFp8Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63585691-2adc1ac2375e087b20ad0e32;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 21:35:13 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: iVIdtyyk_ph8AiTsWdQgDfWFHVIMh2pw4yrkufwogd3rsZFXwslwkg==
via: 1.1 a8e5d5aeee6eacca5c379e5059b1f68c.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Tue, 25 Oct 2022 21:46:52 GMT
age: 72992
etag: "3d28f2daeef33f37c91bd26cb527793288635103"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 531f350512ac7712d932234803aa4602
2fb4599ad3d513a160c1f29fefda27b45852c381
7a4da3420f736c098806676359b8ff80578a2e1e98fc0e20e45e2d6192e1d566
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fda327ff0-bd82-4034-a53b-e04d5c486276.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8090
x-amzn-requestid: a84a2888-e0eb-40d3-8377-9c1ea2af733c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aVb2oH2uoAMFueA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63520cf7-204870ee3f63ced427033eb5;Sampled=0
x-amzn-remapped-date: Fri, 21 Oct 2022 03:07:35 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: fUBXr7SKYdvhryoB8p9to-Eo8twjspRYnHO2xf9TtvLJIIyOwe3W1w==
via: 1.1 1de1880e08f1cae7d1aca174a29a5c1e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 05:07:50 GMT
age: 46534
etag: "2fb4599ad3d513a160c1f29fefda27b45852c381"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash db946866312c734e0c5f91ca76255b2f
e8b8236baab9106a426a415eb01494cc4cc91ad1
a695e7bc87da2c6d9f5669c09e662fe22982e69cb139466efa5093429fe19866
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae122c0f-a41b-4abc-a703-a5de223ae39a.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8439
x-amzn-requestid: e0eed725-0725-4f5a-9c91-fec13ad0ebe5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ajKYQGWhIAMFdhw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63578a9b-2a0115120e75f5271cea992f;Sampled=0
x-amzn-remapped-date: Tue, 25 Oct 2022 07:04:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: WVz4PqWqT9Pk1juQ95Xzi-7HcEDBqKb5VAncjXxOYFfKTnjRbmodoA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 04:44:59 GMT
age: 47905
etag: "e8b8236baab9106a426a415eb01494cc4cc91ad1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 91ee720c15dc69de45080d0c951353af
5292b31a99d90bcb7071f327b93d52034bdf9dcb
7fbe9f0f6db08fd539f2e8d4ac22e3b4d5ca14f7cde69f8424cce8b361d026e6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fadc5382d-fbb1-4d8e-8ee0-d7dcda16508e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4524
x-amzn-requestid: a493efe7-11c7-4032-b36b-7f838f8180bc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aljicH_6IAMFqpQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63587fa9-0f15eae7680ea7b15e5e47ec;Sampled=0
x-amzn-remapped-date: Wed, 26 Oct 2022 00:30:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OV7g4Y4fcQGijljebzHQtnpKdcPKw6LTxqORxxBJL2lFPYQLLoyNuQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 31119c39c5a6dc62dfa1fe940afd7be2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 26 Oct 2022 00:34:40 GMT
age: 62924
etag: "5292b31a99d90bcb7071f327b93d52034bdf9dcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
de-checking-6019.cfd/de/uadmin/gate.php?pl=token&link=sparkasse-shima&bid=595c01a5ab0c681fc6ec388cbe7db699&callback=jQuery321017086822104857557_1666807400088&data=%7B%22online_bider%22%3A1%2C%22w%22%3A0%2C%22dev%22%3A3%7D&_=1666807400090
200 OK 84 B URL HTTP/1.1 de-checking-6019.cfd/de/uadmin/gate.php?pl=token&link=sparkasse-shima&bid=595c01a5ab0c681fc6ec388cbe7db699&callback=jQuery321017086822104857557_1666807400088&data=%7B%22online_bider%22%3A1%2C%22w%22%3A0%2C%22dev%22%3A3%7D&_=1666807400090
IP
File type ASCII text, with no line terminators
Hash 1ec2460ab8db8915a5cb24237ebbc026
43bb6a8669a24912d69961b8272d6cb6635209cc
9071abbae4b9c6f1dda12abf6b19c0fac874eeb5908e24ec9c3de8308ed73990
GET /de/uadmin/gate.php?pl=token&link=sparkasse-shima&bid=595c01a5ab0c681fc6ec388cbe7db699&callback=jQuery321017086822104857557_1666807400088&data=%7B%22online_bider%22%3A1%2C%22w%22%3A0%2C%22dev%22%3A3%7D&_=1666807400090 HTTP/1.1
Host: de-checking-6019.cfd
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Cookie: bid=595c01a5ab0c681fc6ec388cbe7db699; lng=de
HTTP/1.1 200 OK
Date: Wed, 26 Oct 2022 18:03:28 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lHQ9OV%2BYzuu%2BQo%2F9IocKmw6IUw5qrds5A6kyerkbDwlczMoVjg3uEXOji7EQ3adT43qs2BwqvN635KSldRBKWp%2F9WZk4C7Xcl5L87rF19H84dfk1OUf1yarXW97xxZY4n1TXKxHeXg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76051be1bff7b4e8-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
104.21.47.83
104.21.47.83
23.36.76.226
93.184.220.29
34.160.144.191